Allow iPods in the office? Perhaps it's time to reevaluate that
device policy, as iPods pose more danger to the corporate network
than it might seem. In this tip, contributor Peter Giannoulis
introduces pod slurping, the latest hacking technique, and explains
how revising corporate policies can prevent potential data leaks.

Three years have passed since CAN-SPAM was enacted, but has this legislation truly contained unsolicited commercial email? In this tip, contributor Joel Dubin examines if the law has effectively cracked down on spamming activities and examines how to put a stop to this email misuse.

From phishing threats to zero-day flaws, hackers have certainly developed many sophisticated ways to exploit vulnerabilities for their gain. And, as SearchSecurity.com's information security expert Ed Skoudis explains, new methods are constantly being discovered. In this podcast, Skoudis outlines 10 emerging malware trends and provides tools and tactics to defend against them.

From WMF exploits to the Veterans Affairs data breach, information security threats were plentiful in 2006. In this tip, contributor Joel Dubin reviews what grabbed the attention of hackers in the information security world in 2006 and explains how they set the tone for 2007.

Steganography is a useful technique for securely storing sensitive
data, but the difficulty in detecting its usage can create an
opportunity for digital miscreants. Michael Cobb explains how to
ensure the practice isn't used maliciously.

An enterprise database stores an organization’s most valuable assets, and just one small mistake can lead to a data security disaster. In this tip, Michael Cobb looks at five common database vulnerabilities and the simple steps that can eradicate them.

From image spam to cross-site scripting, hackers certainly have a large arsenal of weapons to choose from. But as AT&T recently learned, hackers are putting a new twist on ever-dependable phishing schemes to gain access to confidential and sensitive information. In this tip, Ed Skoudis examines how phishing tactics have evolved and what enterprises can do to defend themselves.

Malware is arguably growing faster than ever before, but not in ways the industry has come to expect. Even though the days of the superworm might be numbered, contributor Mike Chapple says it's time for organizations to adapt their defense postures because the next generation of threats won't be as easy to detect.

While blogging can be a useful marketing and communications tool, if not controlled it can pose significant risks to corporate information security. In this tip, SearchSecurity.com expert Mike Chapple examines these risks and how they can be reduced by creating and implementing blogging policies.

With headlines declaring data thefts becoming more prevalent and increasingly scarier, the need for enterprises to enforce laptop security is as crucial as ever. In this tip, Ed Skoudis reviews the pros and cons of laptop encryption and explains how, while it is the not the final solution, it can keep your data secure -- even if it falls in the hands of the enemy.