Dark Reading is part of the Informa Tech Division of Informa PLC
This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.
News
Commentary
Commentary
Quick HitsQuick Hits
CommentaryNewsQuick HitsQuick Hits
Commentary
Commentary
NewsQuick HitsQuick HitsNews
Commentary
CommentaryNews
Commentary
Really enjoyed this. An ounce of prevention is worth a pound of cure as the saying goes. As the landscape continues to change, prevention is evermore critical.
In reply to: Enjoyed the content
I agree private organizations need to develop proper evidence collection strategies that lead to law enforcement outcomes. Increasingly the role of security vendors will be to assist with that. The effectiveness of onion...
In reply to: Re: Attribution
I agree with the combination of realms, however we are losing attribution capability purely through the digital realm. Law enforcement can maintain a perfect chain of custody on physical evidence, but as soon as the user...
In reply to: Re: Attribution
Evidence validation is challenging in law enforcement in both physical and digital realms. Data integrity approaches (such as hashing and block chains) can assist in detecting/preventing tampering. Corroboration of evidence...
In reply to: Re: Attribution
Current attribution capabilities need to catch up to the level of defensive tools we have. We have way more options to hide ourselves than we do to reveal someone. It isn't the same as lifting a fingerprint or matching DNA...
In reply to: Attribution
If you look real closely at the center, you will see that the core software is still running. We just had to apply a few patches over time to make it a bit more secure.
In reply to: still there
It is good that they provided a fix to the CVE, not sure why port 4443, 8443 is wideopen to the internet as opposed to allowing only specific IP addresses and employing certs with specific public and private keys to access...
In reply to: Good for Fortinet to quickly address the issue(s).
I am currently working with various vendors who work directly with Microsoft (MSC), the acronym MSC uses is "PIM" - Priviliged Identity Management. This uses a Role Based Access Controls (RBAC) which are a collection of...
In reply to: Great article and great points, thank you for sharing your insight.
"Twisted Spider, Viking Spider, Wizard Spider and the Lockbit Gang" cartel or no cartel This is a false debate in my opinion.The real question is:when will there be a real international coalition to fight cybercrime?
In reply to: coalition
I believe the attacks could very well have been initiated by both Russia and China at the same time. And I also believe the primary target for Solar Winds was The US Treasury. I think the rest was collateral damage possibly...
In reply to: The Enemy of My Enemy is My Friend
Just wanted to let you know, the first image is too blurry to read.
In reply to: Blurry Image
So they say you're the guy to go to about installling patches.
In reply to: Go-to personFind out more about the combination of two of the industry's leading cybersecurity news sites.
2021 Top Enterprise IT TrendsWe've identified the key trends that are poised to impact the IT landscape in 2021. Find out why they're important and how they will affect you today!
Tweet This
0 Comments
