Remove 2021 Remove Architecture Remove Blog Remove DNS
article thumbnail

Black Hat USA 2021 Network Operations Center

Cisco Security

Cisco Secure returned as a supporting partner of the Black Hat USA 2021 Network Operations Center (NOC) for the 5 th year ; joining conference producer Informa Tech and its other security partners. Threat hunting is a core mission of the Cisco Secure team, while monitoring the DNS activity for potentially malicious activity.

DNS 138
article thumbnail

Log4Shell Vulnerability is the Coal in our Stocking for 2021

McAfee

Overview: On December 9th, a vulnerability (CVE-2021-44228) was released on Twitter along with a POC on Github for the Apache Log4J logging library. The most popular lookup currently being seen in both PoCs and active exploitation is utilizing LDAP; however, other lookups such as RMI and DNS are also viable attack vectors.

DNS 125
Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

Threat Intelligence and Protections Update Log4Shell CVE-2021-44228

McAfee

CVE-2021-44228 – Apache Releases Log4j Version 2.15.0 A full technical analysis can be found here: McAfee Advanced Threat Research: Log4Shell Vulnerability is the Coal in our Stocking for 2021. In this blog, we present an overview of how you can mitigate the risk of this vulnerability exploitation with McAfee Enterprise solutions.

Malware 98
article thumbnail

Iranian Charming Kitten APT used a new BellaCiao malware in recent wave of attacks

Security Affairs

The researchers pointed out that after a transition of power in 2021, the IRGC and the Iran-linked APT groups adopted a more aggressive strategy. The Charming Kitten used a new custom malware, dubbed BellaCiao, that is tailored to suit individual targets and is very sophisticated.

Malware 96
article thumbnail

New espionage attack by Molerats APT targeting users in the Middle East

Security Boulevard

In December 2021, the ThreatLabz research team identified several macro-based MS office files uploaded from Middle Eastern countries such as Jordan to OSINT sources such as VT. During our investigation we discovered that the campaign has been active since July 2021. 202 from 27-12-2021. Introduction. Threat attribution.

article thumbnail

Black Hat USA 2022 Continued: Innovation in the NOC

Cisco Security

In part one of our Black Hat USA 2022 NOC blog, we discussed building the network with Meraki: Adapt and Overcome. 25+ Years of Black Hat (and some DNS stats), by Alejo Calaoagan. If there is a specific DNS attack that threatened the conference, we supported Black Hat in blocking it to protect the network.

DNS 75
article thumbnail

Black Hat Europe 2022 NOC: The SOC Inside the NOC

Cisco Security

Cisco Umbrella : DNS visibility and security. As a NOC team comprised of many technologies and companies, we are pleased that this Black Hat NOC was the most integrated to date, to provide an overall SOC cybersecurity architecture solution. Integrating Security. Cisco Webex : for incident delivery and collaboration.

DNS 71