McAfee

DECEMBER 22, 2021

Log4j/Log4shell is a remote code execution vulnerability (RCE) in Apache software allowing attackers unauthenticated access into the remote system. It is found in a heavily utilized java open-source logging framework known as log4j. Attack Chain and Defensive Architecture. Threat Summary.

Malware 98

Malware Risk Internet Internet 98

McAfee

SEPTEMBER 29, 2021

This can be a tall order. The security operations center ( SecOps ) team sits on the front lines of a cybersecurity battlefield. The SecOps team works around the clock with precious and limited resources to monitor enterprise systems, identify and investigate cybersecurity threats, and defend against security breaches.

DNS 67

DNS Manufacturing Data breaches Risk 67

Security Boulevard

APRIL 26, 2022

In 2021, the main attack vector used by this threat actor was credential phishing attacks through emails, posing as Naver, the popular South Korean search engine and web portal. Some details about this campaign were published in this Korean blog, however they did not perform the threat attribution. Attack chains.

Phishing 52

Phishing DNS Cryptocurrency Accountability 52

Malwarebytes

SEPTEMBER 14, 2022

From industry tips and best practices to the latest Malwarebytes product releases and how-tos, our Business newsletter is chock-full of the best of our business blog. Now more than ever, threat actors are trying to attack company networks. Your level of prevention is determined by how much risk you accept to take on.

Technology 66

Technology DNS Cyber Insurance Insurance 66

Cisco Security

AUGUST 29, 2022

In part one of this issue of our Black Hat USA NOC (Network Operations Center) blog, you will find: Adapt and Overcome. This is the only way a community can have trust and grow, together. This is the only way a community can have trust and grow, together. Building the Hacker Summer Camp network, by Evan Basta. Full stop.

Engineering 70

Engineering Wireless Malware DNS 70

Security Boulevard

APRIL 13, 2022

This can be done using a low-privileged account on any Windows SCCM client. To prevent the attack techniques noted in this blog post, disable the “Allow connection fallback to NTLM” client push installation setting, which is enabled by default in SCCM. Background.

Authentication 52

Authentication Accountability Penetration Testing Software 52

Cisco Security

AUGUST 28, 2023

XDR (eXtended Detection and Response) Integrations At Black Hat USA 2023, Cisco Secure was the official Mobile Device Management, DNS (Domain Name Service) and Malware Analysis Provider. The NOC partners are selected by Black Hat, with Arista, Cisco, Corelight, Lumen, NetWitness and Palo Alto Networks delivering from Las Vegas this year.

Wireless 60

Wireless DNS Mobile Technology 60

Cisco Security

JUNE 15, 2021

Everyone has been using and abusing the “next-generation” qualifier to describe any modern firewall product for far too long, so it is appropriate to drop this extraneous prefix and talk about what truly comes next for this technology. How this insertion happens is changing quite rapidly, though. Read Me First.

Firewall 128

Firewall Software Network Security Encryption 128

Cisco Security

AUGUST 26, 2022

At the RSA Conference 2022 earlier this year, Jeetu Patel, Cisco’s Executive Vice President and General Manager of Security and Collaboration, spoke of how the ‘cybersecurity poverty line’ is widening and how malicious actors are taking advantage of this gaping hole to unleash persistent attacks. Happy integrating!

Firewall 114

Firewall Authentication Passwords Threat Detection 114

Duo's Security Blog

MAY 10, 2023

With advanced language-based AI tools like ChatGPT growing increasingly accessible, the battle to prevent phishing attacks from impacting users is no longer answerable with just one security solution. In fact, it instead can have unexpected side effects that make employees even more susceptible to phishing.

Phishing 54

Phishing DNS Authentication Risk 54

Webroot

JULY 6, 2022

Social engineering attacks like phishing, baiting and scareware have skyrocketed to take the top spot as the #1 cause of cybersecurity breaches. So what makes social engineering so effective? When cybercriminals use social engineering tactics, they prey on our natural instinct to help one another. How to spot social engineering.

Social Engineering 125

Social Engineering Engineering Scams Phishing 125