Sign up for our weekly newsletter!
REGISTER NOW
Content by LarryLoeb
LarryLoeb
Member Since: May 24, 2017
Author
Blog Posts: 333
Posts: 289

Most Recently Posted

All (100)           Blogs (87)           Comments (13)          
All
LastPass Extensions for Chrome & Opera Can Leak Passwords
Larry Loeb  
9/20/2019   Post a comment
A history of password-stealing potential vulnerabilities has LastPass users worried.
DNSSEC Can Encourage DDoS – Nexusguard
Larry Loeb  
9/18/2019   Post a comment
Report found that DNS Amplification contributed to the largest share, compared to other methods, of attack activities in Q2 2019.
F-Secure's Honeypots Get Hit 3 Billion Times in First Half of 2019
Larry Loeb  
9/17/2019   Post a comment
Global network of honeypots measured more than triple the attack traffic of the previous period, to a total of over 2.9 billion events.
NIST Tackles AI
Larry Loeb  
9/16/2019   Post a comment
But to prepare for something usually means you have an idea about what you are preparing for, no?
An Image Can Poison Just as Well as an Exploit Can
Larry Loeb  
9/13/2019   Post a comment
An emerging and increasingly sophisticated threat campaign is employing obscure file formats.
IoT Can Allow Footholds Where They Are Least Expected
Larry Loeb  
9/11/2019   Post a comment
An IoT device carries with it the implicit threat of being used for nefarious purposes if it has not been created with security foremost in mind.
Only 1% of Malware Attacks Use a Machine's Vulnerability, the Rest Prey on Humans – Proofpoint
Larry Loeb  
9/9/2019   Post a comment
Instead of attacking computer systems and infrastructure, threat actors focus on people, their roles within an organization, the data to which they had access, and their likelihood to 'click here' or perform some other enabling action.
Study Finds Enterprise Network Improvement Initiatives Not Meeting Business Needs
Larry Loeb  
9/6/2019   Post a comment
Accenture conducted a blind survey with 300 senior IT and business executives from companies with annual revenues in excess of US$1 billion to see if enterprise networks were under as much pressure these days as they projected they would be.
Eclypsium Finds 4 Major Attack Paths in Supermicro Servers
Larry Loeb  
9/5/2019   Post a comment
Firmware security player finds vulnerabilities in X9, X10 and X11 platform of servers.
TrickBot Has Evolved to Become More Dangerous
Larry Loeb  
9/4/2019   Post a comment
TrickBot has been an active botnet since around October of 2016. It's well known as part of the threat landscape, and has been operated in the past by GOLD BLACKBURN.
Making Code Harder to Read by Attackers Can Make Injections Less Likely
Larry Loeb  
9/3/2019   Post a comment
It's one of way of stopping formjackers making off with customers' credit card details.
Trend Micro Scopes Out 2019 So Far
Larry Loeb  
9/3/2019   Post a comment
Fileless attacks and exploit kits make a comeback.
Cisco Maxes Out Its CVE Severity
Larry Loeb  
8/30/2019   Post a comment
Cisco had to take itself to the virtual woodshed this week after issuing a security advisory about its IOS XE operating system.
AV Vendor & French Gendarmerie Take Down a Transnational Worm
Larry Loeb  
8/29/2019   Post a comment
The good guys got lucky this time.
NSA to Share Added Security for Firmware Functions
Larry Loeb  
8/26/2019   Post a comment
Most people think of the National Security Agency as the home of operational intelligence gathering. But many people are unaware of the research that it has done and released to the public.
Nuclear Plant Security Compromised by Financially Motivated Insiders
Larry Loeb  
8/23/2019   Post a comment
Equipment at a nuclear power plant in Ukraine was used to mine cryptocurrency.
Newly Registered Domains Mean New Problems – Palo Alto
Larry Loeb  
8/23/2019   Post a comment
Why NRDs should matter to the security community.
Fintech Startups Get Sloppy With Application Security
Larry Loeb  
8/20/2019   Post a comment
Some startups need to shape up or ship out.
New Industry Drives Renewed Interest in Embedded Security
Larry Loeb  
8/20/2019   1 comment
Hardware for security may just get hot.
CTF Protocol Serves as a Low-Level Way to Take Over Windows Machines
Larry Loeb  
8/16/2019   Post a comment
There is a protocol in Windows that has been around since the days of Windows XP, which has been found to be insecure.
A Brace Helps to Balance the Load
Larry Loeb  
8/13/2019   Post a comment
A syntax construct inside the TCL language is allowing injection attacks to occur.
This RAT Doesn't Squeak Much
Larry Loeb  
8/13/2019   Post a comment
Saefko does stuff. Lots of stuff.
State Farm Insurance Notifies Users About a Breach but Doesn't Panic
Larry Loeb  
8/9/2019   Post a comment
State Farm Insurance has filed a notice of data breach that involved customer accounts, seemingly to meet California regulations.
MSFT Walks Back Original Action, Admits RDP Vulnerability Affects Hyper-V
Larry Loeb  
8/9/2019   Post a comment
Check Point Research's Eyal Itkin told the world in February of this year that there were multiple critical vulnerabilities in the widely used RDP protocol.
Wipro Says That Target on the Enterprise's Back Just Got Bigger
Larry Loeb  
8/7/2019   Post a comment
Wipro has presented the third edition of their 'State of Cybersecurity Report,' looking at trends and behaviors that have occurred over the last year.
Has Your Employee Been Compromised by Sextortion?
Larry Loeb  
8/5/2019   Post a comment
Sextortion is one particular kind of extortion that is defined by the Cambridge dictionary as "The practice of forcing someone to do something by threatening to publish sexual information about them."
Bulletproof Proxy Providers Try to Hide Botnet IP Address Needles in Haystacks
Larry Loeb  
8/2/2019   Post a comment
Cequence Security's CQ Prime research team thinks it has spotted a new trend it calls 'bulletproof proxies.'
Who Is Phoning Home on Your Firm's Dime?
Larry Loeb  
8/1/2019   Post a comment
ExtraHop customers in 2018 and the first weeks of 2019 took a look at some third-party supplied enterprise software's behavior and were not pleased when it would, unannounced, call home for its creators.
Capital One Had to Be Told by Outsider That Data Breach Occurred
Larry Loeb  
7/30/2019   Post a comment
Capital One got hacked and didn't even know it.
Kubernetes Won't Get Secure Just Sitting There
Larry Loeb  
7/30/2019   Post a comment
Let's delve into containers.
Not Using DMARC Security Protocol Leaves Businesses Vulnerable to Spoofing
Larry Loeb  
7/29/2019   Post a comment
A global survey found that most business and government domains don't use DMARC, which opens them up to email spoofing.
IT Modernization: Needed & Not Easy
Larry Loeb  
7/26/2019   Post a comment
'Challenges with architecture modernization' ranks high on IT survey respondents' list of grievances.
Sanctioned Russian Spies Can Own Your Android Device
Larry Loeb  
7/25/2019   Post a comment
It's professional-grade naughtiness, people.
Comodo Leaves AV Vulnerabilities Unpatched
Larry Loeb  
7/25/2019   Post a comment
Even though Comodo was notified by Tenable in April of the problems, no patches by have been forthcoming from the antivirus firm.
Palo Alto Networks Does Not Fully Address Vulnerability in GlobalProtect SSL VPN Solution
Larry Loeb  
7/24/2019   1 comment
If Palo Alto Networks wants to keep the trust of its customers in the future, it will have to do much better in how it relates to them.
Skylight Says Cylance Can Be Bypassed; Cylance Says, 'Not So Fast, There!'
Larry Loeb  
7/23/2019   Post a comment
Skylight's findings certainly gained attention, but at what cost to the company's credibility?
Bluetooth Devices Leaking Tracking Data
Larry Loeb  
7/19/2019   Post a comment
Researchers from Boston University found that the current version of Bluetooth Low Energy, as implemented by Apple iOS and Windows 10, leaked identifiers that allowed tracking of the device that was using BLE.
Malvertising Adds Sophistication to Disruption
Larry Loeb  
7/17/2019   Post a comment
French security researcher Malekal delved into a murky world.
New BitPaymer Ransomware Discovered Hunting Big Game
Larry Loeb  
7/16/2019   Post a comment
New variant shares most of its code with the BitPaymer ransomware operated by INDRIK SPIDER.
DNS Hijacking on the Rise as Warning Is Issued
Larry Loeb  
7/15/2019   Post a comment
The National Cyber Security Centre, a part of the UK's GCHQ, has issued an advisory that deals with Domain Name System (DNS) hijacking by threat actors.
Older Versions of Windows at Risk From New Zero-Day Exploit
Larry Loeb  
7/12/2019   Post a comment
Cybersecurity firm ESET discovered a Windows zero-day exploit that affects older systems like Windows 7 and Server 2008.
Demand for Certain B2B Security Software Accelerates
Larry Loeb  
7/11/2019   Post a comment
B2B security software is growing faster than overall B2B software sales, according to new figures.
Research Shows Top Banks Failing in Security, Privacy & Compliance
Larry Loeb  
7/10/2019   Post a comment
Apart from that, it's all going swimmingly.
An Attack Using Only System Tools Is Not Invisible – You Just Have to Look Harder
Larry Loeb  
7/9/2019   Post a comment
Microsoft's team behind Windows Defender ATP has identified a new 'fileless' malware campaign that can bypass standard antivirus tools.
TA505 Invades the Middle East
Larry Loeb  
7/8/2019   Post a comment
The campaign, detected by Trend Micro, has been identified as coming from threat actor TA505.
Cryptominer Delivers New Kind of Malware
Larry Loeb  
7/5/2019   Post a comment
Malicious actors seem to be beginning to turn to Golang as a malware language since it is not typically picked up by antivirus software.
Survey Finds Enterprise Concerned About Mass Data Fragmentation
Larry Loeb  
7/5/2019   Post a comment
For many organizations, the public cloud has failed to live up to expectations.
Phishing Campaign Evades Analysis by Hiding URL in QR Code
Larry Loeb  
7/2/2019   Post a comment
Phishing attacks are never really dead.
Identity Can't Recognize Itself
Larry Loeb  
7/2/2019   Post a comment
Identity management needs to be 'frictionless' if it is going to gain users.
MSFT Realizes That Some Things Need to Be Changed
Larry Loeb  
6/28/2019   Post a comment
There are lots of directions in which various people think the field of 'identity' is heading. While some of these directions get accepted over a time period (like Zero Trust), someone always gets stuck with having to make the tools that enable a direction's implementation to occur.
Wipro Breach Actually a Whole Campaign
Larry Loeb  
6/27/2019   Post a comment
India's third-largest IT outsourcing company, Wipro, was been breached and boarded, and getting to the bottom of the mess wasn't easy.
Zero Trust Doesn't Trust You at All
Larry Loeb  
6/27/2019   Post a comment
Enterprise security practitioners who deal with identity day in and day out come together to find out the current status of the field.
Developers Find Temporary Fix for OpenSSH Remote Access Software Vulnerability
Larry Loeb  
6/26/2019   Post a comment
The latest update from the OpenSSH developers encrypts private keys before storing them into the system memory, which will protect the keys against almost all types of side-channel attacks.
Millions of Dell PCs at Risk Due to Software Flaw
Larry Loeb  
6/24/2019   Post a comment
SafeBreach found that one library of software which was used to construct Dell's SupportAssist can be tricked into loading DLL files that it really shouldn't.
The Cracking of RSA-2048 Encryption Will Come Sooner Than Had Been Thought
Larry Loeb  
6/21/2019   Post a comment
Advances in both QC and QC methods will see to that.
Defense Discovered for Defending Against BGP Hijacking & Off-Path DNS Attacks
Larry Loeb  
6/20/2019   Post a comment
Certificate Authorities are continually getting requests from threat actors who want certificates that they aren't entitled to so that their criminal schemes may be furthered.
New 'IPStorm' Malware Uses Peer-to-Peer Network for Communication
Larry Loeb  
6/19/2019   Post a comment
It's a whole new headache for the security team.
XENOTIME Threat Actor Laying the Groundwork to Disrupt Utilities
Larry Loeb  
6/17/2019   Post a comment
Malware targets Schneider Electric's Triconex safety instrumented system.
Are US & UK Firms Keeping Up With 'Best Practice' Password Management?
Larry Loeb  
6/14/2019   Post a comment
Companies think that they are much safer than their actual password practices would suggest.
Preempt Shows How to Sidestep EPA Authentication
Larry Loeb  
6/13/2019   Post a comment
Security firm Preempt issued an advisory that showed how to conceptually bypass the Enhanced Protection for Authentication that prevents attackers from performing a relay of NT Lan Manager messages to top-level security sessions.
Are Consumers Afraid of Biometrics for E-Commerce?
Larry Loeb  
6/12/2019   Post a comment
Researchers found that 81% of consumers still favor passwords for making payments online due to concerns about the security of new biometric options.
Researchers Discover Way to Hack Hardware Security Module, Gain Access to Cryptographic Keys
Larry Loeb  
6/11/2019   Post a comment
Everyone be cool, this is one heckuva robbery!
NSA Stresses Real Danger in BlueKeep Exploit
Larry Loeb  
6/10/2019   Post a comment
Botnets have been scanning for RDP servers and are using weak and reused passwords to gain access to them.
Study Finds Most Popular iOS Apps Are Not Encrypting Data
Larry Loeb  
6/7/2019   1 comment
Wandera found that two-thirds (67.8%) of apps still disable Apple Transport Security (ATS) globally and don't set any granular exceptions for specific functions.
Researchers Seek 'Best' Vulnerability Remediation Strategy
Larry Loeb  
6/6/2019   Post a comment
Having to find the sweet spot between two competing forces is a delicate balancing act.
Mobile Phone Motion Sensors Found to Leak Tracking Data
Larry Loeb  
6/5/2019   Post a comment
A user's information can be accessed by an attacker in many ways, not just from a device's system software.
Windows Remote Code Execution Vulnerability Requires More Than Just Patching
Larry Loeb  
6/4/2019   Post a comment
But nobody said it was going to be easy...
Researchers Find Open Database at Pyramid Hotel Group With PII Data & Physical Access Keys
Larry Loeb  
6/3/2019   Post a comment
Publicly accessible data includes information regarding Pyramid's operating systems, security policies, internal networks and application logs.
Insider Threat: Research Proves Loyalty Can Be a Rare Commodity
Larry Loeb  
5/31/2019   Post a comment
The UK's Deep Secure has reported this week that the price an employee would accept to break loyalty with an organization may be a lot less than has been previously thought.
'NanshOu' China-Based Attack Uses APT-Like Techniques to Infect Servers Worldwide
Larry Loeb  
5/30/2019   Post a comment
Breached machines include more than 50,000 servers belonging to companies in the healthcare, telecommunications, media and IT sectors.
HawkEye Malware Finds Renewed Life With Financially Motivated Actors
Larry Loeb  
5/29/2019   Post a comment
IBM X-Force researchers have reported an increase in the HawkEye v9 keylogger infection campaigns after they looked at data from the IBM X-Force effort during April and May 2019.
Mobile Fraud Is on the March, Finds New RSA Report
Larry Loeb  
5/28/2019   2 comments
The RSA Quarterly Fraud Report observed several global fraud trends across attack vectors and digital channels, with attacks from rogue mobile applications up 300%.
Zscaler Finds Security Issues Galore in IoT Traffic
Larry Loeb  
5/24/2019   Post a comment
The use of plain-text HTTP communication, outdated libraries and weak default credentials all rang alarm bells.
Comment: Re: cut off - LarryLoeb - 5/24/2019
Comment: Re: cut off - LarryLoeb - 5/24/2019
Strategic Security Equals Faster Digital Transformation
Larry Loeb  
5/23/2019   Post a comment
Survey finds that respondents who adopted a more traditional or reactive approach to their data protection and security program did not believe they would reach their digital transformation goals.
Comment: Re: first - LarryLoeb - 5/22/2019
Comment: Re: cut off - LarryLoeb - 5/22/2019
Suppliers Cut Off Huawei
Larry Loeb  
5/22/2019   8 comments
If Android is to 'fork' following Huawei's isolation, the enterprise needs to begin adjusting the threat models used around employee device use.
Comment: Re: riks/benefit - LarryLoeb - 5/21/2019
Comment: Re: questions - LarryLoeb - 5/21/2019
Comment: Re: a lot - LarryLoeb - 5/21/2019
Comment: Re: riks/benefit - LarryLoeb - 5/21/2019
Does 'Client Hints' Leave Fingerprints?
Larry Loeb  
5/21/2019   5 comments
New web standard allows third-party services to obtain in-depth details about another site's visitors.
Monster Breaches Do Monstrous Damage
Larry Loeb  
5/21/2019   Post a comment
Breaches cause massive amounts of money to fix, as a new report from Bitglass shows.
Cisco All at Sea Over Trust Anchor Module Vulnerability
Larry Loeb  
5/15/2019   6 comments
Researchers have found ways to bypass the entire process of secure booting that the hardware was designed to support.
SharePoint Problem Returns. Be Afraid.
Larry Loeb  
5/14/2019   3 comments
Both Canada and Saudi Arabia issued alerts to the security community that they had observed traces of CVE-2019-0604 as part of other cyber attacks.
Study Digs the Dirt on US Cyber Hygiene
Larry Loeb  
5/13/2019   3 comments
Generally it's not good, but there are a few clean-livin' types out there.
LightNeuron Sneaks In Through the Exchange Backdoor
Larry Loeb  
5/9/2019   2 comments
A backdoor developed and disseminated by Turla is targeted at Microsoft Exchange mail servers.
'MegaCortex' Ransomware Hunts 'Big Game' Enterprise
Larry Loeb  
5/8/2019   1 comment
They aren't looking for a lot of little hits. They want treasure.
Enterprise Resilience: It's the Ecosystem, Stupid
Larry Loeb  
5/7/2019   2 comments
Organizations must rethink their approach to security in a way that defends not just themselves, but the entire ecosystem they inhabit, says Accenture report.
Quabot Trojan Evolves to Become Harder to Detect & Remove
Larry Loeb  
5/6/2019   4 comments
Researchers at Cisco Talos were the first to find that Quabot Trojan has been updated and changed.
Cybercrime Study Finds Increasing Costs as Well as Changing Targets & Methods
Larry Loeb  
5/3/2019   10 comments
Accenture and Ponemon Institute say that they are analyzing the latest cost numbers of cybercrime to try and help leaders to better target security investments and resources.
MuddyWater: The Dissection of an APT
Larry Loeb  
5/2/2019   8 comments
Kaspersky Security has taken a deep dive into MuddyWater.
190,000 Accounts in Docker Hub Database May Have Been Exposed
Larry Loeb  
5/1/2019   7 comments
Potentially poisoned images could be distributed without the distributors realizing that this is occurring.


Latest Articles
A history of password-stealing potential vulnerabilities has LastPass users worried.
Humans are often regarded as the 'weakest link' in information security. However, organizations have historically relied on the effectiveness of technical security controls, instead of trying to understand why people are susceptible to mistakes and manipulation.
Report found that DNS Amplification contributed to the largest share, compared to other methods, of attack activities in Q2 2019.
The threat of escalation attacks and forged administration levels has plagued Kerberos authentication systems for years. Data-analytics startup Qomplx claims to do the math that solves the problem.
Global network of honeypots measured more than triple the attack traffic of the previous period, to a total of over 2.9 billion events.
Flash Poll
Video
In a wide-ranging interview, Cisco security boss Gee Rittenhouse talks about how machine learning, AI, blockchain and other emerging technologies ...
CloudPassage's new technology, called Container Secure, involves a five-step process to ensure seamless security in container deployments from the ...
You can't so much as go to a coffee shop today without hearing the word 'blockchain.' Hearing about a useful blockchain is less common, but ...
Last year, 60 million companies changed owners worldwide. That turnover makes it incredibly difficult to avoid doing business with entities (e.g., ...
Keith Furst of Data Derivatives interviews Daniel Wagner, author of a new book, Virtual Terror: 21st Century Cyber Warfare. They discuss the ways ...
All Videos
Sponsored Video
Sage Wagner, senior security pre-sales engineer with RiskSense, provides a demo of the company's latest technology 'RiskSense Solution,' a ...
Janus Technologies is launching a line of products that protect against the many threats to enterprises' sensitive data. David Schultz, vice ...
This new video will inspire companies to reimagine their business for success in a world where connectivity is more than a commodity. Sponsored Video
All Videos
Radio Shows
like us on facebook
Security Now
About Us     Contact Us     Help     Register     Events     Supporting Partners     Twitter     Facebook     RSS
Copyright © 2019 Light Reading, part of Informa Tech,
a division of Informa PLC. All rights reserved. Privacy Policy | Cookie Policy | Terms of Use
in partnership with