eSecurity Planet

AUGUST 10, 2023

As a bonus, many of these tools are free to access and have specialized feeds that focus on different industries and sectors. OTX prides itself on being a completely open community for threat intelligence, extending access to threat research and shared expertise from security professionals to any and all users. critical infrastructure.

Internet 72

Internet Internet Cybersecurity Malware 72

ForAllSecure

MARCH 29, 2023

In the following sections, we will discuss: API Basics Common API Security Vulnerabilities Best Practices for API Security How to do API Security Automatically By the end of this blog post, you will have a good understanding of API security and the steps you can take to easily secure your APIs. API Basics: What Is an API and How Do APIs Work?

Authentication 40

Authentication Passwords Encryption Software 40

SecureList

JULY 25, 2022

One of our industry partners, Qihoo360, published a blog post about an early variant of this malware family in 2017. If so, it would follow that the attackers had prior access to the victim’s computer in order to extract, modify and overwrite the motherboard’s firmware. Affected devices. an evil maid attack scenario).

Firmware 144

Firmware DNS Malware Technology 144

Security Boulevard

FEBRUARY 17, 2022

Improper access control. The same-origin policy (SOP) usually controls data access cross-origins. But the SOP does not limit javascript code, and the HTML <script> tag is allowed to load Javascript code from any origin. Preventing these session management pitfalls requires multiple layers of defense.

Authentication 105

Authentication Encryption Engineering Firewall 105

Duo's Security Blog

FEBRUARY 16, 2024

For managed service providers (MSPs), navigating the ever-evolving landscape of access security can be a daunting task. With complex identity stacks and a constant influx of new devices and endpoints, ensuring secure access across your clients' infrastructure requires comprehensive data-driven insights.

Authentication 102

Authentication Accountability Risk Mobile 102

Security Boulevard

NOVEMBER 30, 2021

A little over a year ago, I switched roles at Oracle and joined the Oracle Cloud Infrastructure (OCI) Product Management team working on Identity and Access Management (IAM) services. It's been an incredibly interesting (and challenging) year leading up to our release of OCI IAM identity domains. .

Authentication 105

Authentication Passwords 105

Cisco Security

AUGUST 29, 2022

In part one of this issue of our Black Hat USA NOC (Network Operations Center) blog, you will find: Adapt and Overcome. Cisco Meraki already donated 45 access points (APs), seven MS switches, and two Meraki MX security and SD-WAN appliances to Black Hat, for regional conferences. Building the Hacker Summer Camp network, by Evan Basta.

Engineering 83

Engineering Wireless Malware DNS 83

SecureList

DECEMBER 23, 2020

In this blog, we describe two separate incidents. This Bookcode sample has almost identical functionality as the malware described in the comprehensive report recently published by Korea Internet & Security Agency (KISA). Both malicious programs have almost identical debugging messages. Credential Access. hxxp://www.k-kiosk[.]com/bbs/notice_write.asp.

Malware 76

Malware Cryptocurrency Encryption Passwords 76

Duo's Security Blog

JANUARY 28, 2022

So it was good to see that in response to last May’s Executive Order 14028 , the Office of Management and Budget (OMB) released a memo Wednesday outlining a new strategy for moving the federal government toward a zero trust cybersecurity posture. Where the Federal government goes, other parts of the private sector follow.

Authentication 52

Authentication Government DNS Encryption 52

Cisco Security

MAY 24, 2021

Why all the buzz around pursuing group-based policy management to achieve zero trust? Simply put, applying “never trust; always verify” to anyone and any device attempting to access an enterprise network is a no-brainer nowadays. Adopting zero-trust initiatives and best practices is all the rage. And rightly so. Not so fast.

Engineering 100

Engineering Architecture Manufacturing Software 100

Lenny Zeltser

FEBRUARY 13, 2020

Having joined Axonius a few months earlier to lead Product Management, I benefited from knowing the company’s business goals, people, and culture. One of my team’s first projects was to unify identity management and deploy Single Sign-On (SSO). What was my first month like? Maybe I’ll see you there.

CISO 79

CISO Information Security Architecture Technology 79

Cisco Security

AUGUST 28, 2023

XDR (eXtended Detection and Response) Integrations At Black Hat USA 2023, Cisco Secure was the official Mobile Device Management, DNS (Domain Name Service) and Malware Analysis Provider. Typically, a CTB deployment requires a broker node and a manager node. We also deployed ThousandEyes for Network Assurance.

Wireless 68

Wireless DNS Mobile Technology 68

Security Boulevard

OCTOBER 19, 2022

The vulnerability is tagged with a CVSS score of 9.6 Details about the report can be found in our blog post How Do You Check Old Hashes in Your ABAP System? Restrict the access to the affected tables. Restricting access includes: Protection against direct database access from outside (using SQL).

Passwords 64

Passwords Risk Phishing Architecture 64

Troy Hunt

JUNE 15, 2023

To make life much, much easier on those folks monitoring multiple domains, they're now all bundled up into a centralised dashboard accessible from the existing Domain search link on the website. We can't add a meta tag. We don't have any of those 4 aliases on our domain. We can't upload a file.

Accountability 232

Accountability Small Business InfoSec DNS 232

Troy Hunt

MARCH 21, 2018

Transparency has been a huge part of that effort and I've always written and spoken candidly about my thought processes, how I handle data and very often, the mechanics of how I've built the service (have a scroll through the HIBP tag on this blog for many examples of each).

Data breaches 182

Data breaches Government Passwords Media 182

LRQA Nettitude Labs

OCTOBER 18, 2023

As long as the types on the left- and right-hand side of the cast have at least one vftable, and both types were declared within the binary being complied, the object types can be consistently and uniquely determined by their vftable address (with one caveat: comdat folding for identical vftables must be disabled in the linker).

Engineering 91

Engineering 91

SecureList

APRIL 27, 2021

In December, SolarWinds, a well-known IT managed services provider, fell victim to a sophisticated supply-chain attack. The company’s Orion IT, a solution for monitoring and managing customers’ IT infrastructure, was compromised. In November and December 2020, two public blog posts were published about this campaign.

Malware 138

Malware Spyware Government Social Engineering 138