Sign up for our weekly newsletter!
REGISTER NOW
Blogs
Content posted in September 2019
MSFT Updates Outlook Ban List for Downloads
Larry Loeb  
9/30/2019   Post a comment
Microsoft did some Outlook tweaking recently. They realized that the list of the file extensions that the program should refuse to download needed some updating.
Report Predicts DevSecOps Boom Over Next 2 Years
Larry Loeb  
9/27/2019   Post a comment
Sixty-eight percent of companies say they will be securing three quarters or more of their cloud-native applications with DevSecOps within two years.
OWASP's Common Web Program Security Problems: Part 2
Larry Loeb  
9/26/2019   Post a comment
We continue the countdown of OWASP's Top Ten nasties.
Enterprise Ransomware & Consumer Ransomware: They're Not That Different
Larry Loeb  
9/26/2019   Post a comment
RiskSense researchers identified 57 vulnerabilities that are heavily tied to ransomware threats in enterprises and government organizations as opposed to individuals.
OWASP Lists the Most Common Security Stings
Larry Loeb  
9/24/2019   Post a comment
OWASP's Top 10 is made up of high-risk, common weaknesses and flaws that are seen over and over again.
LastPass Extensions for Chrome & Opera Can Leak Passwords
Larry Loeb  
9/20/2019   Post a comment
A history of password-stealing potential vulnerabilities has LastPass users worried.
How Human-Centered Security Can Strengthen Your Organizations
Steve Durbin  
9/19/2019   Post a comment
Humans are often regarded as the 'weakest link' in information security. However, organizations have historically relied on the effectiveness of technical security controls, instead of trying to understand why people are susceptible to mistakes and manipulation.
DNSSEC Can Encourage DDoS – Nexusguard
Larry Loeb  
9/18/2019   Post a comment
Report found that DNS Amplification contributed to the largest share, compared to other methods, of attack activities in Q2 2019.
Analytics Startup Claims to Turn Golden Tickets Brass
Joe Stanganelli  
9/17/2019   Post a comment
The threat of escalation attacks and forged administration levels has plagued Kerberos authentication systems for years. Data-analytics startup Qomplx claims to do the math that solves the problem.
F-Secure's Honeypots Get Hit 3 Billion Times in First Half of 2019
Larry Loeb  
9/17/2019   Post a comment
Global network of honeypots measured more than triple the attack traffic of the previous period, to a total of over 2.9 billion events.
NIST Tackles AI
Larry Loeb  
9/16/2019   Post a comment
But to prepare for something usually means you have an idea about what you are preparing for, no?
An Image Can Poison Just as Well as an Exploit Can
Larry Loeb  
9/13/2019   Post a comment
An emerging and increasingly sophisticated threat campaign is employing obscure file formats.
Podcast: Infrastructure Hunting – Stopping Bad Actors in Their Tracks
Podcasts  
9/13/2019   Post a comment
Being able to effectively build a threat intelligence ecosystem or threat-hunting identification response requires both user and systems sophistication and capabilities. Security, orchestration, automation and response (SOAR) is a new technology designed to provide organizations a single comprehensive platform they can use to implement an intelligence driven security strategy.
Podcast: Digital Transformation, SD-WAN & Optimal Security
Podcasts  
9/12/2019   Post a comment
Dan Reis chats to Cybera's Josh Flynn about how to achieve digital transformation without sacrificing security.
IoT Can Allow Footholds Where They Are Least Expected
Larry Loeb  
9/11/2019   Post a comment
An IoT device carries with it the implicit threat of being used for nefarious purposes if it has not been created with security foremost in mind.
Improving on Layered Cyber Defense
Dan Reis  
9/10/2019   Post a comment
At what point does a layered defense encumber security's proficiency as it increases network complexity?
Only 1% of Malware Attacks Use a Machine's Vulnerability, the Rest Prey on Humans – Proofpoint
Larry Loeb  
9/9/2019   Post a comment
Instead of attacking computer systems and infrastructure, threat actors focus on people, their roles within an organization, the data to which they had access, and their likelihood to 'click here' or perform some other enabling action.
Study Finds Enterprise Network Improvement Initiatives Not Meeting Business Needs
Larry Loeb  
9/6/2019   Post a comment
Accenture conducted a blind survey with 300 senior IT and business executives from companies with annual revenues in excess of US$1 billion to see if enterprise networks were under as much pressure these days as they projected they would be.
Eclypsium Finds 4 Major Attack Paths in Supermicro Servers
Larry Loeb  
9/5/2019   Post a comment
Firmware security player finds vulnerabilities in X9, X10 and X11 platform of servers.
TrickBot Has Evolved to Become More Dangerous
Larry Loeb  
9/4/2019   Post a comment
TrickBot has been an active botnet since around October of 2016. It's well known as part of the threat landscape, and has been operated in the past by GOLD BLACKBURN.
Making Code Harder to Read by Attackers Can Make Injections Less Likely
Larry Loeb  
9/3/2019   Post a comment
It's one of way of stopping formjackers making off with customers' credit card details.
Trend Micro Scopes Out 2019 So Far
Larry Loeb  
9/3/2019   Post a comment
Fileless attacks and exploit kits make a comeback.




Latest Articles
Aviatrix, an enterprise VPN company with customers that include NASA, Shell and BT, has recently dealt with a vulnerability that was uncovered by Immersive Labs researcher and content engineer Alex Seymour.
The German Federal Government wants to join forces with other European partners to create a secure cloud for Europe called GAIA-X.
Security firm CyberArk is now finally able to discuss a major OAuth 2.0 vulnerability that affects Microsoft Azure web services.
Be alert, be aware, and be careful about what you reveal of your company's internal processes on social media.
The Microsoft Defender ATP Research Team has begun to discuss a polymorphic threat, Dexphot, that it has been tracking for over a year.
Information Resources
upcoming Webinars
ARCHIVED
Top Tips for Blocking pwned [email protected]$$wOrds in Your Organization
Tuesday, October 29, 2019
12 p.m. New York/ 4:00 p.m. London
Podcasts
Podcast: Infrastructure Hunting – Stopping Bad Actors in Their Tracks
Being able to effectively build a threat intelligence ecosystem or threat-hunting identification response requires both user and systems sophistication and capabilities. Security, orchestration, automation and response (SOAR) is a new technology designed to provide organizations a single comprehensive platform they can use to implement an intelligence driven security strategy.
Podcast: Digital Transformation, SD-WAN & Optimal Security
Dan Reis chats to Cybera's Josh Flynn about how to achieve digital transformation without sacrificing security.
Podcast archive
Flash Poll
Video
In a wide-ranging interview, Cisco security boss Gee Rittenhouse talks about how machine learning, AI, blockchain and other emerging technologies ...
CloudPassage's new technology, called Container Secure, involves a five-step process to ensure seamless security in container deployments from the ...
You can't so much as go to a coffee shop today without hearing the word 'blockchain.' Hearing about a useful blockchain is less common, but ...
Last year, 60 million companies changed owners worldwide. That turnover makes it incredibly difficult to avoid doing business with entities (e.g., ...
Keith Furst of Data Derivatives interviews Daniel Wagner, author of a new book, Virtual Terror: 21st Century Cyber Warfare. They discuss the ways ...
All Videos
Sponsored Video
Sage Wagner, senior security pre-sales engineer with RiskSense, provides a demo of the company's latest technology 'RiskSense Solution,' a ...
Janus Technologies is launching a line of products that protect against the many threats to enterprises' sensitive data. David Schultz, vice ...
This new video will inspire companies to reimagine their business for success in a world where connectivity is more than a commodity. Sponsored Video
All Videos
like us on facebook
Security Now
About Us     Contact Us     Help     Register     Events     Supporting Partners     Twitter     Facebook     RSS
Copyright © 2019 Light Reading, part of Informa Tech,
a division of Informa PLC. All rights reserved. Privacy Policy | Cookie Policy | Terms of Use
in partnership with