Information Risk Management Plc.

Index

IRM is awarded Qualified Forensics Investigator (QFI) status by MasterCard - [posted 9th April 2008] [read more...]

IRM Demonstrates Multiple Cisco IOS Exploitation Techniques - [posted 10th October 2007] [read more...]

IRM Comments on the Computer Weekly PCI Article of 12 June 2007 - [posted 19th June 2007] [read more...]

IRM is now a PABP - [Posted 14th May 2007] [read more...]

IRM Has Become a PCI DSS QSA - [Posted 20th March 2007] [read more...]

IRM-developed Tool Included on Linux BackTrack - [Posted 14th March 2007] [read more...]

IRM Assist Sophos - During a recent forensic investigation IRM identified new variants of malicious worms exploiting the Microsoft vulnerability MS-04-11, which is associated with the buffer overflow in the "LSASS" service. As a result of the findings, antivirus vendor, Sophos updated its virus definition files that are distributed to companies using thier products. Links to the new information are shown below:

http://www.sophos.com/virusinfo/analyses/w32forbotjg.html
http://www.sophos.com/virusinfo/analyses/trojproxyfp.html

Special Release - [Posted 5th October 2005] One of IRM Plc's original founders and Ex Technical Director Professor Neil Barrett is appointed to advise on Microsoft's compliance with the 2004 decision by the European Commission [read more...]

Ghost in the Machine - WLAN Hacks - [Posted 1st April 2005]
Despite all the recent press surrounding the security of WLAN security, it's interesting to note there has been little mention of the fact that wireless hacking is also a form of identity theft. The act of tracing a wireless hack will only lead back to the originally breached access point (AP) - the one in your company's IT room. [read more...]

Black Hack on Bank - [Posted 17th March 2005]
The National High-Tech Crime Unit has just foiled what could have been one of the largest hacking attacks in banking history. Sumitono Mitsui bank was targeted by organised hackers using keylogging programs to track highly classified details including passwords and account numbers. [read more...]

Getting some Voice Over… Safely
Companies like Honda and other international organisations are starting to adopt new VoIP technology as a cost effective and innovative technology which can substantially cut overheads. However, accompanying the innovative VoIP package is an arsenal of security threats that must be considered. Firstly, companies must be aware of the dangers of freeware like VoIpong and Vomit. [read more...]

UK's First OSSTMM Accredited Trainers - [Posted 18th March 2005]
The UK has joined the rest of the world as a country offering Open Source Security Testing Methodology Manual (OSSTMM) training. [read more...]

Free Sex - Includes Virus! - [Posted 14th March 2005]
Got a message on your phone advertising ‘free sex'? No, this isn't the dawning of the age of mobile Aquarius. Free love waned way back in the sixties. It is, however, the dawning of a new age of smart phone virus attacks. [read more...]

Cyber Crime Could Find the Going Heavy - [Posted: 24th February 2005]
Had a death in the family? Don't print the bereavement in the local paper, it could be the perfect false identity for an online hacker or underage gambler. Is your online poker room hosting a hundred different players, all with the same IP address? Do you think the regulations that determine online gambling should be the same as those for offline gambling? These were just a few of the questions and issues addressed at the CCC2005 conference. [read more...]