Security Now - Security challenges come in many forms


ABTV Application Cloud Endpoint Infrastructure IoT/Embedded Mobile Network Operational Security Management
Sign up for our weekly newsletter! REGISTER NOW

News & Views How PureLocker Ransomware Bypasses AV Checks Larry Loeb Author, \| 11/13/2019 Intezer and IBM X-Force have found a new ransomware targeted at production servers. They found evidence of its origins that pointed to a malware-as-a-service (MaaS) provider that has been utilized in the past by the Cobalt Gang and FIN6 attack groups. Post a Comment \| READ () TCP DDoS Reflection Attacks on the Rise Larry Loeb Author, \| 11/12/2019 Radware has found itself in 2019 defending against what it calls a "steady" rise in TCP DDoS reflection attacks. Since low-bandwidth TCP reflection attacks were thought in the past not to be able to generate enough amplification compared to the more used UDP-based reflection method, this is a definite change in attacker strategy. Post a Comment \| READ () 'Quantum Dawn' Raid as Financial Industry Simulates Global Ransomware Attack Larry Loeb Author, \| 11/8/2019 The Securities Industry and Financial Markets Association has just completed its simulation of a global-wide cybersecurity event focusing on the finance sector that had a code name of "Quantum Dawn." Post a Comment \| READ () Study Finds Customer Data to Be Most at Risk From Insiders Larry Loeb Author, \| 11/6/2019 Securonix, a vendor of security monitoring products, has come up with an Insider Threat Report 2019 that was conducted by Cybersecurity Insiders, a 400,000 member community for information security professionals. The report is based on the results of an online survey that was conducted in June of 2019. The respondents are said to range from technical ... Post a Comment \| READ () Complex Q3 DDoS Can Have 11 Attack Vectors Larry Loeb Author, \| 11/5/2019 Link 11, based in Frankfurt Germany, has issued a summary of what they have found out about characteristics of DDoS attacks that occurred in Q3 2019. They saw that high-bandwidth and complex DDoS attacks continued unchanged in this time period. Post a Comment \| READ () Building Your Secure Cloud-Ready Branch Nirav Shah Products & Solutions Lead, Fortinet, \| 11/5/2019 Most branch offices today still rely on a connection back to the core network for their access to applications and data. This tether-like connection ensures that end users have secure access to critical data center and central security resources. However, as more applications, data and workflows move to the cloud, relying on backhauling traffic through ... Post a Comment \| READ () 75% of Enterprises Will Adopt a Zero Trust Solution Within a Year – Zscaler Larry Loeb Author, \| 11/5/2019 Zscaler commissioned a report by Cybersecurity Insiders named 2019 Zero Trust Adoption Report. It is the first report to look at enterprise adoption of Zero Trust Network Access (ZTNA). ZTNA services are built to ensure that only authorized users can access specific applications on a network based on business policies. Post a Comment \| READ () Chinese-Linked APT41 Can Read Your Texts Larry Loeb Author, \| 10/31/2019 FireEye Mandiant says that it has recently discovered a new malware family being used by APT41 (a Chinese APT group) that is designed to have the ability to monitor as well as save SMS trafﬁc from specific phone numbers, IMSI numbers and keywords for subsequent theft. They say the malware, MESSAGETAP, was deployed as part of Chinese espionage efforts. Post a Comment \| READ (1 Comment) Latest comment: To get the one stop solution to any kind of Yahoo related hurdles and problems... Xhelper Will Be Back Whether You Want It or Not Larry Loeb Author, \| 10/30/2019 The enterprise's adoption of liberal BYOD policies over the years has led it to the point where the operating system of some connected devices can serve as an attack vector. Android, for example, has some inherent flaws that are just being starting to be exploited by threat actors in this way. Post a Comment \| READ () Endpoints Fail Predictably: Absolute Larry Loeb Author, \| 10/29/2019 Absolute, a security firm based in Vancouver, Canada, has issued a disturbing 2019 Endpoint Security Trends Report that finds "much of endpoint security spend is voided because tools and agents fail, reliably and predictably." Post a Comment \| READ () MSFT Floats an ARC Larry Loeb Author, \| 10/29/2019 As far back as 2015, the group responsible for Domain-based Message Authentication, Reporting & Conformance (DMARC) specification realized that one implementation was not going to solve the problem of email spoofing. Post a Comment \| READ () Beware the 'Raccoon Stealer' – It Ain't No Furry Friend Larry Loeb Author, \| 10/24/2019 Cybereason, a Boston-based security firm, has been looking at underground forums since April of 2019. They say that malware they call "Raccoon stealer" is one of the 2019's top ten most-mentioned malware in the underground economy. They attribute it to Russian threat actors. They also say that it has infected hundreds of thousands of devices around the ... Post a Comment \| READ () Load More Articles + All Articles All Video All Slide Shows All Articles discussion board logansah, 11/14/2019 12:17:35 AM Chinese-Linked APT41 Can Read Your Texts Re: Grab Instant Customer Care Through Yahoo Support Helpline Number To get the one stop solution to any kind of Yahoo related hurdles and problems you are running into, calling at toll-free Yahoo Support helpline number will be the right choice. Our highly knowledgeable technical geeks will... Post Your Reply logansah, 11/7/2019 5:59:23 AM What's New in the EU Security Market Re: Facebook Support Number is our online help number for Facebook Our Facebook Support Number runs online. You can seek instant support from our professionals if you are stuck with an unknown error. Our number is xxx-xxx-xxxx which works online. You can call on this and register the complaints as... Post Your Reply logansah, 11/7/2019 5:59:12 AM What's New in the EU Security Market Re: Facebook Support Number: Quickly answer your calls Our Facebook Support Number (833-557-2777) is 24/7 ready to answer your calls. Our professionals are working actively even at night. No matter how tough the issues are we will resolve every single of them within a short period of time.... Post Your Reply Christianaparker, 10/5/2019 6:36:53 AM New IoT Device Regulation Establishes Base Line for Security Re: Re: Why the wait? Certainly you can. There are similar constructions such as Why worry? but there is a one solution of Change AOL Email Password if you are stuck at aol mail issues so you can solve it throug visiting here. Post Your Reply julesjules, 7/24/2019 10:36:35 AM Palo Alto Networks Does Not Fully Address Vulnerability in GlobalProtect SSL VPN Solution Re: Confusing data in the post The original post was confusing unless you visited the actual PAN security advisory. The affected and updates were all in the same section without indication of what was what.Below is the info from the PAN advisory. Products Affected PAN-OS... Post Your Reply LarryLoeb, 5/30/2019 10:53:52 AM Mobile Fraud Is on the March, Finds New RSA Report Re: Re: Mobile fraud is bad for smartcric, live video star sports ipl live @roch.smartcric11 As time goes on, quite probably Post Your Reply batye, 5/24/2019 7:05:49 PM Suppliers Cut Off Huawei Re: Re: cut off @LarryLoeb interesting point, I could not agree more to it as remind of the the Cold War period - right after the WWII where KGB send well trained agents with suitecase of money to setup/buy legitamate Co. in the West... with purpose of... Post Your Reply LarryLoeb, 5/24/2019 5:57:49 AM Suppliers Cut Off Huawei Re: Re: cut off @Susan Companies can be agents of economic warfare. Would you change your view if you found Huawei's profits funded the Chinese army directly? (I have no such proof, btw. Making a point.) Post Your Reply Susan Fourtané , 5/24/2019 5:54:38 AM Suppliers Cut Off Huawei Re: Re: cut off I can't find it now but I have a statement from Huawei about this case. It's not right to try to put a company out of business for political reasons, Larry. Simply not right. The same with ZTE. Not right. Post Your Reply LarryLoeb, 5/24/2019 5:49:49 AM Suppliers Cut Off Huawei Re: Re: cut off @Susan I'm going to disagree. I think Huawei is inextriably linked with the government of China, a arm of it really, rather than some independent actor. China crushes independent actors. That doesn't mean the EO or the trade war is... Post Your Reply Susan Fourtané , 5/24/2019 5:34:00 AM Suppliers Cut Off Huawei Re: Re: cut off What the US government is doing to Chinese companies is war declaration. Technology and business should not be mixed with politics. Huawei is an independent company owned by its employees. What is happening is utterly ridiculous. Post Your Reply LarryLoeb, 5/22/2019 6:52:17 PM LightNeuron Sneaks In Through the Exchange Backdoor Re: Re: first @Ariella The little rotters never stand still. Post Your Reply Next 5 messages + All messages All messages Chat 8/31/2017 3:54:21 PM Voice of Security Radio: A Security Partnership with Machine Learning: Thank you! klogan453 Keeper 8/31/2017 3:51:19 PM Voice of Security Radio: A Security Partnership with Machine Learning: Well, it seems like Steve and I managed to answer everyone's questions in our conversation. So I'll say thanks once again to Steve Grobman, CTO of McAfee, for being such a wonderful guest here on Voice of Security Radio! Curt Franklin Keeper 8/31/2017 3:47:35 PM Voice of Security Radio: A Security Partnership with Machine Learning: Thanks. Sr.Contr61262 Keeper 8/31/2017 3:47:19 PM Voice of Security Radio: A Security Partnership with Machine Learning: Thanks for helping out, Daren! Curt Franklin Keeper 8/31/2017 3:45:59 PM Voice of Security Radio: A Security Partnership with Machine Learning: (On behalf of Steve Grobman) - Data science and computer science expertise is definately in high demand by the cyber security technology industry as well as many other industries that are using similar capabilities daren Keeper 8/31/2017 3:44:38 PM Voice of Security Radio: A Security Partnership with Machine Learning: (On behalf of Steve Grobman) - There is not a formal certificatio process.. most users don't need to understand the nuance of the technology which is generally built by technology product providers daren Keeper 8/31/2017 3:42:40 PM Voice of Security Radio: A Security Partnership with Machine Learning: And how are mainline security pros/machine learning pros certified, i.e. how do you lknow that the person you're hiring to help you knows what they're dcoing? Sr.Contr61262 Keeper 8/31/2017 3:39:20 PM Voice of Security Radio: A Security Partnership with Machine Learning: Steve, one question we didn't get to is that of skilled practitioners. I know that mainline security pros are in short supply and high demand: Is it even worse when it comes to machine learning pros in the security space? Curt Franklin Keeper 8/31/2017 3:37:01 PM Voice of Security Radio: A Security Partnership with Machine Learning: Since I was late - and again - really sorry, I don't even know what to ask. Feel free to ask a question or my behalf. Sr.Contr61262 Keeper 8/31/2017 3:33:59 PM Voice of Security Radio: A Security Partnership with Machine Learning: Well folks, now's the time to ask any questions we didn't get to in the audio interview. Steve will be here in just a moment -- what would you like to know? Curt Franklin Keeper Next 5 chats +		Information Resources • Special Report: SD-Wan Security • Zero Trust: Organizations can begin to trust users, devices and transactions starting with a high level of IAM services and support • How to Unite Your Active Directories: Mergers, Acquisitions and Divestitures • Deliver a True Omni-Channel Experience • The Smart Way to Simplify PCI Compliance • Versa SD-WAN – Simple, Secure and Reliable Branch to Multi-Cloud Connectivity • Fortifying Your Branch Security • The Essential Guide to Understanding Risk and Quantification • 7 Experts on Threat and Vulnerability Management • A CISO’S Guide to Hybrid Cloud Security All resources upcoming Webinars ARCHIVED Top Tips for Blocking pwned [email protected]$$wOrds in Your Organization Tuesday, October 29, 2019 12 p.m. New York/ 4:00 p.m. London More Webinars Webinar Archives Podcasts Podcast: Infrastructure Hunting – Stopping Bad Actors in Their Tracks Being able to effectively build a threat intelligence ecosystem or threat-hunting identification response requires both user and systems sophistication and capabilities. Security, orchestration, automation and response (SOAR) is a new technology designed to provide organizations a single comprehensive platform they can use to implement an intelligence driven security strategy. Podcast: Digital Transformation, SD-WAN & Optimal Security Dan Reis chats to Cybera's Josh Flynn about how to achieve digital transformation without sacrificing security. Podcast archive Analysts Corner Ovum Resources • Ovum 2018 Trends to Watch: IT & Cybersecurity • Ovum IoT Security: Technology Strategies & Vendor Profiles • Ovum 2018 Trends to Watch: Managed Security Services • Ovum's Mini-Guide to GDPR Analysts Corner archive Flash Poll All polls Video In a wide-ranging interview, Cisco security boss Gee Rittenhouse talks about how machine learning, AI, blockchain and other emerging technologies ... CloudPassage's new technology, called Container Secure, involves a five-step process to ensure seamless security in container deployments from the ... You can't so much as go to a coffee shop today without hearing the word 'blockchain.' Hearing about a useful blockchain is less common, but ... Last year, 60 million companies changed owners worldwide. That turnover makes it incredibly difficult to avoid doing business with entities (e.g., ... Keith Furst of Data Derivatives interviews Daniel Wagner, author of a new book, Virtual Terror: 21st Century Cyber Warfare. They discuss the ways ... All Videos Sponsored Video Sage Wagner, senior security pre-sales engineer with RiskSense, provides a demo of the company's latest technology 'RiskSense Solution,' a ... Janus Technologies is launching a line of products that protect against the many threats to enterprises' sensitive data. David Schultz, vice ... This new video will inspire companies to reimagine their business for success in a world where connectivity is more than a commodity. Sponsored Video All Videos Slideshows Top 10 Security Stories of 2018 Slideshow archive Twitter Feed Tweets by Security_Now_ like us on facebook