Dark Reading is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

Comments
Advanced Attacks Are The New Norm, Study Says
Newest First  |  Oldest First  |  Threaded View
Thomas Claburn
50%
50%
Thomas Claburn,
User Rank: Ninja
4/9/2014 | 6:44:34 PM
Re: exploits
But how will the industry market security products without hyperbolic terms like "advanced persistent threat"?
macker490
50%
50%
macker490,
User Rank: Ninja
4/9/2014 | 8:40:32 AM
exploits
we would do well to displose of the terms "advanced" and "sophisticated".    many attacks are simple exploits,   generally of an error in programming.

our focus should be on Quality Control with the object being a standard of Zero Defects in the software development and deployment process.

all the attacker has to do is put the target software into a debugger in then poke it until he finds an error he can make an advantage of.   it is not sophisticated to those whose work this trade. it is something the original authors should have done.  It's called debugging.

not just regression testing.   all branch (structured) testing is required for critical communication components and a good idea for software, generally.
securityaffairs
50%
50%
securityaffairs,
User Rank: Ninja
4/5/2014 | 8:41:57 AM
Re: Advanced Attacks Are The New Norm, Study Says
Hi Tim,

it's normal evolution of time, attacks are becoming events even more sophisticated, APTs are adopting evasion technique very efficient and economies behind each attack advantage the offenders.
A very alarming scenarios.
RyanSepe
50%
50%
RyanSepe,
User Rank: Ninja
4/4/2014 | 4:26:19 PM
Zero Day Protection
I recently attended a lunch and learn for a vendor pushing out a Endpoint Intrusion Detection System. They intend to have prevention built in by May I believe, but I thought the software was clever and should be prevalent in this conversation. As we know many IDS/IPS systems are signature based which is great once someone detects the signature but for zero days, the signature approach has little effect. This solution focused on individual execution entries and monitored them in real time. Every change made was monitored and analyzed for type, activity, involvement, etc. The GUI was very intuitive and the data provided was extensive. The main point of my story here is that its good to see that defense is making preparations that are not the norm to try and combat attacks of the same nature. If anyone wants to know more because I don't believe one post can cover a software that expansive, please ask and I will elaborate. Anyone see anything similar or another method of trying to successfully block/detect these attacks?
Randy Naramore
50%
50%
Randy Naramore,
User Rank: Ninja
4/4/2014 | 12:34:42 PM
Advanced Attacks Are The New Norm, Study Says
Gone are the days when malware simply consisted of annoying popups now you have to worry about phishing sites, keyloggers recording your every stroke. Users have to be ever vigilent concerning their every day internet habits, the seemingly simple banking transaction may be recorded and sent to an attacker who in turn ruins your financial stability and your life. Very sad but this makes the security professional's talents worth more.


7 Truths About BEC Scams
Ericka Chickowski, Contributing Writer,  6/13/2019
DNS Firewalls Could Prevent Billions in Losses to Cybercrime
Curtis Franklin Jr., Senior Editor at Dark Reading,  6/13/2019
Can Your Patching Strategy Keep Up with the Demands of Open Source?
Tim Mackey, Principal Security Strategist, CyRC, at Synopsys,  6/18/2019
Register for Dark Reading Newsletters
White Papers
Video
Cartoon
Current Issue
Building and Managing an IT Security Operations Program
As cyber threats grow, many organizations are building security operations centers (SOCs) to improve their defenses. In this Tech Digest you will learn tips on how to get the most out of a SOC in your organization - and what to do if you can't afford to build one.
Flash Poll
The State of IT Operations and Cybersecurity Operations
The State of IT Operations and Cybersecurity Operations
Your enterprise's cyber risk may depend upon the relationship between the IT team and the security team. Heres some insight on what's working and what isn't in the data center.
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2019-12875
PUBLISHED: 2019-06-18
Alpine Linux abuild through 3.4.0 allows an unprivileged member of the abuild group to add an untrusted package via a --keys-dir option that causes acceptance of an untrusted signing key.
CVE-2017-8335
PUBLISHED: 2019-06-18
An issue was discovered on Securifi Almond, Almond+, and Almond 2015 devices with firmware AL-R096. The device provides a user with the capability of setting name for wireless network. These values are stored by the device in NVRAM (Non-volatile RAM). It seems that the POST parameters passed in this...
CVE-2017-8336
PUBLISHED: 2019-06-18
An issue was discovered on Securifi Almond, Almond+, and Almond 2015 devices with firmware AL-R096. The device provides a user with the capability of adding new routes to the device. It seems that the POST parameters passed in this request to set up routes on the device can be set in such a way that...
CVE-2019-12874
PUBLISHED: 2019-06-18
An issue was discovered in zlib_decompress_extra in modules/demux/mkv/util.cpp in VideoLAN VLC media player 3.x through 3.0.7. The Matroska demuxer, while parsing a malformed MKV file type, has a double free.
CVE-2012-6711
PUBLISHED: 2019-06-18
A heap-based buffer overflow exists in GNU Bash before 4.3 when wide characters, not supported by the current locale set in the LC_CTYPE environment variable, are printed through the echo built-in function. A local attacker, who can provide data to print through the "echo -e" built-in func...