Posts Tagged ‘email security’
7 Reasons to Ditch That Free Email Address
Written by Jeff Orloff on January 9, 2012 – 6:00 pm -
When starting out, many small businesses set up their email using one of the free accounts available to them. Services like Gmail by Google, Hotmail from Microsoft or Yahoo!’s mail service, provide a working email address with almost no maintenance for a business just getting its feet wet.
However this may not be the best way to make a first impression with your potential customers.
Listed below are seven reasons why you need to ditch the yourcompany@freeemail.com and go with an address that better reflects the image you want your company to have. Continue reading 7 Reasons to Ditch That Free Email Address
Posted in email management | 4 Comments »
5 Creative Uses For Email
Written by Jeff Orloff on January 4, 2012 – 6:57 pm -
You may have read the stories about how Atos Origin, a French IT services company, is looking to make their offices an email-free workplace by the year 2013 to eliminate what they call email pollution.
By turning to collaborative social medial tools, such as the Atos Wiki, employees have already seen a 20% reduction in “email pollution” six months after this initiative went into practice.
Volkswagen has also attempted to cut back on after hour’s emails being sent to and from employees Blackberrys in a similar effort. However, while cutting back on emails like Atos is trying to do may seem trend setting, it hardly seems to be a realistic goal.
Not only because of how many workplaces have become reliant on emails to get work done, but rather how these people use email to get work done.
As we all know, emails are not only used to deliver electronic messages. People in office buildings all over the world have found ways to “hack” their email accounts to do much more than send and receive messages. Continue reading 5 Creative Uses For Email
Posted in email management | 3 Comments »
Yes, My Email Account Was Compromised
Written by Jeff Orloff on December 21, 2011 – 4:00 pm -
This morning I noticed the flashing red light on my Blackberry alerting me to a new message. Since this device is connected to my work email account, I decided to give it a look to see what was so important that it couldn’t wait until Monday.
I was lucky that I did check it. The new message was actually from my personal email account and the contents of the message contained only one link and other people were also sent the same message.
I realized immediately that my personal email account was sending spam. I was upset with this because working with email and security, I write and train others on best practices. Not only this, but I follow them as well. I make sure that: Continue reading Yes, My Email Account Was Compromised
Posted in email security, security | 3 Comments »
Plugging Email Leaks Becoming Tougher Than Ever
Written by John P Mello Jr on December 16, 2011 – 4:00 pm -
There’s an appealing logic to the notion that as technologies focused on a problem improve, the problem will diminish. That’s not always the case, however, and it may not be so when it comes to plugging email leaks.
Technologies don’t develop in bubbles. While improvements in Data Loss Prevention (DLP) technology are advancing, so are other technologies, technologies and trends that can offset or undermine those improvements. Continue reading Plugging Email Leaks Becoming Tougher Than Ever
No Email at Work? Inconceivable!
Written by Casper Manes on December 8, 2011 – 4:00 pm -
Or is it? In a move that will have technology professionals first aghast, and then scratching their head, and finally a little jealous, Thierry Breton, the Chief Executive Office of the French information technology company ATOS has enacted a policy of “zero email”, in essence, banning internal email.
With more than 74,000 employees in 42 countries and 2010 revenues of $11.5 billion, this is not a small statement or a simple change in corporate culture.
It’s Time to Stop the Madness
Written by Casper Manes on October 28, 2011 – 4:00 pm -
Like so many of you out there, I upgraded my Apple device to iOS 5 recently, and with that I found that I could get a free email account in the iCloud, an @me.com email address. My immediate response was to go “heck yeah!” and sign up for it. I did, added it to my other devices, and only then did I stop to think for a moment about what I did. That made five, yes, that’s right, FIVE email accounts that my phone would check every so many minutes to interrupt my day with yet another notification that I must check to see what someone sent me. That’s now FIVE email accounts I have to worry about filtering for spam, and securing with unique usernames and passwords, and that I will have to search through when, six months after reading an email and remembering only vaguely what it was about, need to find it again. Continue reading It’s Time to Stop the Madness
Novell Patches Critical Issue in Groupwise
Written by Casper Manes on October 7, 2011 – 4:00 pm -
Administrators of Novell’s flagship messaging and collaboration product Groupwise should move quickly to apply the latest security patch from Novell, which addresses multiple vulnerabilities that could lead to code execution.
The Groupwise Internet Agent (GWIA) is responsible for all SMTP connections with external mail systems, and it was discovered recently that this agent has three distinct memory corruption issues that can be exploited when the GWIA parses rule variables in weekday, weekly, and yearly vcalendar messages.
Posted in email management, email security | 3 Comments »
Vendors respect the BEAST
Written by Casper Manes on October 5, 2011 – 4:00 pm -
Late last month we reported on the vulnerability in TLS 1.0 in Keep Calm and Carry On and over at our sister blog AllSpammedUp.com in “Holy [Insert Expletive Here]! Et Tu, SSL?”. Security researchers Thai Duong and Juliano Rizzo developed an application, called the BEAST which demonstrated the ability to capture authentication cookies protected in transit using TLS 1.0. BEAST, which stands for Browser Exploit Against SSL/TLS, was demonstrated by the pair at the Ekoparty Security Conference, and apparently caught the attention of several vendors since the vulnerability that BEAST exploits has been known for years. Remember, we care about this both because webmail uses HTTPS, and many of our email protocols can be secured with TLS 1.0. BEAST may only attack web browser traffic today, but the flaw is in TLS, which means it affects everything that uses TLS. Continue reading Vendors respect the BEAST
Inside Every Cloud Is a Silver Lining
Written by Casper Manes on September 23, 2011 – 4:00 pm -
You’d have to have spent the last two years of your professional career living under a rock to have not come across “the cloud”. The cloud – this; the cloud – that; the cloud, the cloud, the cloud… Cloud computing promises to be the next sea change in information technology, as more and more Somethings as a Service (*aaS) hit the market, with every player from Microsoft and Google all the way down to JoeBob’s Hosting trying to get in on the action.
Email services look to be the most common, some of the easiest to move to the cloud, and certainly of the most interest to readers of this blog. My colleagues Jeff Orloff and Paul Mah have both written some great articles around this topic already. Today, I want to talk about cloud based email services from a different point of view; that of the email admin who thinks the cloud will make his or her job go away.
Understanding Email Encryption (Part 2)
Written by Jeff Orloff on August 23, 2011 – 4:00 pm -
In Understanding Email Encryption Part 1 I covered not only why encrypting email is important, but also the two different types of email encryption: asymmetrical and symmetrical.
There was another section that briefly mentioned some of the barriers that impede buy-in from management when it comes to an encryption solution. But these were only touched upon.
Unfortunately when it comes to making a pitch for encryption, those who understand the need for it are an easy sell. Those who either don’t understand it or see the need for it often cite one or more of these stigmas that are attached to email encryption as reason to avoid it. Continue reading Understanding Email Encryption (Part 2)
Posted in Compliance, email security, security | 4 Comments »


