Cisco Security

MARCH 11, 2021

Part 1: Top threat categories. To do so, it’s important to know what security issues are most likely to crop up within your organization, and their potential impact. The challenge is that the most active threats change over time, as the prevalence of different attacks ebb and flows. Organizations and malicious DNS activity.

DNS 138

DNS Phishing Ransomware Internet 138

The Last Watchdog

JULY 30, 2018

Over the past decade, cyber security solutions have evolved into specific categories of solutions. Grouping similar items into categories serve a particular purpose. For example, sports cars represent an entirely different category of vehicles than luxury vehicles. Categories of vehicles are somewhat easy to define.

CISO 140

CISO Cyber Attacks Data collection Cybersecurity 140

Security Affairs

JUNE 20, 2022

“This blog is the story of a “zombie” Safari 0-day and how it came back from the dead to be disclosed as exploited in-the-wild in 2022. I do this to try and understand when the bug was introduced, but also to try and save time.” “There’s no easy answer for what should have been done differently.

Hacking 116

Hacking Software Cybersecurity Data breaches 116

NopSec

FEBRUARY 13, 2024

Brad LaPort , a veteran Gartner analyst and I were on a content project, talking about why the market was missing out on a new category to encapsulate the disparate exposure data and derive actionable insights. We were debating about what we should call this new category. Is it Cyber Exposure Management? Threat Exposure Management?

Marketing 52

Marketing Risk Digital transformation Software 52

Troy Hunt

JANUARY 23, 2022

I wrote many blog posts about doing big things for small dollars and did talks all over the world about the great success I'd had with these approaches. HIBP is made up of many different components including a website, relationship database, serverless "Functions" and storage. Something else?

Passwords 363

Passwords Accountability Firewall Risk 363

Thales Cloud Protection & Licensing

MAY 30, 2019

As I noted in my last blog post , containers, which are now pervasive in enterprises, are ephemeral, and microservices frameworks like Kubernetes treat them as such. So, in this and my next few blogs, I will share some questions you might want to ask as you go about securing your data in a microservices environment. Data security.

Authentication 97

Authentication Software Network Security 97

Security Affairs

JUNE 20, 2022

Now researchers from Cleafy have spotted the BRATA malware targeting a specific financial institution, its operators modified the attack chain customizing the malware to hit a specific target at a time, moving to a different bank after the victim begins implementing countermeasures. ” reads the report published by the researchers.

Malware 100

Malware Banking Antivirus Phishing 100

Lenny Zeltser

MAY 10, 2023

When contemplating the next step in your career as a cybersecurity leader, understand what you do best and what you enjoy doing. Each approach is helpful for different reasons. Figuring this out will help you identify organizations and projects that will benefit from your superpowers and accelerate your growth as a professional.

CISO 66

CISO Technology Media Cybersecurity 66

ForAllSecure

FEBRUARY 23, 2023

In this blog post, we'll explore why API security is so important, and how you can make sure you're doing it right. Your uncertainty isn’t surprising when everyone’s putting marketing effort behind those terms and shoehorning products into the category even when they don’t fit. Or something else entirely.

Authentication 52

Authentication Threat Detection Firewall Technology 52

Security Boulevard

JANUARY 17, 2024

This blog post describes methods that SpecterOps consultants have researched to successfully circumvent this technology during offensive assessments. Each type of browser isolation has different pros and cons, but we will focus on RBI today. Why Do We Care? What is RBI and Why Use It? In this function, it does an excellent job.

DNS 62

DNS Penetration Testing Passwords Encryption 62

Webroot

OCTOBER 13, 2021

While the list below may define payloads into different categories of malware, note that many of these bad actor groups contract work from others. The post The 6 Nastiest Malware of 2021 appeared first on Webroot Blog. This allows each group to specialize on their respective payload and perfect it. This year’s wicked winners.

Malware 145

Malware Small Business Antivirus Backups 145

Security Affairs

MAY 7, 2022

“The dropped wer.dll is a loader and wouldn’t do any harm without the shellcode hidden in Windows event logs. “The dropped wer.dll is a loader and wouldn’t do any harm without the shellcode hidden in Windows event logs. It allows the “fileless” last stage Trojan to be hidden from plain sight in the file system.”

Malware 88

Malware Encryption Hacking Cybersecurity 88

Cisco Security

JANUARY 10, 2023

Using this information, last year I wrote a blog summing up the nine top of mind issues I believed will most impact CISOs as we headed into 2022. Many of them still ring true now and will continue to do so, but some new concerns have risen up the agenda. CISO in the firing line. How Zero Trust will progress.

CISO 125

CISO Insurance Cyber Insurance Phishing 125

Veracode Security

DECEMBER 21, 2020

It can sometimes be a little challenging to figure out specifically how to address different vulnerability classes in Python. This article addresses one of the top finding categories found in Python, CWE 117 (also known as CRLF Injection), and shows how to use a custom log formatter to address the issue. We import logging and anticrlf.

Accountability 98

Accountability 98

Approachable Cyber Threats

SEPTEMBER 30, 2021

Category Cybersecurity Fundamentals Risk Level. And while your results with different companies may vary, there’s always been one constant: that small box with some blinking lights and tiny arms sticking off of it that never provides enough Wi-Fi coverage where you need it. Why do we call it a router then?”

Internet 98

Internet Internet VPN Banking 98

BH Consulting

SEPTEMBER 7, 2022

So while the risk remains, what can we do about it? This blog is the first in a series where I will cover what a cyberattack involves, outline how it’s carried out, and explain how it might differ depending on your chosen technology platform. and ‘How would I deal with it?’. Prepare to attack. Gearing up.

Risk 52

Risk Backups Technology Ransomware 52

SiteLock

AUGUST 27, 2021

Following up on last week’s blog titled, “ How to Look for Malware in your Website Files ” we talk about how to look for malware in databases and what types of things you should be looking for. If your host offers a different tool, you may want to check their local knowledge base for further support. Database Admin Tool. base64_decode.

Malware 98

Malware Risk Hacking Engineering 98

Google Security

JANUARY 11, 2024

If you need a refresher, you can read our previous blog post detailing MiraclePtr and its objectives. Crash reports Crash reports offer a different perspective on MiraclePtr's effectiveness. As explained in the previous blog post, when an allocation is quarantined, its contents are overwritten with a special bit pattern.

70

70

Cisco Security

MARCH 11, 2021

To do so, it’s important to know what security issues are most likely to crop up within your organization, and their potential impact. The challenge is that the most active threats change over time, as the prevalence of different attacks ebb and flows. When it comes to security, deciding where to dedicate resources is vital.

DNS 61

DNS Phishing Ransomware Internet 61

Security Boulevard

JUNE 23, 2022

Note that it is no longer my job to define markets , so I am doing it for fun here (yes, people find the weirdest things to be fun! ). Among all the responses, one stood out to me: “public cloud has enough special deployment and collection differences from on-prem that there has to be a CDR function.” So, do we need a CDR or not?!

Threat Detection 52

Threat Detection Marketing Technology 52

Anton on Security

AUGUST 3, 2022

This blog is basically an alpha version for a future blog on how we are evolving and improving the shared responsibility model shortcomings with our shared fate model , but this one only has the challenges, and not the solutions. To me, while shared responsibility is definitely possible, shared accountability is a different story.

Risk 100

Risk Threat Detection Accountability Technology 100

SiteLock

AUGUST 27, 2021

Bots can be put into two categories, “good” and “bad.” Exploring the Difference Between Good and Bad Bots. Unfortunately, search engines don’t care if the duplicate content was your doing or not, either way, you’ll be penalized. If you spend time reading blogs, you’ve probably spent some time perusing the comment section.

DDOS 98

DDOS Firewall Engineering Internet 98

Malwarebytes

SEPTEMBER 30, 2021

These applications take advantage of users who do not know how to cancel a subscription by charging them long after they have deleted the application. The threat actors use a few different methods to avoid detection. A full list of applications and hashes can be found in the blog published by the researchers. How it works.

Mobile 59

Mobile Social Engineering Malware Scams 59

Veracode Security

APRIL 7, 2021

This is the eighth entry in the blog series on using Java Cryptography securely. broad categories of password hashing algorithms??that Prominent functions in this category are Argon2 [7] and script [8]. far from each other; like different data stores. Later we looked at What???s s New in the latest Java version.

Passwords 123

Passwords Architecture Encryption Government 123

Duo's Security Blog

JULY 19, 2022

We do a lot of coaching and mentoring,” Valeria said. The Duo Blog caught up with some Duo team members to learn why they got involved with design thinking and how it’s impacted them. Ahead of the workshop, the participants organized their data into categories.

Marketing 83

Marketing Engineering 83

Adam Shostack

SEPTEMBER 14, 2018

If you’re reading this blog, you may have seen that some people are nearly mad about threat modeling. What distinguishes those people from those who keep trying to teach developers about the difference between a hactivist and a script kiddie? The ones who say “you’re never done threat modeling.”

Engineering 200

Engineering Media Technology 200

Security Boulevard

MAY 19, 2022

This is written jointly with Tim Peacock and will eventually appear on the GCP blog. you, the esteemed reader of this blog , do not need this explanation, perhaps, but a typical cloud user might]. How is the cloud different compared to the traditional environment? Environment changes. as are the assets being threatened.

Threat Detection 57

Threat Detection Technology Backups Data breaches 57

The Last Watchdog

JULY 27, 2020

Conversely, consumer advocates and diversity experts can see how AI could be utilized to redistribute political power more equitably, and in doing so, recalibrate society – including blunting systemic racism. Or will AI help pivot us to a new, more equitable way of doing things? It’s more profound than fire or electricity.”

Surveillance 305

Surveillance Government Accountability Artificial Intelligence 305

Security Affairs

APRIL 25, 2020

” reads the blog post published by Zscaler. Zscaler also observed Coronavirus-themed attacks across several different threat categories, including the infamous Nigerian 419 scam. In January, we saw (and blocked) 1,200 such attacks. How many did we see in March? ” continues the report.

Phishing 101

Phishing Advertising Malware Scams 101

Security Affairs

JUNE 14, 2022

Once installed, they intercept legitimate Linux commands to filter out information that they do not want to be displayed, such as the presence of files, folders, or processes. The experts reported that the Syslogk rootkit is heavily based on an open-source, well-known kernel rootkit for Linux, dubbed Adore-Ng. ” continues the analysis.

Malware 80

Malware System Administration Antivirus Architecture 80

eSecurity Planet

JANUARY 11, 2024

Ransomware remains just one of many different threats and as security teams eliminate key vectors of attack, adversaries will shift tactics. Which unmanaged devices do attackers use? The Sophos X-Ops team highlighted the issue in a recent blog , which details how remote encryption evades multiple layers of network security.

Ransomware 122

Ransomware Encryption IoT VPN 122

Duo's Security Blog

JULY 15, 2021

Part of our Administrator's Guide to Passwordless blog series See the video at the blog post. The history of active phishing has taught us that this is not something that the user can be relied upon to do, so any solution must avoid being dependent on the user checking the domain before authenticating.

Phishing 96

Phishing Authentication Passwords Risk 96

Security Affairs

JUNE 21, 2022

Based on the analyzed templates, the attackers are likely using an automated way to generate their phishing letters, by doing so they’re able to scale their campaigns to ultimately target a broader number of customers globally, which has previously been observed in spam strains delivered with Emotet and Oakbot. com” VS “alfuttaim[.]com”).

Phishing 124

Phishing Accountability Hacking Scams 124

CyberSecurity Insiders

JANUARY 5, 2022

This blog was written by an independent guest blogger. Technology in healthcare has the potential to make all the difference in terms of safety outcomes. However, technology ultimately is doing more good than bad in healthcare. Tech’s contributions toward safety have revolutionized care accessibility, reach, and potential.

Healthcare 136

Healthcare Artificial Intelligence Computers and Electronics Technology 136

BH Consulting

JANUARY 4, 2023

What does this have to do with security? Back in October, we blogged about how phishing scams are becoming more common. For all these different groups to warn the public independently of one another suggests something is up. So what can you do to prepare for a barrage of emails, texts, phishing attempts and scams?

Scams 52

Scams Banking Cybercrime Insurance 52

Security Affairs

SEPTEMBER 8, 2019

but that recursive question raised a more general question: what are the differences between cybersecurity educational models? Every process differs from each other so what teaching process would be more effective to increase the cybersecurity knowledge ? How to improve technical skills? Photo by Sharon McCutcheon on Unsplash.

Computers and Electronics 76

Computers and Electronics Penetration Testing Education Cybersecurity 76

CyberSecurity Insiders

OCTOBER 1, 2021

So, what does culture have to do with insider threats? There are two general categories of threat: the accidental or the intended. Flexibility must be built into training plans to allow employees to consume the material in different ways. Great question. Exploring Accidental and Intended Insider Threats.

Technology 136

Technology Phishing Risk Cybersecurity 136