<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>Security Fight Club</title>
	<atom:link href="http://www.securityfightclub.com/feed/" rel="self" type="application/rss+xml" />
	<link>http://www.securityfightclub.com</link>
	<description>Brought to you by Awareness Technologies</description>
	<lastBuildDate>Sat, 05 Jun 2010 04:08:44 +0000</lastBuildDate>
	<generator>http://wordpress.org/?v=2.9.2</generator>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
			<item>
		<title>What do you mean I can’t access my own database when trying to attach it?</title>
		<link>http://itknowledgeexchange.techtarget.com/sql-server/what-do-you-mean-i-cant-access-my-own-database-when-trying-to-attach-it/</link>
		<comments>http://itknowledgeexchange.techtarget.com/sql-server/what-do-you-mean-i-cant-access-my-own-database-when-trying-to-attach-it/#comments</comments>
		<pubDate>Sat, 05 Jun 2010 04:08:44 +0000</pubDate>
		<dc:creator></dc:creator>
				<category><![CDATA[Syndicated]]></category>
		<category><![CDATA[SQL Server with mrDenny]]></category>

		<guid isPermaLink="false">tag:itknowledgeexchange.techtarget.com://f75e9d7ada27451480dd40f5cfde245a</guid>
		<description><![CDATA[When you detach a database from Microsoft SQL (I'm talking SQL Server 2005 and up here) the SQL Server automatically changes the NTFS permissions on the file so that only the user who told the SQL Server to detach the file has access to them.  SQL Ser...]]></description>
			<content:encoded><![CDATA[When you detach a database from Microsoft SQL (I'm talking SQL Server 2005 and up here) the SQL Server automatically changes the NTFS permissions on the file so that only the user who told the SQL Server to detach the file has access to them.  SQL Server does this to ...]]></content:encoded>
			<wfw:commentRss>http://www.securityfightclub.com/what-do-you-mean-i-can%e2%80%99t-access-my-own-database-when-trying-to-attach-it/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Not everything needs a public IP address.</title>
		<link>http://itknowledgeexchange.techtarget.com/sql-server/not-everything-needs-a-public-ip-address/</link>
		<comments>http://itknowledgeexchange.techtarget.com/sql-server/not-everything-needs-a-public-ip-address/#comments</comments>
		<pubDate>Sat, 05 Jun 2010 04:08:43 +0000</pubDate>
		<dc:creator></dc:creator>
				<category><![CDATA[Syndicated]]></category>
		<category><![CDATA[SQL Server with mrDenny]]></category>

		<guid isPermaLink="false">tag:itknowledgeexchange.techtarget.com://10a337aa6e823c899bd6484fc63a9444</guid>
		<description><![CDATA[For those of you in bigger shops you can probably ignore this.  If you work in a smaller shop where everything in the datacenter has a public IP, this post is for you.

I find it truly amazing what some people will put a public IP address on, and allo...]]></description>
			<content:encoded><![CDATA[For those of you in bigger shops you can probably ignore this.  If you work in a smaller shop where everything in the datacenter has a public IP, this post is for you.

I find it truly amazing what some people will put a public IP address on, and allow access ...]]></content:encoded>
			<wfw:commentRss>http://www.securityfightclub.com/not-everything-needs-a-public-ip-address/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Clearing your DNS Cache</title>
		<link>http://www.securityfightclub.com/clearing-your-dns-cache/</link>
		<comments>http://www.securityfightclub.com/clearing-your-dns-cache/#comments</comments>
		<pubDate>Thu, 03 Jun 2010 23:09:29 +0000</pubDate>
		<dc:creator>mrdenny</dc:creator>
				<category><![CDATA[Awareness Technologies]]></category>

		<guid isPermaLink="false">http://www.securityfightclub.com/?p=201</guid>
		<description><![CDATA[If when you log into your Web Watcher or Sonar portal and you see a message asking you to clear your DNS cache we ask that you do so on any computers which you use to access our websites, as well as any computers which you are monitoring.
There are a few ways to clear the [...]]]></description>
			<content:encoded><![CDATA[<p>If when you log into your Web Watcher or Sonar portal and you see a message asking you to clear your DNS cache we ask that you do so on any computers which you use to access our websites, as well as any computers which you are monitoring.</p>
<p>There are a few ways to clear the cache on your computer.  The first and easiest is to simply reboot your computer.</p>
<p>If this isn&#8217;t an option for some reason there another way.  Click on the Start button, then click on Programs (or All Programs depending on how your computers is configured).  Then click on Accessories, and find the Command Prompt (it should look something like the picture below).</p>
<p><a href="http://www.securityfightclub.com/wp-content/uploads/2010/06/start_menu.jpg"><img class="alignnone size-full wp-image-202" title="start_menu" src="http://www.securityfightclub.com/wp-content/uploads/2010/06/start_menu.jpg" alt="" width="316" height="585" /></a></p>
<p>If you are using Windows Vista or Windows 7 and you have the User Access Controls (UAC) enabled right click on Command Prompt and select the &#8220;Run as Administrator&#8221; option from the menu (see the image below).  After you do this the screen will go gay, and ask you to confirm that you want to do this. Click Yes or Confirm depending on which one you are presented with.</p>
<p><a href="http://www.securityfightclub.com/wp-content/uploads/2010/06/right_click.jpg"><img class="alignnone size-full wp-image-203" title="right_click" src="http://www.securityfightclub.com/wp-content/uploads/2010/06/right_click.jpg" alt="" width="371" height="160" /></a></p>
<p>Now if you have Windows XP, or you have Windows Vista or Windows 7 without UAC enabled you won&#8217;t see the &#8220;Run as administrator&#8221; option.  In this case simply click on the Command Prompt item.</p>
<p>In either case at this point you should have a black box with a blinking cursor in it.  In the box type &#8220;ipconfig /flushdns&#8221; and press the enter or return key on your keyboard.  The window should look similar to the one shown below.</p>
<p><a href="http://www.securityfightclub.com/wp-content/uploads/2010/06/cmd.jpg"><img class="alignnone size-full wp-image-204" title="cmd" src="http://www.securityfightclub.com/wp-content/uploads/2010/06/cmd.jpg" alt="" width="677" height="342" /></a></p>
<p>One you get to this point you can click on the Red X in the upper right hand corner of the Command Prompt window and the window will close.</p>
<p>At this point you can navigate back to the site that directed you here (you should be able to just close the window or tab) and click the refresh button in the web browser.  If the message has gone away and you are greeted with the normal login prompt then you are all done (don&#8217;t forget that if you are monitoring a different computer than the one you view the data on you&#8217;ll want to follow these instructions on that computer as well).  If that message is still there then you fall into one of a few categories.</p>
<p>1. You are a corporate customer and your company&#8217;s internal DNS Servers have our old IP Addresses cached.</p>
<p>2. You are at work, but a personal customer and your companies internal DNS Servers have our old IP Addresses cached.</p>
<p>3. Your Internet Service Provider has our old IP Addresses cached and they aren&#8217;t following the guidelines that we published for how long to keep our addresses in the cache.</p>
<p>If you fall into group #1 or #2 then talk with your systems administrator at your work and ask them to clear the DNS cache on your internal DNS Servers.</p>
<p>If you fall into group #3 then your Internet Service Provider will eventually clear the cache of our IP Addresses automatically.  We ll monitor which ISPs aren&#8217;t clearing the cache and contact them to ask that they do so.</p>
<p>If you&#8217;ve gotten to this point and you are still getting the warning about connecting to the old IP Address please feel free to click the link on that page to take you to the login screen.  These things will sort themselves out in the long run, we just want to give you the best experience on our websites possible.</p>
<p>If you have any questions please feel free to contact our Customer Support department through your normal support options and they will be happy to assist you as quickly as possible.</p>
]]></content:encoded>
			<wfw:commentRss>http://www.securityfightclub.com/clearing-your-dns-cache/feed/</wfw:commentRss>
		<slash:comments>1</slash:comments>
		</item>
		<item>
		<title>Open RFP for CoLo space in the Los Angeles Area</title>
		<link>http://www.securityfightclub.com/open-rfp-for-colo-space-in-the-los-angeles-area/</link>
		<comments>http://www.securityfightclub.com/open-rfp-for-colo-space-in-the-los-angeles-area/#comments</comments>
		<pubDate>Tue, 06 Apr 2010 01:58:09 +0000</pubDate>
		<dc:creator>mrdenny</dc:creator>
				<category><![CDATA[Uncategorized]]></category>

		<guid isPermaLink="false">http://www.securityfightclub.com/?p=196</guid>
		<description><![CDATA[We have run into a situation where we have the need to move to another CoLo in the Los Angeles area.  As such we are putting out an open RFP to any CoLo facilities in the Los Angeles area who would wish to submit.
If any additional information about the RFP is needed the contact information [...]]]></description>
			<content:encoded><![CDATA[<p>We have run into a situation where we have the need to move to another CoLo in the Los Angeles area.  As such we are putting out an <a href="http://www.securityfightclub.com/wp-content/uploads/2010/04/Colo-Change-RFP.pdf">open RFP to any CoLo facilities</a> in the Los Angeles area who would wish to submit.</p>
<p>If any additional information about the RFP is needed the contact information is contained within the PDF linked to above.</p>
<p>The project is very time sensitive, and has a short date for proposals to be submitted.</p>
<p>Denny</p>
]]></content:encoded>
			<wfw:commentRss>http://www.securityfightclub.com/open-rfp-for-colo-space-in-the-los-angeles-area/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Data Deduplication RFP</title>
		<link>http://www.securityfightclub.com/data-deduplication-rfp/</link>
		<comments>http://www.securityfightclub.com/data-deduplication-rfp/#comments</comments>
		<pubDate>Fri, 02 Apr 2010 02:44:58 +0000</pubDate>
		<dc:creator>mrdenny</dc:creator>
				<category><![CDATA[Awareness Technologies]]></category>
		<category><![CDATA[RFP]]></category>

		<guid isPermaLink="false">http://www.securityfightclub.com/?p=185</guid>
		<description><![CDATA[We at Awareness Technologies are announcing that we have produced an RFP titled &#8220;Data Dedupliation RFP&#8221; for a data deduplication project which we are kicking off.  All vendors are welcome to submit a proposal following the guidelines within the RFP.
We are releasing the RFP here so that vendors with solutions which we may not be [...]]]></description>
			<content:encoded><![CDATA[<p>We at Awareness Technologies are announcing that we have produced an RFP titled &#8220;<a href="http://www.securityfightclub.com/wp-content/uploads/2010/04/Data-Dedupliation-RFP4.pdf">Data Dedupliation RFP</a>&#8221; for a data deduplication project which we are kicking off.  All vendors are welcome to submit a proposal following the guidelines within the RFP.</p>
<p>We are releasing the RFP here so that vendors with solutions which we may not be familiar with can submit proposals.</p>
<p>Denny</p>
<p>Update 4/1/2010 8:10pm (Pacific Time) &#8211; The document has been updated.</p>
]]></content:encoded>
			<wfw:commentRss>http://www.securityfightclub.com/data-deduplication-rfp/feed/</wfw:commentRss>
		<slash:comments>1</slash:comments>
		</item>
		<item>
		<title>Be careful what you say and post on the Internet</title>
		<link>http://www.securityfightclub.com/be-careful-what-you-say-and-post-on-the-internet/</link>
		<comments>http://www.securityfightclub.com/be-careful-what-you-say-and-post-on-the-internet/#comments</comments>
		<pubDate>Wed, 06 Jan 2010 17:30:46 +0000</pubDate>
		<dc:creator>mrdenny</dc:creator>
				<category><![CDATA[Personal Data]]></category>
		<category><![CDATA[Facebook]]></category>
		<category><![CDATA[Getting what you paid for]]></category>
		<category><![CDATA[MySpace]]></category>
		<category><![CDATA[Personal Information]]></category>
		<category><![CDATA[Twitter]]></category>

		<guid isPermaLink="false">http://www.securityfightclub.com/?p=179</guid>
		<description><![CDATA[When moving around the Internet always be careful with what you say and post online.  You never know when it will come back to bite you.
These days people are way to used to posting information on the Internet thanks to sites like MySpace and Facebook.  The downside to this is that everyone knows way more [...]]]></description>
			<content:encoded><![CDATA[<p>When moving around the Internet always be careful with what you say and post online.  You never know when it will come back to bite you.</p>
<p><span id="more-179"></span>These days people are way to used to posting information on the Internet thanks to sites like MySpace and Facebook.  The downside to this is that everyone knows way more information about everyone, including people that they don&#8217;t know personally.  It is amazingly easy to find out when people are out of town, or out at dinner, and where they are.</p>
<p>This is especially true of the younger kids on the Internet.  They may think nothing of posting way to much information on the Internet, information that you as a parent you don&#8217;t want them posting.</p>
<p>As these kids get older they may begin posting things on the Internet which could get them in some trouble at work, or even cost them their jobs.  There are several stories of people getting fired from their jobs by posting on Facebook, Twitter, etc.  Here&#8217;s a guy that was fired from a brand new job for posting <a href="http://moremoney.blogs.money.cnn.com/2009/04/21/fired-for-facebook-dont-let-it-happen-to-you/" target="_self">something stupid</a> on Twitter, or this girl who was fired for posting that her job <a href="http://news.cnet.com/8301-17852_3-10172931-71.html" target="_self">was boring</a> on Facebook.  There are countless others out there <a href="http://www.google.com/search?hl=en&amp;q=fired+because+of+facebook&amp;sourceid=navclient-ff&amp;rlz=1B3GGGL_enUS332US333&amp;ie=UTF-8" target="_self">just like these</a>.</p>
<p>The even bigger number who probably be the collage grads who don&#8217;t change there security status of their Facebook profiles before starting the job hunt.  All those fun college parties probably shouldn&#8217;t be public while looking for that first office job.  While the hiring manager assumes that you had a good time in school, the pictures of you doing a topless keg stand will not help you get the job.</p>
<p>Those of us that write and live our lives publicly are probably <a href="http://www.allenkinsel.com/archive/2009/11/sql-karaoke-volunteering-and-sqlpass/">not the best</a> examples <a href="http://www.allenkinsel.com/archive/2009/12/happy-holidays-tis-the-season/">to follow sometimes</a>, but we have been doing this a while, and when we interview we are given a little more leeway on some of this stuff than someone who is new to the field (what ever field that may be).</p>
<p>While it may not seem fair that your future employer is going to search the net looking for you, they are.  Live isn&#8217;t fair, and the company which may hire you needs to make sure that they are getting the best worker for their money, and how you spend your after hours time is taken into account.</p>
<p>While changing your security settings on Facebook is a good plan, it isn&#8217;t going to fix the problem.  Google, Bing, etc will have all those photo&#8217;s and posts cached so while Facebook won&#8217;t let someone see the page, the cached versions will still be available via the search engines, not to mention the <a href="http://www.archive.org/index.php">Internet Archive</a>.</p>
<p>Denny</p>
]]></content:encoded>
			<wfw:commentRss>http://www.securityfightclub.com/be-careful-what-you-say-and-post-on-the-internet/feed/</wfw:commentRss>
		<slash:comments>1</slash:comments>
		</item>
		<item>
		<title>Another round of SQL Injection attacks are happening RIGHT NOW&#8230;</title>
		<link>http://www.securityfightclub.com/another-round-of-sql-injection-attacks-are-happening-right-now/</link>
		<comments>http://www.securityfightclub.com/another-round-of-sql-injection-attacks-are-happening-right-now/#comments</comments>
		<pubDate>Fri, 11 Dec 2009 03:39:22 +0000</pubDate>
		<dc:creator>mrdenny</dc:creator>
				<category><![CDATA[Attack Scripts]]></category>
		<category><![CDATA[Databases]]></category>
		<category><![CDATA[External Threats]]></category>
		<category><![CDATA[SQL Injection]]></category>
		<category><![CDATA[SQL Server]]></category>

		<guid isPermaLink="false">http://www.securityfightclub.com/?p=177</guid>
		<description><![CDATA[That&#8217;s right you&#8217;ve heard it here first (ok, probably second or third, but at least in the top 10).  A hacking group is using SQL Injection attacks to break into websites in-mass and download malicious content from 318x.com.
As of December 10, 2009 over 132,000 websites have been compromised and are serving up the malicious content.  [...]]]></description>
			<content:encoded><![CDATA[<p>That&#8217;s right you&#8217;ve heard it here first (ok, probably second or third, but at least in the top 10).  A hacking group is using <a href="http://www.net-security.org/secworld.php?id=8604" target="_blank">SQL Injection attacks</a> to break into websites in-mass and download malicious content from 318x.com.</p>
<p>As of December 10, 2009 over 132,000 websites have been compromised and are serving up the malicious content.  The attack loads up an Iframe onto the websites via the data returned from the database which eventually leads the user (without there knowledge) to download data from 318x.com which then installats a rootkit-enabled variant of the Buzus backdoor trojan.  The full path of what happens can be found on the link above.</p>
<p>We&#8217;ve talked about the securing your website from SQL Injection attacks <a href="http://www.securityfightclub.com/gonzalez-tj-max-hacker-gets-15-25-years/" target="_blank">here</a>, <a href="http://www.securityfightclub.com/more-charges-filed-against-tjmax-hackers/" target="_blank">here</a> and <a href="http://www.securityfightclub.com/hackers-have-actually-broken-into-the-brazilian-power-grid/" target="_blank">here</a>, apparently there are tons of sites out there which haven&#8217;t been listening.</p>
<p>Denny</p>
]]></content:encoded>
			<wfw:commentRss>http://www.securityfightclub.com/another-round-of-sql-injection-attacks-are-happening-right-now/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>T-Mobile UK Employees have been seeing your information</title>
		<link>http://www.securityfightclub.com/t-mobile-uk-employees-have-been-seeing-your-information/</link>
		<comments>http://www.securityfightclub.com/t-mobile-uk-employees-have-been-seeing-your-information/#comments</comments>
		<pubDate>Wed, 25 Nov 2009 19:00:05 +0000</pubDate>
		<dc:creator>mrdenny</dc:creator>
				<category><![CDATA[Data Loss]]></category>
		<category><![CDATA[Internal Threats]]></category>
		<category><![CDATA[T-Mobile]]></category>

		<guid isPermaLink="false">http://www.securityfightclub.com/?p=174</guid>
		<description><![CDATA[OK, so the title is a little more scary than needed, but it did the job, and got you to look at the article.
Customers at T-Mobile UK have been found to have been selling customer information to data brokers who work on behalf of other cellular phone companies in the UK.Obviously T-Mobile wasn&#8217;t aware that [...]]]></description>
			<content:encoded><![CDATA[<p>OK, so the title is a little more scary than needed, but it did the job, and got you to look at the article.</p>
<p>Customers at T-Mobile UK have been found to have been <a href="http://news.bbc.co.uk/2/hi/uk_news/8364421.stm" target="_blank">selling customer information</a> to data brokers who work on behalf of other cellular phone companies in the UK.<span id="more-174"></span>Obviously T-Mobile wasn&#8217;t aware that this was happening. However they needed to put more projections in place to ensure that this didn&#8217;t happen. Hopefully other companies will learn from this data breach and ensure that their employees aren&#8217;t selling off customer data.  I can&#8217;t stress enough that this wasn&#8217;t an external break-in.  This was employees selling customer data which they got from the customer management system.</p>
<p>I also hope that the prosecution of people responsible for this data theft and sale makes the next person think twice about doing this.  As the case moves forward I&#8217;ll be sure to post updates here.</p>
<p>Denny</p>
]]></content:encoded>
			<wfw:commentRss>http://www.securityfightclub.com/t-mobile-uk-employees-have-been-seeing-your-information/feed/</wfw:commentRss>
		<slash:comments>2</slash:comments>
		</item>
		<item>
		<title>Hackers have actually broken into the Brazilian Power Grid</title>
		<link>http://www.securityfightclub.com/hackers-have-actually-broken-into-the-brazilian-power-grid/</link>
		<comments>http://www.securityfightclub.com/hackers-have-actually-broken-into-the-brazilian-power-grid/#comments</comments>
		<pubDate>Thu, 19 Nov 2009 20:43:54 +0000</pubDate>
		<dc:creator>mrdenny</dc:creator>
				<category><![CDATA[External Threats]]></category>
		<category><![CDATA[SQL Injection]]></category>
		<category><![CDATA[SQL Server]]></category>
		<category><![CDATA[Utility Companies]]></category>

		<guid isPermaLink="false">http://www.securityfightclub.com/?p=172</guid>
		<description><![CDATA[About a week ago 60 Minutes covered a story about hackers breaking into the Brazilian power grid and causing power outages through out the country.  The common believe is that this story wasn&#8217;t actually correct.  However hackers appear to have liked the idea, and have done what was originally claimed in the story.
Google has a [...]]]></description>
			<content:encoded><![CDATA[<p>About a week ago 60 Minutes covered a story about hackers breaking into the Brazilian power grid and causing power outages through out the country.  The common believe is that this story wasn&#8217;t actually correct.  However hackers appear to have liked the idea, and have done what was originally claimed in the story.<span id="more-172"></span></p>
<p>Google has a <a href="http://translate.google.com/translate?js=y&amp;prev=_t&amp;hl=en&amp;ie=UTF-8&amp;u=http%3A%2F%2Fg1.globo.com%2FNoticias%2FTecnologia%2F0%2C%2CMUL1380926-6174%2C00-HACKERS%2BINVADIRAM%2BSITE%2BDIZ%2BONS.html&amp;sl=pt&amp;tl=en" target="_blank">translation of the article</a>, and the <a href="http://g1.globo.com/Noticias/Tecnologia/0,,MUL1380926-6174,00-HACKERS+INVADIRAM+SITE+DIZ+ONS.html" target="_blank">original can be found here</a>.</p>
<p>The power company is question claims that the blackout which hit 18 Brazilian states on Tuesday was not caused by the hackers.  However the timing out the attack and the outage is very suspicious.  This just goes to show that utilities needs to take even more care that other companies to secure there environments to ensure that the services which they provide remain online as peoples live depend on the power staying on.</p>
<p>Based on the results of testing against the sites as reported <a href="http://darkreading.com/blog/archives/2009/11/how_to_hack_a_b.html;jsessionid=N4RKLB425E4DDQE1GHPSKHWATMY32JVN" target="_blank">by Darkreading</a> the standard SQL Injection attack may have been used in this case to attack the site and break in.  One would think that a company as large as a countries power company would be able to have developers which wouldn&#8217;t allow SQL Injection attacks.</p>
<p>Denny</p>
]]></content:encoded>
			<wfw:commentRss>http://www.securityfightclub.com/hackers-have-actually-broken-into-the-brazilian-power-grid/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Up to 9% of your companies computers may be part of a bot net</title>
		<link>http://www.securityfightclub.com/up-to-9-of-your-companies-computers-may-be-part-of-a-bot-net/</link>
		<comments>http://www.securityfightclub.com/up-to-9-of-your-companies-computers-may-be-part-of-a-bot-net/#comments</comments>
		<pubDate>Tue, 03 Nov 2009 18:00:52 +0000</pubDate>
		<dc:creator>mrdenny</dc:creator>
				<category><![CDATA[Uncategorized]]></category>
		<category><![CDATA[bot net]]></category>
		<category><![CDATA[DarkReading]]></category>
		<category><![CDATA[virus]]></category>

		<guid isPermaLink="false">http://www.securityfightclub.com/?p=152</guid>
		<description><![CDATA[In a recent article on DarkReading researchers have found that up to 9% of a large companies computers may be part of a bot net.The surprising part to this is that most of these computers are not part of the major bot net farms, but they are part of smaller bot nets with just a [...]]]></description>
			<content:encoded><![CDATA[<p>In a recent article on <a href="http://www.darkreading.com/" target="_blank">DarkReading </a>researchers have found that up to <a href="http://www.darkreading.com/insiderthreat/security/client/showArticle.jhtml?articleID=220200118" target="_blank">9% of a large companies computers</a> may be part of a bot net.<span id="more-152"></span>The surprising part to this is that most of these computers are not part of the major bot net farms, but they are part of smaller bot nets with just a few to a few hundred members.  Based on the article, most of these bot nets are targeted to the company which owns the computers the bots are sitting on.</p>
<p>According to the researchers who presented there findings recently at the <span> Virus Bulletin Conference in Geneva it appears that the bulk of these bot nets are controlled, or at least configured using inside information.  It also appears that the bulk of these bot nets controllers are very hands on, but they did not specify if the bots are being controlled from within the network or outside the network.</span></p>
<p>One very important piece of information which wasn&#8217;t included in this article which I think should have been, is the number of companies networks which they looked at.  If they looked at 5 companies to come up with these numbers then these are just scare tactics.  If they looked at 10,000 companies networks and 100% of them had infections, that&#8217;s a little more impressive; and way more meaning full.</p>
<p>Denny</p>
]]></content:encoded>
			<wfw:commentRss>http://www.securityfightclub.com/up-to-9-of-your-companies-computers-may-be-part-of-a-bot-net/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
	</channel>
</rss>

