The Father of Data Warehousing Bill Inmon @ TDWI – May 29

by joshuapiller | May 11, 2015 | Marketing, Newsletters

Bill Inmon, world-renowned expert, speaker and author on data warehousing, is widely recognized as the “Father of Data Warehousing.” He was also voted as “One of the Ten IT People Who Mattered in the Past Forty Years” by the Computer World Magazine’s July 2007 issue. He is creator of the Corporate Information Factory and more recently, creator of the Government Information Factory. With over 35 years of experience in database technology management and data warehouse design, he has been a keynote speaker for many major computing association and many industry conferences, seminars, and tradeshows. Newest Book: Data Architecture: A Primer for the Data Scientist: Big Data, Data Warehouse and Data Vault; Nov 26, 2014 by W.H. Inmon and Dan Linstedt.

SFTA Panel – Guest Facing Technology

by joshuapiller | May 11, 2015 | Marketing, Newsletters

Recruiting? Beware malware-infected job applications

by Steve Earle | May 11, 2015 | Marketing, Newsletters

Many thanks to our friend Michael Scheidell of Security Privateers for alerting the Tech Hiring community to this danger.

The current shortage of qualified IT security professionals is affecting organizations across the United States, but now it seems that criminals are taking advantage of the booming job market in a new way: Proofpoint reports that cyber criminals have been infecting businesses with malware through fake job applications.

Combining “phishing and social engineering techniques in order to trick users into opening a malicious document”, criminals have been uploading infected files to online job site CareerBuilder.com, which exploit “a memory corruption vulnerability for Word RTF (such as CVE-2014-1761, CVE-2012-0158, and others).”

It may seem a labor-intensive way of attacking organizations, but because of this approach the “probability of the mail being delivered and opened is higher”. As Proofpoint notes, “recipients are likely to read them and open the attachments because not only are they legitimate emails from a reputable service, but these emails are expected and even desired by the recipient. Moreover, because of the way that resumes are circulated within an organization, once the document has been received by the owner of the job listing (often “hr@<company name>”) it will be sent to the hiring manager, interviewers, and other stakeholders, who will open and read it as well. Taking advantage of this dynamic enables the attackers to move laterally through their target organization.”

Having been alerted by Proofpoint, CareerBuilder “took prompt action to address the issue”, but other recruitment sites could still be vulnerable. We recommend you exercise caution when opening attachments from unknown sources – especially if you’re recruiting. Once infected with malware, organizations are at significant risk of data breach, or wider compromise.

by: Neil Ford