Anton on Security

SEPTEMBER 3, 2021

What if we don’t look at XDR from either EDR or SIEM angle, but we look at it from first principles? Namely, what kind of detection and response toolset would you like to have in your life ? 1990s… What then? As you also recall, I never really voted for any of the choices in the post. but not cloudy?—?1990s…

Technology 214

Technology Threat Detection Marketing Cybersecurity 214

Security Boulevard

NOVEMBER 27, 2023

Among these protective mechanisms, Endpoint Detection and Response (EDR) stands out. What is EDR? Endpoint Detection and Response, often abbreviated as EDR, is a cybersecurity approach aimed at continuously monitoring and responding to. Let’s delve deeper.

Cyber threats 59

Cyber threats Cybersecurity 59

Anton on Security

APRIL 28, 2022

Q: When do you think the industry will understand what XDR entails? A: A cynical part of me wants to say “never”, for the following reasons: what various vendors define as XDR morphs and shifts too fast and (this is a gut feel, not based on any solid fact base) it is not really converging to a common position.

Threat Detection 189

Threat Detection Technology VPN Architecture 189

Malwarebytes

SEPTEMBER 17, 2023

The recent attack on MGM Resorts generated lots of speculation with regard to what the cause was. Well, confirmation is now forthcoming as an affiliate of the BlackCat/ALPHV ransomware group is said to be the one responsible for the attack and subsequent outage. He is free to disclose it in a responsible manner if he so chooses.

Ransomware 128

Ransomware Social Engineering Passwords Backups 128

eSecurity Planet

JANUARY 11, 2024

Naturally, this leads to three important questions: What are unmanaged devices? What Are Unmanaged Devices? Greg Fitzerald, co-founder of Sevco Security , disclosed to eSecurity Planet that their recent State of the Cybersecurity Attack Surface research found “11% of all IT assets are missing endpoint protection.”

Ransomware 112

Ransomware Encryption IoT VPN 112

eSecurity Planet

DECEMBER 8, 2022

SafeBreach Labs researcher Or Yair has uncovered zero-day vulnerabilities in several leading endpoint detection and response ( EDR ) and antivirus ( AV ) solutions that enabled him to turn the tools into potentially devastating next-generation wipers. Also read: Why You Need to Tune EDR to Secure Your Environment.

Antivirus 123

Antivirus Software Marketing Ransomware 123

Malwarebytes

AUGUST 28, 2023

The Cisco Product Security Incident Response Team (PSIRT) has posted a blog about Akira ransomware targeting VPNs without Multi-Factor Authentication (MFA). Password spraying focuses on trying a few passwords across many accounts, often to avoid account lockouts and detection. How to avoid ransomware Block common forms of entry.

Ransomware 86

Ransomware VPN Passwords Backups 86

The Last Watchdog

MAY 15, 2021

Much attention has been paid to the widespread failure to detect the insidious Sunburst malware that the SolarWinds hackers managed to slip deep inside the best-defended networks on the planet. But there’s also an encouraging ‘response’ lesson SolarWinds teaches us, as well. Related: The undermining of the global supply chain.

Technology 157

Technology Hacking CISO Threat Detection 157

Heimadal Security

FEBRUARY 24, 2021

The notion of endpoint detection and response has been widely discussed in the cybersecurity industry for almost a decade now. If you’re a longtime reader, then you know that our blog made no exception. Continuing our informal series on this beloved digital defense concept, today’s topic is that of EDR software.

Software 74

Software Cybersecurity Education 74

Malwarebytes

JULY 31, 2023

Regular readers of the blog will know of the chaos that accompanies attacks on healthcare providers. Much better to blame an affiliate (whether an affiliate is responsible or not) and try to salvage some good PR from the situation. The two services, which operate in a region of 12 million people, were not targeted directly.

Backups 89

Backups Healthcare Risk Technology 89

Cisco Security

DECEMBER 20, 2021

This blog provides an overview of how Cisco Secure Endpoint helps protect your environment from attackers exploiting this vulnerability. What You Need to Know About Log4j. How Cisco Secure Endpoint Helps. Cisco Secure Endpoint rapidly identifies and protects against Log4j exploits in multiple ways.

Software 85

Software Risk Cybersecurity 85

McAfee

SEPTEMBER 22, 2021

While many of these vulnerabilities are important and should be patched as soon as possible, there is one critical vulnerability that McAfee Enterprise wants to immediately bring to your attention due to the simplicity of what is required to exploit, and evidence that possible exploitation is already being attempted. Source: MVISION Insights.

Firewall 55

Firewall Software DDOS Internet 55

Anton on Security

JUNE 10, 2022

Before I go into my specific observations, I wanted to share what impressed me the most this time. What does this mean, specifically? What does this mean, specifically? One of the things I do every year at the RSA conference is to wander the expo halls trying to deduce themes and trends for the industry.

VPN 189

VPN Marketing Firewall Passwords 189

Anton on Security

JULY 20, 2022

Let’s continue our fun conversation on threat detection in the cloud that we started in “Who Does What In Cloud Threat Detection?” and “How to Think about Threat Detection in the Cloud” and continued somewhat in “Detection as Code? No, Detection as COOKING!” or even goodness in detection.

Threat Detection 100

Threat Detection Cloud Migration Engineering Technology 100

LRQA Nettitude Labs

NOVEMBER 29, 2023

Things are getting more and more difficult with Endpoint Detection and Response (EDR) products improving, making it more challenging to get an implant. This post is going to present a slightly new method for bypassing EDR, commonly known as CreateThreadPoolWait. However, instead of using kernel32.dll

Encryption 98

Encryption 98

McAfee

JULY 6, 2021

Do you usually read what critics say before deciding to see a movie or read a book? But rather than simply share a few top-tier analyst blurbs with you, we’d like to walk through what these insights mean to our growing set of customers and how their sec operations will evolve with greater efficiencies. His reaction to our use cases?

Marketing 105

Marketing 105

Malwarebytes

APRIL 17, 2023

But have no fear: Apple security experts have dissected the ransomware, taking a deep dive into what it can and cannot do, and concluded that it is, actually, toothless. Yes, it can indeed run on Apple Silicon. macOS users have nothing to worry about." Because the signature is invalid, macOS won't execute it.

Ransomware 91

Ransomware Backups Malware Encryption 91

DoublePulsar

APRIL 20, 2023

Almost two weeks ago, I wrote a piece called “ Black Basta ransomware group extorts Capita with stolen customer data, Capita fumble response ”. What happened at Capita? Previously, they said 31st March — the date of the “IT Incident”.

Ransomware 126

Ransomware Government Data breaches Media 126

Malwarebytes

MAY 31, 2023

In this blog, we'll review Volt Typhoon, dig into how they evade detection, discuss CISA's protective recommendations, and see how Malwarebytes EDR can help eliminate such threats. Who is Volt Typhoon? Given their ties to the Chinese government, it’s fair to label Volt Typhoon as an Advanced Persistent Threat (APT) group.

Passwords 74

Passwords Government Firewall Accountability 74

Webroot

MAY 25, 2021

Especially in terms of cybersecurity, efficacy is something of an amorphous term; everyone wants it to be better, but what exactly does that mean? What else can you do? And how do you properly measure it? But the tools aren’t everything. Here are our top 5 tips for getting the best possible efficacy out of your IT security stack.

Phishing 143

Phishing DNS Backups Cyber threats 143

Security Affairs

MAY 22, 2023

Experts spotted the ALPHV/BlackCat ransomware group using signed malicious Windows kernel drivers to evade detection. A BlackCat affiliate employed signed malicious Windows kernel drivers to evade detection. Trend Micro researchers shared details about ALPHV/BlackCat ransomware incident that took place on February 2023.

Ransomware 91

Ransomware Malware Hacking Technology 91

McAfee

NOVEMBER 10, 2020

However, McAfee also asserts that the nature of this environment demands that additional countermeasures be implemented to quickly detect, block and respond to exploits originating from authorized cloud services. The Anatomy of a Cloud Services Attack. Establish persistence in the network. Exfiltrate data. Basic SOC Best Practices.

VPN 92

VPN Cyber Attacks Accountability Threat Detection 92

The Last Watchdog

DECEMBER 26, 2018

Threat hunting is the practice of actively seeking out dangers to cyber security by detecting and eliminating new and emerging threats that are able to evade preventative controls such as firewalls and antivirus software. So, what do you need to get started? Related podcast: The re-emergence of SIEMs. Seeking anomalous activity.

Penetration Testing 173

Penetration Testing Technology Software Antivirus 173

Security Boulevard

SEPTEMBER 3, 2021

What if we don’t look at XDR from either EDR or SIEM angle, but we look at it from first principles? Namely, what kind of detection and response toolset would you like to have in your life ? Note that it also made it very easy for me to first latch onto the “XDR is improved EDR ” route, which I later abandoned ….

Technology 64

Technology Threat Detection Marketing Cybersecurity 64

Security Boulevard

JULY 20, 2022

Let’s continue our fun conversation on threat detection in the cloud that we started in “Who Does What In Cloud Threat Detection?” and “How to Think about Threat Detection in the Cloud” and continued somewhat in “Detection as Code? No, Detection as COOKING!” Rough Guidelines for Good Cloud Threat Detection.

Threat Detection 98

Threat Detection Cloud Migration Engineering Technology 98

McAfee

NOVEMBER 25, 2019

Fortunately, the building was equipped with strong detection security measures, and the burglar—unaware of the location of a laser tripwire—soon set off a silent alarm. What is true in the world of police is also true in the world of cybersecurity: Detection means nothing without response. This is the end of the road.”

Backups 52

Backups Marketing Technology Cybersecurity 52

SC Magazine

JULY 8, 2021

Phishing scammers posing as customers are contacting live-chat support agents with phony issues or problems and tricking them into opening up malicious documents, according to an incident response expert who has observed a marked uptick in use of this tactic over the last two quarters.

Phishing 134

Phishing Antivirus Scams Malware 134

Security Boulevard

JUNE 21, 2023

Smart TV Dilemmas It's hard nowadays to find a TV that is not "smart". They all come preloaded with apps to watch Netflix, Disney+ and the like. Not everyone has a new TV though. For older "dumb" TVs, streaming devices are very popular. And even for TVs with built-in apps, there are still reasons to use a separate streaming device.

Firmware 105

Firmware DNS Malware Manufacturing 105

McAfee

NOVEMBER 9, 2020

Making sense of lot s of information and noise to access what really matters. XDR (Extended Detection & Response) has been a technical acronym throw n around in the cybersecurity industry with many notations and promises. Let’s begin with what does XDR refer to and its evolution. In other words,?

Cybersecurity 54

Cybersecurity Architecture Technology Threat Detection 54

eSecurity Planet

MARCH 14, 2022

Cobalt Strike – now owned by HelpSystems – provides various packages and tools to detect outdated software, generate malware , test endpoints , or run spear phishing campaigns that maximize success rate. Indeed, the tool can assess vulnerabilities and run penetration tests , while most tools on the market cannot do both.

Energy and Utilities 129

Energy and Utilities DNS Penetration Testing Ransomware 129

SC Magazine

JUNE 21, 2021

In a recent blog she tackles the growing evolution of security information and event management systems over the past decade and calls out a number of outdated or dishonest criticisms that are regularly lobbed at the technology today. David Paul Morris/Getty Images). Mellen: I hope that they’re not trying to actively be deceptive.

Marketing 70

Marketing Technology Media Big data 70

McAfee

FEBRUARY 16, 2021

What is your organization ’ s readiness for the emerging eXtended Detection Response (XDR) technology ? As XDR capabilities become available , organizations need to think through how to embrace the new security operations technology destined to empower detection and response capabilities. This cry is not new.

Technology 92

Technology Phishing Cybersecurity 92

Security Boulevard

JUNE 10, 2022

Before I go into my specific observations, I wanted to share what impressed me the most this time. So, what was the theme that came to me as I was wandering the halls? What does this mean, specifically? What does this mean, specifically? My first reaction was the normalcy of it all?—?it It was the past and the future.

VPN 116

VPN Marketing Firewall Passwords 116

McAfee

SEPTEMBER 5, 2019

We at McAfee have been advocating the administrative benefits of integrated, centrally managed endpoint security for decades, but you don’t just have to take our word for it. EDR Becoming an Integral Component of Endpoint Security. EDR Becoming an Integral Component of Endpoint Security.

CISO 40

CISO Retail Antivirus Technology 40

Security Boulevard

JUNE 23, 2022

Let’s play a game and define a hypothetical market called Cloud Detection and Response (CDR). As you can see, I stole some ideas from my original EDR definition so that some useful similarities come out. A SOAR may automate responses. But, no, the cloud is not just somebody else’s computer :-).

Threat Detection 52

Threat Detection Marketing Technology 52

Centraleyes

MARCH 12, 2024

What is a Security Audit? At its core, an audit systematically examines an organization’s processes, controls, and practices. In cybersecurity, audit management involves assessing the effectiveness of security measures, identifying vulnerabilities, and ensuring compliance with industry standards and regulations.

Risk 52

Risk Cybersecurity Government Firewall 52

Security Boulevard

MARCH 3, 2023

Only when a user that clicked on the sponsored link arrives at the benign site, will they be redirected to the actual malicious site, evading Google’s detection. Only when a user that clicked on the sponsored link arrives at the benign site, will they be redirected to the actual malicious site, evading Google’s detection.

Phishing 59

Phishing DNS Malware Antivirus 59