Alexander’s Blog

SecureWorks, a leading Managed IT Security Services Provider, announced that it has seen a dramatic increase in the number of hacker attacks attempted against its banking, credit union and utility clients in the past three months using SQL Injection (a type of Web application attack). “From January through March, we blocked anywhere from 100 to 200 SQL Injection attacks per day,” said SecureWorks CTO Jon Ramsey. “As of April, we have seen that number jump from 1,000 to 4,000 to 8,000 per day,” said Ramsey.

SQL Injection is a type of security exploit in which the attacker adds Structured Query Language (SQL) code to a Web form input box to gain access to an organization’s resources or to make changes to data. Using this technique, hackers can determine the structure and location of key databases and can download the database or compromise the database server. Click here for more information.

A suit filed by Microsoft in federal court in Seattle offers an interesting glimpse into the world of IT certification exams. It’s against Testking.com, which offers training materials to help people prepare for certification tests given by Microsoft and other companies. The gist of the complaint:

Microsoft is informed and believes, and on that basis alleges, that the Microsoft Certification Exam materials defendants sell through Testking.com contain exam questions and answers that are either identical or substantially similar to Microsoft’s copyrighted exam questions and answers. Microsoft has not licensed or authorized defendants to copy or distribute its copyrighted exam content.

Among other things, the suit outlines the measures Microsoft takes to try protect the exams from leaking out. Click here for more information.