Security Now - Security challenges come in many forms


ABTV Application Cloud Endpoint Infrastructure IoT/Embedded Mobile Network Operational Security Management
Sign up for our weekly newsletter! REGISTER NOW

News & Views NIST Tackles AI Larry Loeb Author, \| 9/16/2019 On February 11, 2019, President Donald J. Trump issued the Executive Order on Maintaining American Leadership in Artificial Intelligence. It was crafted to get NIST off its "safe space" and get into the AI standards arena. Post a Comment \| READ () An Image Can Poison Just as Well as an Exploit Can Larry Loeb Author, \| 9/13/2019 Research from business startup Prevailion performed by Danny Adamitis and Elizabeth Wharton has found an emerging and increasingly sophisticated threat campaign employing obscure file formats. After detecting related trojanized documents -- all discussing nuclear deterrence as well as North Korea's nuclear submarine program and economic sanctions -- the ... Post a Comment \| READ () Podcast: Infrastructure Hunting – Stopping Bad Actors in Their Tracks Dan Reis SecurityNow Expert, \| 9/13/2019 Welcome to another SecurityNow podcast. In today's edition, we're going to be discussing threat intelligence. How much context is enough to make a decision or to make decisions? Our guest today is Kyle Ehmke from ThreatConnect. He's a senior threat intelligence researcher with ThreatConnect with more than ten years' experience. Ehmke has followed a range ... Post a Comment \| READ () Podcast: Digital Transformation, SD-WAN & Optimal Security Dan Reis SecurityNow Expert, \| 9/12/2019 Welcome to another SecurityNow Podcast. Post a Comment \| READ () IoT Can Allow Footholds Where They Are Least Expected Larry Loeb Author, \| 9/11/2019 A device that uses the Internet for either data or control can be a surprising item to be the launchpad for an attack, but it can happen. The interrelation of items that use the Internet -- especially as the ubiquity of Internet of Things (IoT) -- can be complex and hard to trace. Post a Comment \| READ () Improving on Layered Cyber Defense Dan Reis SecurityNow Expert, \| 9/10/2019 For years the security industry has recommended a layered defense to protect against cyber threats. This is the practice of deploying multiple security products at various control points throughout a network. The intention is to broaden threat detection and prevention capabilities in a network to increase the chance of detection as well as to gather ... Post a Comment \| READ () Only 1% of Malware Attacks Use a Machine's Vulnerability, the Rest Prey on Humans – Proofpoint Larry Loeb Author, \| 9/9/2019 Proofpoint's Human Factor Report 2019 has been released. It looks at the social engineering and factoring of human reactions carried out by bad actors to further their onslaught of malware and attacks. Post a Comment \| READ () Study Finds Enterprise Network Improvement Initiatives Not Meeting Business Needs Larry Loeb Author, \| 9/6/2019 Accenture conducted a blind survey with 300 senior IT and business executives from companies with annual revenues in excess of US$1 billion. Respondents came from ten industries and seven countries. Participants from IT included CIOs/CTOs, their direct reports, and vice presidents (VPs) or directors of infrastructure/network The business respondents ... Post a Comment \| READ () Eclypsium Finds 4 Major Attack Paths in Supermicro Servers Larry Loeb Author, \| 9/5/2019 Eclypsium is a firmware security player, and it has found some vulnerabilities in the Supermicro X9, X10 and X11 platform of servers that can, as Eclypsium puts it in a blog post, "allow an attacker to easily connect to a server and virtually mount any USB device of their choosing to the server, remotely over any network including the Internet." Post a Comment \| READ () TrickBot Has Evolved to Become More Dangerous Larry Loeb Author, \| 9/4/2019 TrickBot has been an active botnet since around October 2016. It's well known as part of the threat landscape, and has been operated in the past by GOLD BLACKBURN. Post a Comment \| READ () Making Code Harder to Read by Attackers Can Make Injections Less Likely Larry Loeb Author, \| 9/3/2019 In Plain Sight II: On the Trail of Magecart was a white paper commissioned by Arxan Technologies and produced by Aite Group. It says that its purpose is to demonstrate the massive attack surface created by electronic commerce (e-commerce) web applications that aren't being properly secured. Post a Comment \| READ () Trend Micro Scopes Out 2019 So Far Larry Loeb Author, \| 9/3/2019 Trend Micro Incorporated has lately been seeing a lot more of the "fileless" kind of malware attacks. In its mid-2019 roundup report, Trend Micro says that there has been a surge in fileless attacks that were designed to use this approach to disguise malicious activity. Detections of this kind of threat alone by them were up 265% compared to the first ... Post a Comment \| READ () Load More Articles + All Articles All Video All Slide Shows All Articles discussion board roch.smartcric11, 8/24/2019 11:18:39 PM New Industry Drives Renewed Interest in Embedded Security Re: Good interest in embedded security Given the proposed growth curves for IoT/IIoT devices, making better demonstrable security solutions integral to devices is rapidly becoming a requirement in many aspects. Yes, this bodes well for companies building and providing software to... Post Your Reply roch.smartcric11, 8/24/2019 11:16:14 PM MuddyWater: The Dissection of an APT Re: Re: Sources and methods... Yeah bruh, it always interesting to see how everything get played out for smartcric updates and mobilecric.info updates these days. Post Your Reply julesjules, 7/24/2019 10:36:35 AM Palo Alto Networks Does Not Fully Address Vulnerability in GlobalProtect SSL VPN Solution Re: Confusing data in the post The original post was confusing unless you visited the actual PAN security advisory. The affected and updates were all in the same section without indication of what was what.Below is the info from the PAN advisory. Products Affected PAN-OS... Post Your Reply roch.smartcric11, 6/9/2019 9:05:09 PM Study Finds Most Popular iOS Apps Are Not Encrypting Data Re: Nice study on Smartcric.online, crictime live star sports live service Nice study. by the way its obvious that when one app get populairty then it's developer forget about security and he just will to earn more and more out of that. Post Your Reply LarryLoeb, 5/30/2019 10:53:52 AM Mobile Fraud Is on the March, Finds New RSA Report Re: Re: Mobile fraud is bad for smartcric, live video star sports ipl live @roch.smartcric11 As time goes on, quite probably Post Your Reply roch.smartcric11, 5/30/2019 9:35:53 AM Mobile Fraud Is on the March, Finds New RSA Report Re: Mobile fraud is bad for crictime, smartcric star sports live Mobile fraud is going to bigger and bigger. Post Your Reply batye, 5/24/2019 7:05:49 PM Suppliers Cut Off Huawei Re: Re: cut off @LarryLoeb interesting point, I could not agree more to it as remind of the the Cold War period - right after the WWII where KGB send well trained agents with suitecase of money to setup/buy legitamate Co. in the West... with purpose of... Post Your Reply LarryLoeb, 5/24/2019 5:57:49 AM Suppliers Cut Off Huawei Re: Re: cut off @Susan Companies can be agents of economic warfare. Would you change your view if you found Huawei's profits funded the Chinese army directly? (I have no such proof, btw. Making a point.) Post Your Reply Susan Fourtané , 5/24/2019 5:54:38 AM Suppliers Cut Off Huawei Re: Re: cut off I can't find it now but I have a statement from Huawei about this case. It's not right to try to put a company out of business for political reasons, Larry. Simply not right. The same with ZTE. Not right. Post Your Reply LarryLoeb, 5/24/2019 5:49:49 AM Suppliers Cut Off Huawei Re: Re: cut off @Susan I'm going to disagree. I think Huawei is inextriably linked with the government of China, a arm of it really, rather than some independent actor. China crushes independent actors. That doesn't mean the EO or the trade war is... Post Your Reply Susan Fourtané , 5/24/2019 5:34:00 AM Suppliers Cut Off Huawei Re: Re: cut off What the US government is doing to Chinese companies is war declaration. Technology and business should not be mixed with politics. Huawei is an independent company owned by its employees. What is happening is utterly ridiculous. Post Your Reply LarryLoeb, 5/22/2019 6:52:17 PM LightNeuron Sneaks In Through the Exchange Backdoor Re: Re: first @Ariella The little rotters never stand still. Post Your Reply Next 5 messages + All messages All messages Chat 8/31/2017 3:54:21 PM Voice of Security Radio: A Security Partnership with Machine Learning: Thank you! klogan453 Keeper 8/31/2017 3:51:19 PM Voice of Security Radio: A Security Partnership with Machine Learning: Well, it seems like Steve and I managed to answer everyone's questions in our conversation. So I'll say thanks once again to Steve Grobman, CTO of McAfee, for being such a wonderful guest here on Voice of Security Radio! Curt Franklin Keeper 8/31/2017 3:47:35 PM Voice of Security Radio: A Security Partnership with Machine Learning: Thanks. Sr.Contr61262 Keeper 8/31/2017 3:47:19 PM Voice of Security Radio: A Security Partnership with Machine Learning: Thanks for helping out, Daren! Curt Franklin Keeper 8/31/2017 3:45:59 PM Voice of Security Radio: A Security Partnership with Machine Learning: (On behalf of Steve Grobman) - Data science and computer science expertise is definately in high demand by the cyber security technology industry as well as many other industries that are using similar capabilities daren Keeper 8/31/2017 3:44:38 PM Voice of Security Radio: A Security Partnership with Machine Learning: (On behalf of Steve Grobman) - There is not a formal certificatio process.. most users don't need to understand the nuance of the technology which is generally built by technology product providers daren Keeper 8/31/2017 3:42:40 PM Voice of Security Radio: A Security Partnership with Machine Learning: And how are mainline security pros/machine learning pros certified, i.e. how do you lknow that the person you're hiring to help you knows what they're dcoing? Sr.Contr61262 Keeper 8/31/2017 3:39:20 PM Voice of Security Radio: A Security Partnership with Machine Learning: Steve, one question we didn't get to is that of skilled practitioners. I know that mainline security pros are in short supply and high demand: Is it even worse when it comes to machine learning pros in the security space? Curt Franklin Keeper 8/31/2017 3:37:01 PM Voice of Security Radio: A Security Partnership with Machine Learning: Since I was late - and again - really sorry, I don't even know what to ask. Feel free to ask a question or my behalf. Sr.Contr61262 Keeper 8/31/2017 3:33:59 PM Voice of Security Radio: A Security Partnership with Machine Learning: Well folks, now's the time to ask any questions we didn't get to in the audio interview. Steve will be here in just a moment -- what would you like to know? Curt Franklin Keeper Next 5 chats +		Information Resources • Zero Trust: Organizations can begin to trust users, devices and transactions starting with a high level of IAM services and support • How to Unite Your Active Directories: Mergers, Acquisitions and Divestitures • Deliver a True Omni-Channel Experience • The Smart Way to Simplify PCI Compliance • Versa SD-WAN – Simple, Secure and Reliable Branch to Multi-Cloud Connectivity • Fortifying Your Branch Security • The Essential Guide to Understanding Risk and Quantification • 7 Experts on Threat and Vulnerability Management • A CISO’S Guide to Hybrid Cloud Security • Endpoint EcoSystems E-Book: Collaborating To Conquer Security Threats All resources upcoming Webinars The #1 (and #2) Cyber Threats Targeting the Applications that Power Your Business Thursday, October 3, 2019 12 p.m. New York/ 5:00 p.m. London More Webinars Webinar Archives Analysts Corner Ovum Resources • Ovum 2018 Trends to Watch: IT & Cybersecurity • Ovum IoT Security: Technology Strategies & Vendor Profiles • Ovum 2018 Trends to Watch: Managed Security Services • Ovum's Mini-Guide to GDPR Analysts Corner archive Flash Poll All polls Video In a wide-ranging interview, Cisco security boss Gee Rittenhouse talks about how machine learning, AI, blockchain and other emerging technologies ... CloudPassage's new technology, called Container Secure, involves a five-step process to ensure seamless security in container deployments from the ... You can't so much as go to a coffee shop today without hearing the word 'blockchain.' Hearing about a useful blockchain is less common, but ... Last year, 60 million companies changed owners worldwide. That turnover makes it incredibly difficult to avoid doing business with entities (e.g., ... Keith Furst of Data Derivatives interviews Daniel Wagner, author of a new book, Virtual Terror: 21st Century Cyber Warfare. They discuss the ways ... All Videos Sponsored Video Sage Wagner, senior security pre-sales engineer with RiskSense, provides a demo of the company's latest technology 'RiskSense Solution,' a ... Janus Technologies is launching a line of products that protect against the many threats to enterprises' sensitive data. David Schultz, vice ... This new video will inspire companies to reimagine their business for success in a world where connectivity is more than a commodity. Sponsored Video All Videos Radio Shows ARCHIVED \| August 31, 2017, 3pm EDT Voice of Security Radio: A Security Partnership with Machine Learning An interview with Steve Grobman, CTO of McAfee ARCHIVED SHOWS DOWNLOAD TO CALENDAR Slideshows Top 10 Security Stories of 2018 Slideshow archive Twitter Feed Tweets by Security_Now_ like us on facebook