Cloud
6/14/2017
11:18 AM
Dark Reading
Dark Reading
Products and Releases
50%
50%

Farsight Security and Infoblox Provide Zero-Hour Protection Against Cyberattacks Due to New Domains

SAN MATEO, Calif. and SANTA CLARA, Calif., June 14, 2017 -- Farsight Security, Inc., a leading provider of DNS Intelligence, and Infoblox Inc., the network control company that provides Actionable Network Intelligence, today announced a reseller partnership that will integrate Farsight’s Newly Observed Domains (NOD) solution with the Infoblox ActiveTrust® platform to significantly reduce the risk of cyberattacks associated with new domains.

Today cybercriminals buy, use, and discard thousands of domain names for targeted phishing campaigns, create websites to sell counterfeit goods, and commit other malicious activities. Since Farsight introduced NOD in 2014, the number of first-time domains it detects each day has tripled to over 150,000.  To fight and stay ahead of this escalating problem, users need real-time awareness of the instant these fresh sites go live.

Farsight Security observes millions of domains globally on a daily basis and provides zero-hour protection by cross-referencing these observations with Farsight DNSDB, the world’s largest historical Passive DNS database with over 35 Billion DNS resolutions.

By integrating Farsight NOD with Infoblox Threat Intelligence Data Exchange (TIDE) part of ActiveTrust, users can be blocked from communicating with new domains within minutes of a domain’s first activity, providing protection during the critical hours-to-day long window of maximum vulnerability before a reputation score can be assigned.

“The cheap cost of domains is fueling the cybercrime economy. It only takes 30 seconds for a domain name to be registered and become usable by a cybercriminal. Together, Infoblox and Farsight Security enable organizations to match threat actors’ agility in launching quick strike attacks, to better protect their businesses against potentially devastating attacks,” said Dr. Paul Vixie, Farsight Security CEO and Cofounder.

“Through our Technology Alliance Partner Program (TAP), Infoblox is able to integrate with complementary security solutions like Farsight NOD to help better protect organizations from cyber threats,” said Kanaiya Vasani, Infoblox Vice President of Corporate and Business Development. 

“Infoblox ActiveTrust platform provides organizations rich contextual threat information and actionable insight about cyberattacks against their specific networks. Farsight Security is a natural partner for Infoblox and we look forward to successfully delivering Newly Observed Domains to our customers to increase the speed and accuracy of their attack detection and mitigation.”

 

Farsight NOD and Infoblox TIDE Solution Benefits:

Zero-Hour Protection: Near real time protection against newly observed domains which may be malicious.

Malware Containment: Protect against malware infection and exfiltration of intellectual property by blocking outbound connections to NODs.

Brand Protection: Take immediate action in case of suspected brand phishing, confusion or dilution when NODs are detected. New domains are often used to trick users by creating a lookalike site which takes users to a malicious site.

Rapid Threat Investigation. Leverage Infoblox Dossier® search tool to gain threat context to NODs when researching suspicious domains, enabling users to prioritize action and block NODs immediately.

 

Availability

Farsight NOD is available to ActiveTrust licensees via the Infoblox Threat Intelligence Data Exchange as an additional subscription service.

Current Farsight NOD customers, who are also ActiveTrust users, will be able to access NOD via the Infoblox Threat Intelligence Data Exchange to take advantage of the integration.

 

A Special Live DNS Event June 20, 2017: You Are Invited

On June 20, 2017, Infoblox Chief DNS Architect Cricket Liu and DNS luminary and Farsight Security CEO Paul Vixie will participate in a live, interactive videocast as part of “Cricket Liu Live,” a special event series hosted by Infoblox.  In this videocast, Cricket and Paul will discuss how to build a strong DNS defense with Response Policy Zones and other methods. The videocast will be followed by hands-on events at select locations around the country. Don’t miss this exclusive event -- register here.

 

About the Infoblox Technology Alliance Partner Program

The Infoblox Technology Alliance Partner Program is designed to meet customer demand for solutions that can seamlessly share data and intelligence and integrate with existing workflow and infrastructure.

Through this program Infoblox can help lower the cost of integration, reduce the friction associated with tying together multiple, disparate systems, and increase the value of existing investments in security, next-generation data centers, and network infrastructure.

https://www.infoblox.com/partners/technology-partners/

 

About Infoblox

Infoblox delivers Actionable Network Intelligence to enterprise, government, and service provider customers around the world. As the industry leader in DNS, DHCP, and IP address management, the category known as DDI, Infoblox (www.infoblox.com) provides control and security from the core—empowering thousands of organizations to increase efficiency and visibility, reduce risk, and improve customer experience.

 

About Farsight Security, Inc.

Farsight Security, Inc. provides the world’s largest real-time threat intelligence on changes to the Internet. Leveraging proprietary technology with over 200,000 DNS resolutions/second, Farsight provides the Internet’s view of an organization and how it is changing purposely, inadvertently or maliciously. For more information on Farsight Security, Inc., please visit https://farsightsecurity.com.

Comment  | 
Print  | 
More Insights
Comments
Newest First  |  Oldest First  |  Threaded View
Register for Dark Reading Newsletters
Dark Reading Live EVENTS
INsecurity - For the Defenders of Enterprise Security
A Dark Reading Conference
While red team conferences focus primarily on new vulnerabilities and security researchers, INsecurity puts security execution, protection, and operations center stage. The primary speakers will be CISOs and leaders in security defense; the blue team will be the focus.
White Papers
Video
Cartoon Contest
Write a Caption, Win a Starbucks Card! Click Here
Latest Comment: No, no, no! Have a Unix CRON do the pop-up reminders!
Current Issue
Security Vulnerabilities: The Next Wave
Just when you thought it was safe, researchers have unveiled a new round of IT security flaws. Is your enterprise ready?
Flash Poll
The Impact of a Security Breach 2017
The Impact of a Security Breach 2017
Despite the escalation of cybersecurity staffing and technology, enterprises continue to suffer data breaches and compromises at an alarming rate. How do these breaches occur? How are enterprises responding, and what is the impact of these compromises on the business? This report offers new data on the frequency of data breaches, the losses they cause, and the steps that organizations are taking to prevent them in the future.
Slideshows
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2017-0290
Published: 2017-05-09
NScript in mpengine in Microsoft Malware Protection Engine with Engine Version before 1.1.13704.0, as used in Windows Defender and other products, allows remote attackers to execute arbitrary code or cause a denial of service (type confusion and application crash) via crafted JavaScript code within ...

CVE-2016-10369
Published: 2017-05-08
unixsocket.c in lxterminal through 0.3.0 insecurely uses /tmp for a socket file, allowing a local user to cause a denial of service (preventing terminal launch), or possibly have other impact (bypassing terminal access control).

CVE-2016-8202
Published: 2017-05-08
A privilege escalation vulnerability in Brocade Fibre Channel SAN products running Brocade Fabric OS (FOS) releases earlier than v7.4.1d and v8.0.1b could allow an authenticated attacker to elevate the privileges of user accounts accessing the system via command line interface. With affected version...

CVE-2016-8209
Published: 2017-05-08
Improper checks for unusual or exceptional conditions in Brocade NetIron 05.8.00 and later releases up to and including 06.1.00, when the Management Module is continuously scanned on port 22, may allow attackers to cause a denial of service (crash and reload) of the management module.

CVE-2017-0890
Published: 2017-05-08
Nextcloud Server before 11.0.3 is vulnerable to an inadequate escaping leading to a XSS vulnerability in the search module. To be exploitable a user has to write or paste malicious content into the search dialogue.