article thumbnail

XDSpy APT remained undetected since at least 2011

Security Affairs

Researchers from ESET uncovered the activity of a new APT group, tracked as XDSpy, that has been active since at least 2011. XDSpy is the name used by ESET researchers to track a nation-state actor that has been active since at least 2011. The post XDSpy APT remained undetected since at least 2011 appeared first on Security Affairs.

Malware 136
article thumbnail

It’s Too Late for Threat Intelligence Vendors to Ignore IPv6

Webroot

Drafted by the Internet Engineering Task Force (ITEF) in 1998, it became an Internet Standard in 2017. IP addresses, those numbers assigned to every internet-connected device, or node, were designed to contain 32 bits. What continued IPv6 adoption means for internet security. IPv6 has been a long time coming.

Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

Chinese APT Tropic Trooper target air-gapped military Networks in Asia

Security Affairs

The Tropic Trooper APT that has been active at least since 2011, it was first spotted in 2015 by security experts at Trend Micro when it targeted government ministries and heavy industries in Taiwan and the military in the Philippines. “tracert -h 8 8.8.8.8”

article thumbnail

Post-Quantum Cryptography: Lessons Learned from SHA-1 Deprecation

Security Boulevard

SHA-1 was officially deprecated by NIST in 2011 and its usage for digital signatures was prohibited in 2013. Prepare a quantum-safe architecture now. Can the cybersecurity industry learn anything from the problems encountered with the move from the deprecated SHA-1 to the stronger and safer SHA-2 hashing algorithm?

article thumbnail

Engineering Secure Systems

Thales Cloud Protection & Licensing

As many software systems govern important aspects of life and are exposed to security risks by being connected to the internet, the same robust engineering approaches need to be applied. MBSE is fully compatible with modern approaches to software architecture such as ISO 42010:2011.

article thumbnail

How the Chrome Root Program Keeps Users Safe

Google Security

Once a CA is trusted, it can issue certificates for any website on the internet; thus, each newly added CA represents an additional attack surface, and the Web PKI is only as safe as its weakest link. For example, in 2011 a compromised CA led to a large-scale attack on web users in Iran. Incident Management No CA is perfect.

article thumbnail

Top 9 Network Access Control (NAC) Solutions

eSecurity Planet

Adding to the complexity are bring your own device (BYOD) policies, the prevalence of smartphones and tablets, and the rise of the Internet of Things (IoT). Impluse SafeConnect offers automatic device discovery and can support anywhere from 250 to 25,000 endpoints and up with its scalable appliance architecture. Top NAC solutions.