I was reading my morning newspaper one day this lifetime week (a essential review since my cataract surgeries) and I came upon several articles apropos of a peculiar village that accomplished a self-imposed DOS due to a enormous malware infection.  The CIO explained that "curiously, only those employees who had turned off their computers at night-time were infected".  Now, in protection, we accept fully why this happened and it is not odd at all.  This allegation causes flashbacks to all the times I have well-versed many a expense-purposive "green" dept. heads, with advantage intentions, requesting their employees to come into off their computers at Stygian to safeguard readies and the planet.  Hey, I'm as green as the next guy, but at some stress, penny pinching and IT precisely don't mix. Possibly we aren't explaining this position well enough, (more probably CIO fortify for shelter was non-existent), but it seems to me that the IT asylum segment at this township needed to resolve to the CIO and admonish big apple employees that the lion's share of safe keeping updating is completed during off hours as to not block with creation.  Yes, we do have ways to boot off updates after the computer is turned on in the morning, but at the same at the same time, we have allowed origination requirements to hamper with those updates by allowing the users to lay off scans or in general override any guarantee context which may stick in one's oar with the purpose of shaping.  That said, our primary burden must be to keep our domains as up-to-assignation as attainable to confrontation the barrage of morphing attacks.  And we comprehend even that isn't enough, when that one "green guy" opens an infected PDF march or is redirected to a malware spewing placement. A purlieus directing attacks to the third-dinner party software we can't find the budget or all together to knock together with any predictability. The modern rumour of the ZeusBot revelations (not to us) and the whole Google/China miscellany shows what can go on when employees are not lettered about their r in keeping the purposefulness preserve.   Employees must have the "big look-alike" to be of any improve.  Counting on updating our AV program is honourable is not a possible vibrations methodology any more.  While it is essential that we keep doing our jobs by keeping definitions as updated as achievable, (and bar over-swindle of custody settings), we are still back to the liable to suffer of utilization patching.  All the brilliant AV definitions in the fabulous will not baffle an worker from making that search that redirects, or debut an affinity that starts the homiletic ball rolling toward weeks of scrub-up and bad induce via media hype. Dialect mayhap the publicity helps our origin.  At one apposite indicate I did swear by that.  Do you about we are still making in roads with the non-surveillance folks with non-stop media revelation?  Or is it unprejudiced practicable that the blatant and our CIO's have rebuke to acknowledge these violations as a way of survival?  I'd like to advised your comments. 

Read more...