News & Commentary
Latest Content tagged with Advanced Threats
|
Modern Cybersecurity Demands a Different Corporate Mindset
Very few organizations have fully incorporated all relevant risks and threats into their current digital strategy, research finds.
Four Faces of Fraud: Identity, 'Fake' Identity, Ransomware & Digital
Realizing the wide scope of fraud should be at the top of every business executive's to-do list. Here's some practical advice to help you stay safe.
LeBron vs. Steph: The NBA Version of Cyber Defense vs. Cyberattacks
It takes an aggressive, swarming approach to overcome the most dangerous threats today.
'Shift Left' & the Connected Car
How improving application security in the automotive industry can shorten product development time, reduce costs, and save lives.
Weaponizing IPv6 to Bypass IPv4 Security
Just because you're not yet using IPv6 doesn't mean you're safe from the protocol's attack vectors.
Side-Channel Attacks & the Importance of Hardware-Based Security
Reliably evaluating the security of modern infrastructure requires a solid understanding of the hardware supporting it.
I, for One, Welcome Our Robotic Security Overlords
Automation will come in more subtle ways than C-3PO — and it's transforming cybersecurity.
Cybercrime Is Skyrocketing as the World Goes Digital
If cybercrime were a country, it would have the 13th highest GDP in the world.
New Threats, Old Threats: Everywhere a Threat
First-quarter data shows cryptojacking on the rise -- but don't count out some "classic" threats just yet.
GDPR, WHOIS & the Impact on Merchant Risk Security Monitoring
The EU's General Data Protection Regulation will make it harder for law enforcement, forensic investigators, and others to track down everything from credit card fraud to child porn rings.
The Risks of Remote Desktop Access Are Far from Remote
RDP is used by fraudsters to steal and monetize data more often than you might think. But there are ways to stay safe.
Why Isn't Integrity Getting the Attention It Deserves?
A focus on integrity requires a shift in the way many approach security management, but it's one of the most promising approaches to effective enterprise security.
Why Enterprises Can't Ignore Third-Party IoT-Related Risks
There's a major disconnect between Internet of Things governance and risk management, according to a new report. Follow these five steps to address the risks.
8 Ways Hackers Can Game Air Gap Protections
Isolating critical systems from connectivity isn't a guarantee they can't be hacked.
APT Attacks on Mobile Rapidly Emerging
Mobile devices are becoming a 'primary' enterprise target for attackers.
Breakout Time: A Critical Key Cyber Metric
Why organizations need to detect an intrusion in under a minute, understand it in under 10 minutes, and eject the adversary in under an hour.
GDPR Requirements Prompt New Approach to Protecting Data in Motion
The EU's General Data Protection Regulation means that organizations must look at new ways to keep data secure as it moves.
It's Time to Take GitHub Threats Seriously
There's a good chance your company has projects on the source code management system, but the casual way many developers use GitHub creates security issues.
Biometrics Are Coming & So Are Security Concerns
Could these advanced technologies be putting user data at risk?
How to Protect Industrial Control Systems from State-Sponsored Hackers
US-CERT recently issued an alert about Russian threat activity against infrastructure sectors. Is there a way to fight back?
The Role of KPIs in Incident Response
Using KPIs can have a positive impact on the tactical and strategic functions of a security operations program.
Cyber War Game Shows How Federal Agencies Disagree on Incident Response
Former officials at DHS, DOJ, and DOD diverge on issues of attribution and defining what constitutes an act of cyber war.
Federal Agency Data Under Siege
Seventy-one percent of IT security professionals in US federal agencies have reported breaches in their organizations.
Stopping Cyber Madness: Why the Private Sector Must Lead the Fight
The government's ability to help secure the Internet will be limited given the light speed of the Internet versus the slower pace of government. That's why stopping the madness begins with the private sector.
Protect Yourself from Online Fraud This Tax Season
Use these tips to stay safe online during everyone's least-favorite time of the year.
How to Build a Cybersecurity Incident Response Plan
Being hit by a cyberattack is going to be painful. But it can be less painful if you're prepared, and these best practices can help.
Hudson's Bay Brands Hacked, 5 Million Credit Card Accounts Stolen
The infamous Carbanak/FIN7 cybercrime syndicate breached Saks and Lord & Taylor and is now selling some of the stolen credit card accounts on the Dark Web.
The Cybersecurity Mandates Keep On Coming
There's a good reason for the proliferation of mandates like the one in New York state, but companies may struggle to answer this question: "Are we in compliance?"
MITRE Evaluates Tools for APT Detection
A new service from MITRE will evaluate products based on how well they detect advanced persistent threats.
Deconstructing the DOJ Iranian Hacking Indictment
The alleged attackers used fairly simple tools, techniques and procedures to compromise a new victim organization on an almost weekly basis for over five years.
780 Days in the Life of a Computer Worm
This is a story of a worm, from the time it was coded and deployed onto the Internet. It is narrated by the worm in the first person.
Privacy: Do We Need a National Data Breach Disclosure Law?
Some say we need a more consistent approach, while others worry a national law might supersede and water down some state laws already on the books.
The Overlooked Problem of 'N-Day' Vulnerabilities
N-days -- or known vulnerabilities -- are a goldmine for attackers of industrial control systems. It's time for a new defense strategy.
Looking Back to Look Ahead: Cyber Threat Trends to Watch
Data from the fourth quarter of last year shows the state of application exploits, malicious software, and botnets.
5 Ways to Get Ready for Public Cloud Deployment
Syncing security and product development early is now a "must do."
GandCrab Ransomware Goes 'Agile'
GandCrab ransomware's developers have iterated the code rapidly, researchers found.
How Serverless Computing Reshapes Security
The new division of responsibility moves some security concerns off a business's plate while changing priorities for other risks.
Segmentation: The Neglected (Yet Essential) Control
Failure to deploy measures to contain unauthorized intruders is a recipe for digital disaster.
What's the C-Suite Doing About Mobile Security?
While most companies have security infrastructure for on-premises servers, networks, and endpoints, too many are ignoring mobile security. They'd better get moving.
7 University-Connected Cyber Ranges to Know Now
Universities are beginning to add cyber ranges to the facilities for teaching cyber security to students and professionals.
Connected Cars Pose New Security Challenges
The auto industry should seize the opportunity and get in front of this issue.
CERT.org Goes Away, Panic Ensues
Turns out the Carnegie Mellon CERT just moved to a newly revamped CMU Software Engineering Institute website.
How & Why the Cybersecurity Landscape Is Changing
A comprehensive new report from Cisco should "scare the pants off" enterprise security leaders.
Why Cryptocurrencies Are Dangerous for Enterprises
When employees mine coins with work computers, much can go wrong. But there are some ways to stay safe.
6 Cybersecurity Trends to Watch
Expect more as the year goes on: more breaches, more IoT attacks, more fines…
SWIFT Network Used in $2 Million Heist at Indian Bank
The theft at India's City Union Bank comes on the heels of news that attackers stole $6 million from a Russian bank via SWIFT network last year.
Meltdown/Spectre: The First Large-Scale Example of a 'Genetic' Threat
These vulnerabilities mark an evolutionary leap forward, and companies must make fighting back a priority.
13 Russians Indicted for Massive Operation to Sway US Election
Russian nationals reportedly used stolen American identities and infrastructure to influence the 2016 election outcome.
Air Force Awards $12,500 for One Bug
The highest single bounty of any federal bug bounty program yet is awarded through Hack the Air Force 2.0.
Fileless Malware: Not Just a Threat, but a Super-Threat
Exploits are getting more sophisticated by the day, and cybersecurity technology just isn't keeping up.
|
White Papers
Video
0 Comments
Current Issue
Flash Poll
The State of IT and Cybersecurity
IT and security are often viewed as different disciplines - and different departments. Find out what our survey data revealed, read the report today!
Twitter Feed
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database CVE-2018-1060
PUBLISHED: 2018-06-18
PUBLISHED: 2018-06-18
PUBLISHED: 2018-06-18
PUBLISHED: 2018-06-18
PUBLISHED: 2018-06-18
From DHS/US-CERT's National Vulnerability Database CVE-2018-1060
PUBLISHED: 2018-06-18
python before versions 2.7.15, 3.4.9, 3.5.6 and 3.7.0 is vulnerable to catastrophic backtracking in pop3lib's apop() method. An attacker could use this flaw to cause denial of service.
CVE-2018-1090PUBLISHED: 2018-06-18
In Pulp before version 2.16.2, secrets are passed into override_config when triggering a task and then become readable to all users with read access on the distributor/importer. An attacker with API access can then view these secrets.
CVE-2018-1152PUBLISHED: 2018-06-18
libjpeg-turbo 1.5.90 is vulnerable to a denial of service vulnerability caused by a divide by zero when processing a crafted BMP image.
CVE-2018-1153PUBLISHED: 2018-06-18
Burp Suite Community Edition 1.7.32 and 1.7.33 fail to validate the server certificate in a couple of HTTPS requests which allows a man in the middle to modify or view traffic.
CVE-2018-12530PUBLISHED: 2018-06-18
An issue was discovered in MetInfo 6.0.0. admin/app/batch/csvup.php allows remote attackers to delete arbitrary files via a flienamecsv=../ directory traversal. This can be exploited via CSRF.
- Terms of Service
- Privacy Statement
- Legal Entities
- Copyright © 2018 UBM, All rights reserved
Tweet This