Security Hole Found in KeePass Password Manager

password security

Earlier today researcher Benjamin Kunz Mejri, Vulnerability Lab, reported to ThreatPost that he had found a vulnerability in the open-source password manager, KeePass. The vulnerability is supposedly in the way the application filters and validates data. If exploited, the vulnerability could be used to inject malicious scripts. To work though it’d require a number of conditions…

Read More

The Beginning of the End: My New InfoSec Blog

Tony Perez

Today I start what is likely to be the beginning of the end for me. My knowledge of Information Security, in its basic form, goes back to 2009. That’s when, as a Defense Contractor, I found myself staring at the  Security Technical Implementation Guide (STIG) set forth by the Defense Information Systems Agency (DISA). The objective was…

Read More

Review of the WordPress AntiVirus Plugin – Effective or Not?

WordPress Security Plugin

After my most recent Review of the WordPress WordFence Plugin post I felt it was only fair that I take time to review the effectiveness of other similar security focused plugins in the WordPress.org repository. It’s important to understand that while I work for an InfoSec company my focus is not on whether its a…

Read More

Review of the WordFence Plugin – Effective or Not?

WordPress Security Plugin

As of late I have been seeing a lot of traffic on various mediums, WordPress.org, Twitter, and Facebook about this new plugin – WordFence. It hasn’t been around for too long I don’t think, maybe 6 months or so, and I have been getting a lot of questions around its effectiveness, etc… I get this…

Read More

Selecting a MAC Anti-Virus Solution

Mac Security

I am what most would consider to be a new adopter of Apple machines, less than 6 months, other than the obvious iPhone that is. It’s important to note though that this hasn’t been my first try, I attempted the conversion about 14 months ago and failed miserably. I found myself secretly getting my Windows…

Read More