McAfee Secure Mark – Insecure !
The folks down at Skeptikal.org announced that a couple of CSRF (Cross Site Request Forgery) bugs were found on the McAfee website, Its funny that one of the bugs was found on “McAfee Secure” website which is a service that certifies the security of sites that conduct e-commerce and other sensitive transactions.
For several weeks the bugged website continued to have the (McAfee Secure ) trust mark, So you might think that either the SDLC that certify websites to bear this mark was not followed by McAfee or its simply flawed.
But I think its only natural because as we all know nothing is 100% secure so it means absolutely nothing to have such a mark on your website, In fact you introduce a new risk and thats loosing face and image for bearing a badge that says I am Perfect while you are not. because no body is perfect.
Even McAfee.
Quick Note: about 14,000 E-Commerce websites bear the mark
CIIP Events Calendar
- An error has occurred; the feed is probably down. Try again later.
George Mason CIP Reports (Monthly)
- An error has occurred; the feed is probably down. Try again later.
Okamalo Security Watch
- An error has occurred; the feed is probably down. Try again later.
CPNI Latest
- An error has occurred; the feed is probably down. Try again later.
Information Security News
- Indian bank’s IT is so shabby it’s been banned from opening new accounts
- Australia’s spies and cops want ‘accountable encryption’ - aka access to backdoors
- Governments issue alerts after 'sophisticated' state-backed actor found exploiting flaws in Cisco security boxes
- Shouldn't Teams, Zoom, Slack all interoperate securely for the Feds? Wyden is asking
- Microsoft cannot keep its own security in order, so what hope for its add-ons customers?
- Management company settles for $18.4M after nuclear weapons plant staff fudged their timesheets
- Google cools on cookie phase-out while regulators chew on plans
- US charges Iranians with cyber snooping on government, companies
- If Britain is so bothered by China, why do these .gov.uk sites use Chinese ad brokers?
- Mandiant: Orgs are detecting cybercriminals faster than ever
Visitors Map
CIP VIGILANCE 
Recent Comments