Security Now - Security challenges come in many forms


ABTV Application Cloud Endpoint Infrastructure IoT/Embedded Mobile Network Operational Security Management
Sign up for our weekly newsletter! REGISTER NOW

News & Views Operational Technology Players Come Out of the Shadows Larry Loeb Author, \| 10/23/2019 Operational technology (OT) has long been the relative of information technology that has been hiding in the factories and sites of industrial installations. OT consists of the hardware and software that is dedicated to monitoring and controlling physical devices such as valves, pumps, etc. Post a Comment \| READ () Two Threat Actors, One Targeted Threat Larry Loeb Author, \| 10/22/2019 When the GrandCrab ransomware operators quit the arena, they left an vacuum that others have tried to fill. Post a Comment \| READ () Cylance Discovers WAV Files Can Hide Malware Larry Loeb Author, \| 10/21/2019 BlackBerry Cylance threat researchers Anuj Soni, Jordan Barth and Brian Marks recently discovered obfuscated malware code that was embedded within WAV audio files. The technique is called steganography, and has been used by malware operators before. Security Now previously detailed its use in malware-containing PDF files. Post a Comment \| READ () What's New in the EU Security Market Oliver Schonschek Security Now News Analyst, \| 10/18/2019 This October we visited the trade fair it-sa, which counts as one of the more important IT security exhibitions in the world. They hosted more than 750 security vendors from 25 countries who presented their solutions for the international market. We had a look, specifically, at new players and solutions coming from EU countries. Post a Comment \| READ () Unit 42 Finds the First Cryptojacking Docker Container Larry Loeb Author, \| 10/17/2019 Palo Alto Network's Unit 42 has found the first cryptocurrency miner malware that spreads like a worm through the use of Docker (community edition) containers. They say that it has spread to more than 2,000 unsecured Docker hosts. They call it "Graboid" which refers to the 1990s movie Tremors which has giant sandworms that act in bursts. Post a Comment \| READ () Artificial Intelligence & Cybersecurity: Making It Work for Your Organization Steve Durbin Managing Director, Information Security Forum, \| 10/16/2019 Artificial intelligence (AI) is creating a new frontier in information security. Systems that independently learn, reason and act will increasingly replicate human behavior. Just like humans, they will be imperfect, but also capable of achieving great things. Post a Comment \| READ () Even RATs Need Marketing Larry Loeb Author, \| 10/16/2019 Palo Alto Networks' Unit 42 researchers discovered a new and previously undocumented Remote Access Tool (RAT) last month and then blogged about it. They say that they found almost 50 instances of it in more than 2,200 attack sessions they monitored within the first month it was available for sale. The report goes into the RAT manager/builder, client ... Post a Comment \| READ () Don't Get Burned by Your Sophos Firewall Larry Loeb Author, \| 10/15/2019 A critical vulnerability in an Internet firewall appliance that is made by Sophos and may allow an unverified attacker to achieve root status (and thereby execute any sort of arbitrary command) has been detailed by Rob Mardisalu of TheBestVPN in a blog post. Post a Comment \| READ () CISO No Longer the Last Word on Security – Radware Larry Loeb Author, \| 10/14/2019 Radware, a security solutions vendor, teamed up with Enterprise Management Associates, Inc. (EMA) in July 2019 to conduct their third annual 2019 State of Web Application Security Report, which is a global, online survey. It collected 278 responses from executives and senior IT professionals at companies with at least 250 million USD/EUR/GBP in revenue ... Post a Comment \| READ () New 'Reductor' Malware Intercepts Browser Traffic Larry Loeb Author, \| 10/11/2019 Kaspersky has identified malware that takes a novel approach to intercepting both Chrome and Firefox browsers' encrypted traffic. They have identified targets of the malware to be in Russia and Belarus. Post a Comment \| READ () Encoding the Analyst: Why AI Security Tools Are Thinking Like an Expert – Only Faster Justin Fier Director, Threat Intelligence & Analytics, Darktrace, \| 10/10/2019 We're firmly in a brave new world of cyber defense. Soldiers now fight with ones and zeros and the digital enterprise is the new battleground. Both sides are arming up, trying to stay one step ahead of their opponent. But despite our best efforts, human defenders simply cannot process information at machine-speeds - and cybercriminals are taking advantage. Post a Comment \| READ () UK Businesses Feel the Heat as Cyber Attacks Rise 243% Over the Summer Larry Loeb Author, \| 10/9/2019 Beaming, the Hastings, UK-based business ISP, analyzed data from its customers and found that the number of cyber attacks its customers experienced had increased over last year's summer period by 243%. Post a Comment \| READ () Load More Articles + All Articles All Video All Slide Shows All Articles discussion board Christianaparker, 10/5/2019 6:36:53 AM New IoT Device Regulation Establishes Base Line for Security Re: Re: Why the wait? Certainly you can. There are similar constructions such as Why worry? but there is a one solution of Change AOL Email Password if you are stuck at aol mail issues so you can solve it throug visiting here. Post Your Reply julesjules, 7/24/2019 10:36:35 AM Palo Alto Networks Does Not Fully Address Vulnerability in GlobalProtect SSL VPN Solution Re: Confusing data in the post The original post was confusing unless you visited the actual PAN security advisory. The affected and updates were all in the same section without indication of what was what.Below is the info from the PAN advisory. Products Affected PAN-OS... Post Your Reply LarryLoeb, 5/30/2019 10:53:52 AM Mobile Fraud Is on the March, Finds New RSA Report Re: Re: Mobile fraud is bad for smartcric, live video star sports ipl live @roch.smartcric11 As time goes on, quite probably Post Your Reply batye, 5/24/2019 7:05:49 PM Suppliers Cut Off Huawei Re: Re: cut off @LarryLoeb interesting point, I could not agree more to it as remind of the the Cold War period - right after the WWII where KGB send well trained agents with suitecase of money to setup/buy legitamate Co. in the West... with purpose of... Post Your Reply LarryLoeb, 5/24/2019 5:57:49 AM Suppliers Cut Off Huawei Re: Re: cut off @Susan Companies can be agents of economic warfare. Would you change your view if you found Huawei's profits funded the Chinese army directly? (I have no such proof, btw. Making a point.) Post Your Reply Susan Fourtané , 5/24/2019 5:54:38 AM Suppliers Cut Off Huawei Re: Re: cut off I can't find it now but I have a statement from Huawei about this case. It's not right to try to put a company out of business for political reasons, Larry. Simply not right. The same with ZTE. Not right. Post Your Reply LarryLoeb, 5/24/2019 5:49:49 AM Suppliers Cut Off Huawei Re: Re: cut off @Susan I'm going to disagree. I think Huawei is inextriably linked with the government of China, a arm of it really, rather than some independent actor. China crushes independent actors. That doesn't mean the EO or the trade war is... Post Your Reply Susan Fourtané , 5/24/2019 5:34:00 AM Suppliers Cut Off Huawei Re: Re: cut off What the US government is doing to Chinese companies is war declaration. Technology and business should not be mixed with politics. Huawei is an independent company owned by its employees. What is happening is utterly ridiculous. Post Your Reply LarryLoeb, 5/22/2019 6:52:17 PM LightNeuron Sneaks In Through the Exchange Backdoor Re: Re: first @Ariella The little rotters never stand still. Post Your Reply Ariella, 5/22/2019 5:01:32 PM Cybercrime Study Finds Increasing Costs as Well as Changing Targets & Methods Re: Re: reliable stats? @mhhf1ve do you think it's higher or lower? Post Your Reply Ariella, 5/22/2019 5:00:32 PM DevSecOps Enables Security to Finally Move at the Speed of the Business Re: self-service I kind of like the idea of "self-service" security. I do go for self-service in other aspects of my life, so why not in security as well? Post Your Reply Ariella, 5/22/2019 4:58:49 PM LightNeuron Sneaks In Through the Exchange Backdoor Re: first Quite an accomplishment I guess. There is major innovation in the security breach world! Post Your Reply Next 5 messages + All messages All messages Chat 8/31/2017 3:54:21 PM Voice of Security Radio: A Security Partnership with Machine Learning: Thank you! klogan453 Keeper 8/31/2017 3:51:19 PM Voice of Security Radio: A Security Partnership with Machine Learning: Well, it seems like Steve and I managed to answer everyone's questions in our conversation. So I'll say thanks once again to Steve Grobman, CTO of McAfee, for being such a wonderful guest here on Voice of Security Radio! Curt Franklin Keeper 8/31/2017 3:47:35 PM Voice of Security Radio: A Security Partnership with Machine Learning: Thanks. Sr.Contr61262 Keeper 8/31/2017 3:47:19 PM Voice of Security Radio: A Security Partnership with Machine Learning: Thanks for helping out, Daren! Curt Franklin Keeper 8/31/2017 3:45:59 PM Voice of Security Radio: A Security Partnership with Machine Learning: (On behalf of Steve Grobman) - Data science and computer science expertise is definately in high demand by the cyber security technology industry as well as many other industries that are using similar capabilities daren Keeper 8/31/2017 3:44:38 PM Voice of Security Radio: A Security Partnership with Machine Learning: (On behalf of Steve Grobman) - There is not a formal certificatio process.. most users don't need to understand the nuance of the technology which is generally built by technology product providers daren Keeper 8/31/2017 3:42:40 PM Voice of Security Radio: A Security Partnership with Machine Learning: And how are mainline security pros/machine learning pros certified, i.e. how do you lknow that the person you're hiring to help you knows what they're dcoing? Sr.Contr61262 Keeper 8/31/2017 3:39:20 PM Voice of Security Radio: A Security Partnership with Machine Learning: Steve, one question we didn't get to is that of skilled practitioners. I know that mainline security pros are in short supply and high demand: Is it even worse when it comes to machine learning pros in the security space? Curt Franklin Keeper 8/31/2017 3:37:01 PM Voice of Security Radio: A Security Partnership with Machine Learning: Since I was late - and again - really sorry, I don't even know what to ask. Feel free to ask a question or my behalf. Sr.Contr61262 Keeper 8/31/2017 3:33:59 PM Voice of Security Radio: A Security Partnership with Machine Learning: Well folks, now's the time to ask any questions we didn't get to in the audio interview. Steve will be here in just a moment -- what would you like to know? Curt Franklin Keeper Next 5 chats +		Information Resources • Special Report: SD-Wan Security • Zero Trust: Organizations can begin to trust users, devices and transactions starting with a high level of IAM services and support • How to Unite Your Active Directories: Mergers, Acquisitions and Divestitures • Deliver a True Omni-Channel Experience • The Smart Way to Simplify PCI Compliance • Versa SD-WAN – Simple, Secure and Reliable Branch to Multi-Cloud Connectivity • Fortifying Your Branch Security • The Essential Guide to Understanding Risk and Quantification • 7 Experts on Threat and Vulnerability Management • A CISO’S Guide to Hybrid Cloud Security All resources upcoming Webinars Top Tips for Blocking pwned [email protected]$$wOrds in Your Organization Tuesday, October 29, 2019 12 p.m. New York/ 4:00 p.m. London More Webinars Webinar Archives Podcasts Podcast: Infrastructure Hunting – Stopping Bad Actors in Their Tracks Being able to effectively build a threat intelligence ecosystem or threat-hunting identification response requires both user and systems sophistication and capabilities. Security, orchestration, automation and response (SOAR) is a new technology designed to provide organizations a single comprehensive platform they can use to implement an intelligence driven security strategy. Podcast: Digital Transformation, SD-WAN & Optimal Security Dan Reis chats to Cybera's Josh Flynn about how to achieve digital transformation without sacrificing security. Podcast archive Analysts Corner Ovum Resources • Ovum 2018 Trends to Watch: IT & Cybersecurity • Ovum IoT Security: Technology Strategies & Vendor Profiles • Ovum 2018 Trends to Watch: Managed Security Services • Ovum's Mini-Guide to GDPR Analysts Corner archive Flash Poll All polls Video In a wide-ranging interview, Cisco security boss Gee Rittenhouse talks about how machine learning, AI, blockchain and other emerging technologies ... CloudPassage's new technology, called Container Secure, involves a five-step process to ensure seamless security in container deployments from the ... You can't so much as go to a coffee shop today without hearing the word 'blockchain.' Hearing about a useful blockchain is less common, but ... Last year, 60 million companies changed owners worldwide. That turnover makes it incredibly difficult to avoid doing business with entities (e.g., ... Keith Furst of Data Derivatives interviews Daniel Wagner, author of a new book, Virtual Terror: 21st Century Cyber Warfare. They discuss the ways ... All Videos Sponsored Video Sage Wagner, senior security pre-sales engineer with RiskSense, provides a demo of the company's latest technology 'RiskSense Solution,' a ... Janus Technologies is launching a line of products that protect against the many threats to enterprises' sensitive data. David Schultz, vice ... This new video will inspire companies to reimagine their business for success in a world where connectivity is more than a commodity. Sponsored Video All Videos Slideshows Top 10 Security Stories of 2018 Slideshow archive Twitter Feed Tweets by Security_Now_ like us on facebook