<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>Cisco Blog &#187; Seth Hanford</title>
	<atom:link href="http://blogs.cisco.com/author/SethHanford/feed/" rel="self" type="application/rss+xml" />
	<link>http://blogs.cisco.com</link>
	<description></description>
	<lastBuildDate>Fri, 24 May 2013 10:03:46 +0000</lastBuildDate>
	<language>en-US</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	
		<item>
		<title>Chronology of a DDoS: SpamHaus</title>
		<link>http://blogs.cisco.com/security/chronology-of-a-ddos-spamhaus/</link>
		<comments>http://blogs.cisco.com/security/chronology-of-a-ddos-spamhaus/#comments</comments>
		<pubDate>Thu, 28 Mar 2013 21:27:49 +0000</pubDate>
		<dc:creator>Seth Hanford</dc:creator>
				<category><![CDATA[Security]]></category>
		<category><![CDATA[Cisco Security]]></category>
		<category><![CDATA[cisco sio]]></category>
		<category><![CDATA[DDoS]]></category>
		<category><![CDATA[distributed denial of service]]></category>
		<category><![CDATA[dns]]></category>
		<category><![CDATA[DNS reflection attack]]></category>
		<category><![CDATA[spamhaus]]></category>
		<category><![CDATA[TRAC]]></category>

		<guid isPermaLink="false">http://blogs.cisco.com/?p=107915</guid>
		<description><![CDATA[Around 12:00 GMT March 16, 2013, a distributed denial of service (DDoS) attack took offline both the spamhaus.org website and [...]]]></description>
		<wfw:commentRss>http://blogs.cisco.com/security/chronology-of-a-ddos-spamhaus/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Thoughts on DarkSeoul: Data Sharing and Targeted Attackers</title>
		<link>http://blogs.cisco.com/security/thoughts-on-darkseoul-data-sharing-and-targeted-attackers/</link>
		<comments>http://blogs.cisco.com/security/thoughts-on-darkseoul-data-sharing-and-targeted-attackers/#comments</comments>
		<pubDate>Wed, 27 Mar 2013 20:22:40 +0000</pubDate>
		<dc:creator>Seth Hanford</dc:creator>
				<category><![CDATA[Security]]></category>
		<category><![CDATA[banking trojan]]></category>
		<category><![CDATA[Cisco Security]]></category>
		<category><![CDATA[cisco sio]]></category>
		<category><![CDATA[darkseoul]]></category>
		<category><![CDATA[DDoS]]></category>
		<category><![CDATA[malware]]></category>
		<category><![CDATA[south korean ddos attack]]></category>
		<category><![CDATA[TRAC]]></category>

		<guid isPermaLink="false">http://blogs.cisco.com/?p=107680</guid>
		<description><![CDATA[The attacks against South Korean media and banking organizations last week severely disrupted a handful of organizations with a coordinated [...]]]></description>
		<wfw:commentRss>http://blogs.cisco.com/security/thoughts-on-darkseoul-data-sharing-and-targeted-attackers/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>6.5 million password hashes suggest a possible breach at LinkedIn</title>
		<link>http://blogs.cisco.com/security/6-5-million-password-hashes-suggest-a-possible-breach-at-linkedin/</link>
		<comments>http://blogs.cisco.com/security/6-5-million-password-hashes-suggest-a-possible-breach-at-linkedin/#comments</comments>
		<pubDate>Wed, 06 Jun 2012 19:59:00 +0000</pubDate>
		<dc:creator>Seth Hanford</dc:creator>
				<category><![CDATA[Security]]></category>
		<category><![CDATA[best practices]]></category>
		<category><![CDATA[Breach]]></category>
		<category><![CDATA[Hash]]></category>
		<category><![CDATA[infosec]]></category>
		<category><![CDATA[it security]]></category>
		<category><![CDATA[linkedin]]></category>
		<category><![CDATA[password breach]]></category>
		<category><![CDATA[passwords]]></category>
		<category><![CDATA[security]]></category>
		<category><![CDATA[SHA-1]]></category>

		<guid isPermaLink="false">http://blogs.cisco.com/?p=71747</guid>
		<description><![CDATA[LinkedIn is believed to have suffered a password <a title="hash" href="http://en.wikipedia.org/wiki/Cryptographic_hash_function" target="_blank">hash</a> breach (updated: LinkedIn has <a title="LinkedIn" href="http://blog.linkedin.com/2012/06/06/linkedin-member-passwords-compromised/" target="_blank">confirmed</a> the breach), thanks to a forum post that [...]]]></description>
		<wfw:commentRss>http://blogs.cisco.com/security/6-5-million-password-hashes-suggest-a-possible-breach-at-linkedin/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>NCSAM Tip #9: Anonymity Online &#8212; Profile Management for Personal Safety</title>
		<link>http://blogs.cisco.com/security/ncsam-tip-9-anonymity-online-profile-management-for-personal-safety/</link>
		<comments>http://blogs.cisco.com/security/ncsam-tip-9-anonymity-online-profile-management-for-personal-safety/#comments</comments>
		<pubDate>Thu, 13 Oct 2011 13:49:43 +0000</pubDate>
		<dc:creator>Seth Hanford</dc:creator>
				<category><![CDATA[Security]]></category>
		<category><![CDATA[cyber-security-month-2011]]></category>
		<category><![CDATA[security]]></category>

		<guid isPermaLink="false">http://blogs.cisco.com/?p=46469</guid>
		<description><![CDATA[Social networking sites like Facebook are great tools for connecting with friends and keeping up-to-date with the good and bad things that are going on in your social circles. Unfortunately, the kind and amount of personal information that makes for great social networking can be used by people with bad intentions to cause real, physical harm. Sound far-fetched? After a referee made a controversial call in a baseball game, someone with his same name received threats meant for the ref. Today's security awareness tip is about profile management: developing habits that help you to stay in control of the information that's available about you online, to keep you safe in the real world.]]></description>
		<wfw:commentRss>http://blogs.cisco.com/security/ncsam-tip-9-anonymity-online-profile-management-for-personal-safety/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Bitcoin Security Architecture: A Brief Overview</title>
		<link>http://blogs.cisco.com/security/bitcoin-security-architecture-a-brief-overview/</link>
		<comments>http://blogs.cisco.com/security/bitcoin-security-architecture-a-brief-overview/#comments</comments>
		<pubDate>Tue, 12 Jul 2011 21:23:51 +0000</pubDate>
		<dc:creator>Seth Hanford</dc:creator>
				<category><![CDATA[Security]]></category>
		<category><![CDATA[security]]></category>

		<guid isPermaLink="false">http://blogs.cisco.com/?p=36471</guid>
		<description><![CDATA[Bitcoin is an emerging technical and economic phenomenon, based upon a self-published <a href="http://www.bitcoin.org/bitcoin.pdf" target="_blank">paper by Satoshi Nakamoto.</a> Many sites have taken notice of Bitcoin and have published some very thoughtful “what is Bitcoin,” “How-to get started” documentation. But the resources available to address Bitcoin are few, and primarily oriented toward enthusiasts, casual hobbyists, or those interested in making and securing a profit off of Bitcoin generation (“mining”). In this post, we make an effort to extend the Bitcoin security body of knowledge, but from an organizational perspective: what are the risks associated with adopting Bitcoin, intentionally or unintentionally.]]></description>
		<wfw:commentRss>http://blogs.cisco.com/security/bitcoin-security-architecture-a-brief-overview/feed/</wfw:commentRss>
		<slash:comments>9</slash:comments>
		</item>
		<item>
		<title>iPhone Location Tracking: Important, Even if it Doesn&#8217;t Matter to You</title>
		<link>http://blogs.cisco.com/security/iphone-location-tracking-important-even-if-it-doesnt-matter-to-you/</link>
		<comments>http://blogs.cisco.com/security/iphone-location-tracking-important-even-if-it-doesnt-matter-to-you/#comments</comments>
		<pubDate>Mon, 25 Apr 2011 19:50:54 +0000</pubDate>
		<dc:creator>Seth Hanford</dc:creator>
				<category><![CDATA[Security]]></category>
		<category><![CDATA[mobility]]></category>
		<category><![CDATA[privacy]]></category>
		<category><![CDATA[security]]></category>

		<guid isPermaLink="false">http://blogs.cisco.com/?p=28557</guid>
		<description><![CDATA[Apple's iOS mobile device operating system has recently come under fire in the media for tracking user location, recoverable from device backups of a file called <strong>consolidated.db</strong>. As we discussed in the <a href="http://www.cisco.com/web/about/security/intelligence/CRR_apr18-24.html#5" target="_blank">Cyber Risk Report</a>, even though Apple has disclosed location tracking via their Privacy Policy, significant commentary online suggests that users are surprised to learn how it is accomplished. The researchers whose efforts have brought this location tracking to wide attention were aware that forensics experts knew about it, but developed their tool to bring this to a wider attention. By all accounts, they have succeeded in raising awareness; what remains is to understand what should be done from here.]]></description>
		<wfw:commentRss>http://blogs.cisco.com/security/iphone-location-tracking-important-even-if-it-doesnt-matter-to-you/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Incomplete Reporting of Law Enforcement Electronic Surveillance May Skew Risk Assessments</title>
		<link>http://blogs.cisco.com/security/incomplete-reporting-of-law-enforcement-electronic-surveillance-may-skew-risk-assessments/</link>
		<comments>http://blogs.cisco.com/security/incomplete-reporting-of-law-enforcement-electronic-surveillance-may-skew-risk-assessments/#comments</comments>
		<pubDate>Wed, 20 Apr 2011 00:09:06 +0000</pubDate>
		<dc:creator>Seth Hanford</dc:creator>
				<category><![CDATA[Security]]></category>
		<category><![CDATA[privacy]]></category>
		<category><![CDATA[security]]></category>

		<guid isPermaLink="false">http://blogs.cisco.com/?p=28092</guid>
		<description><![CDATA[Risk assessments are the underpinning of all effective security programs. It's quite difficult to best prioritize defensive efforts without a proper valuation of assets to be protected, consideration of threats against those assets, and some means to establish a probable rate at which those threats will result in a particular impact. Because risk assessments describe the priorities of the organization through the perspective of minimizing impact from security events, they must be regularly reviewed to ensure not only that the assets and activities of the organization are current, but also that the current threats are properly accounted for.]]></description>
		<wfw:commentRss>http://blogs.cisco.com/security/incomplete-reporting-of-law-enforcement-electronic-surveillance-may-skew-risk-assessments/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Mobile Device Security: Fragmented, Complex, and Taking a Backseat to Usability</title>
		<link>http://blogs.cisco.com/security/mobile-device-security-fragmented-complex-and-taking-a-backseat-to-usability/</link>
		<comments>http://blogs.cisco.com/security/mobile-device-security-fragmented-complex-and-taking-a-backseat-to-usability/#comments</comments>
		<pubDate>Thu, 10 Mar 2011 14:51:21 +0000</pubDate>
		<dc:creator>Seth Hanford</dc:creator>
				<category><![CDATA[Security]]></category>

		<guid isPermaLink="false">http://blogs.cisco.com/?p=22988</guid>
		<description><![CDATA[Global <a href="http://tech.fortune.cnn.com/2011/02/07/idc-smartphone-shipment-numbers-passed-pc-in-q4-2010/" target="_blank">smartphone sales have finally eclipsed PC sales</a> for the first time in history, and that's without counting the millions of non-phone devices like tablets that tend to share the operating systems and functionality of their phone-based brethren. Based on these numbers, it is disappointing to see the state of security in devices that have taken the world by storm. Design decisions, policies, and various stakeholders have resulted in a fairly hostile device ecosystem in which, for example, <a href="http://www.cisco.com/web/about/security/intelligence/CRR_feb28-mar06.html#6" target="_blank">users can be easily fooled into installing malware on their phones</a>.]]></description>
		<wfw:commentRss>http://blogs.cisco.com/security/mobile-device-security-fragmented-complex-and-taking-a-backseat-to-usability/feed/</wfw:commentRss>
		<slash:comments>1</slash:comments>
		</item>
		<item>
		<title>Controlling the Flow of Information in the 21st Century</title>
		<link>http://blogs.cisco.com/security/controlling-the-flow-of-information-in-the-21st-century/</link>
		<comments>http://blogs.cisco.com/security/controlling-the-flow-of-information-in-the-21st-century/#comments</comments>
		<pubDate>Mon, 07 Feb 2011 17:54:17 +0000</pubDate>
		<dc:creator>Seth Hanford</dc:creator>
				<category><![CDATA[Security]]></category>
		<category><![CDATA[security]]></category>
		<category><![CDATA[social media]]></category>

		<guid isPermaLink="false">http://blogs.cisco.com/?p=19628</guid>
		<description><![CDATA[As we mentioned in last week's Cyber Risk Report, "The issue at hand is no longer whether or even to what extent the revolution is being tweeted, the question henceforth is how are information networks to be managed."]]></description>
		<wfw:commentRss>http://blogs.cisco.com/security/controlling-the-flow-of-information-in-the-21st-century/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Gawker Media Compromise &#8211; Lessons Learned</title>
		<link>http://blogs.cisco.com/security/gawker-media-compromise-lessons-learned/</link>
		<comments>http://blogs.cisco.com/security/gawker-media-compromise-lessons-learned/#comments</comments>
		<pubDate>Wed, 15 Dec 2010 19:56:44 +0000</pubDate>
		<dc:creator>Seth Hanford</dc:creator>
				<category><![CDATA[Security]]></category>

		<guid isPermaLink="false">http://blogs.cisco.com/?p=15927</guid>
		<description><![CDATA[This past weekend, Gawker Media began notifying more than 1.3 million users, across its variety of website properties, that their user databases and other information assets had been compromised. A complete dump of the user database was being distributed via BitTorrent, and a pastebin.com log of various details was posted (this has since been removed). As details emerge and are analyzed, it appears that the breach was a final act from a group that had gained fairly considerable access to Gawker Media, and had reviewed and extracted a great deal of information for at least a month.]]></description>
		<wfw:commentRss>http://blogs.cisco.com/security/gawker-media-compromise-lessons-learned/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
	</channel>
</rss>
