Dark Reading is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

Comments
How (And Why) Hackers Target Your Business
Newest First  |  Oldest First  |  Threaded View
Joe Stanganelli
50%
50%
Joe Stanganelli,
User Rank: Ninja
1/28/2016 | 12:34:41 PM
Re: More that the Dollar Bill
I think that was also a Fairly Oddparents episode.  ;)
RetiredUser
50%
50%
RetiredUser,
User Rank: Ninja
1/28/2016 | 11:45:54 AM
Re: More that the Dollar Bill
Joe, I think the orphan scenario presents challenges, but doesn't require tools other than what is out there already.  While a person won't be at the other end of the orphan's data stream to receive/utilize stolen info, or to update instructions/features, there is risk that a potential step-parent could stumble upon them and take over their use.  If dormant, all you can do is use existing tools to comb through systems and look for known signatures in activity and code profiles.  If active and trying to reach out to its absent parent or systems long down where data would have been sent, all the same network and data analysis tools would be used to detect aberrant activity.  

Of course, if this were Ghost in the Shell, things would be a whole lot more interesting and there's be AI-driven bots out there hunting down these orphans and shredding them into digital oblivion... sorry, got carried away there :-)
Joe Stanganelli
50%
50%
Joe Stanganelli,
User Rank: Ninja
1/27/2016 | 3:36:35 PM
Re: More that the Dollar Bill
@Christian: I'm curious to what extent "good-guy" AI tools could be used to help defeat the "self-aware" bots and tools out there that you mention.
RetiredUser
100%
0%
RetiredUser,
User Rank: Ninja
1/25/2016 | 10:45:40 PM
Re: More that the Dollar Bill
And we haven't even mentioned autonomous RATs, bots and spiders!  There's nothing more exciting (or tragic) than trying to anticipate through the chaos of "self-sufficient" and "self-aware" hacking tools when they will next strike.  How many of these things are out there, now orphans, their creators long gone, still infecting and attacking systems...
Joe Stanganelli
100%
0%
Joe Stanganelli,
User Rank: Ninja
1/25/2016 | 7:01:08 PM
Re: More that the Dollar Bill
It's also important to consider the potential links between ability of hackers to do damage and the kind of damage they are looking to do.  The quality of attacks you'll face from Russian cybergangs looking to make some fast bucks will be very different from the quality of attacks you'll face from Chinese nation-state hackers, which in turn are very different from the quality of attacks you'll face from independent hacktivists.  Additionally, different things are at stake in all three examples.
RetiredUser
100%
0%
RetiredUser,
User Rank: Ninja
1/25/2016 | 6:42:56 PM
More that the Dollar Bill
I look forward to the panel.  I think it is also important to remind companies that hackers are not always in their business for the money.  This is an important distinction because tactics change between those seeking profit and those seeking information, or to do harm.  Especially with mega corporations who may have leadership who are clueless as to why someone would have a grudge against their company, making the assumption that cyber attackers are only there for the money could cost dearly.  Also, how one responds to a cyber-attack might depend upon whether they are just thieves, or on a mission driven by a cause.  It's definitely a new era and "hackers" are far more than the band of thieves many imagine they are.


How Attackers Could Use Azure Apps to Sneak into Microsoft 365
Kelly Sheridan, Staff Editor, Dark Reading,  3/24/2020
Malicious USB Drive Hides Behind Gift Card Lure
Dark Reading Staff 3/27/2020
Register for Dark Reading Newsletters
White Papers
Video
Cartoon Contest
Write a Caption, Win a Starbucks Card! Click Here
Latest Comment: This comment is waiting for review by our moderators.
Current Issue
6 Emerging Cyber Threats That Enterprises Face in 2020
This Tech Digest gives an in-depth look at six emerging cyber threats that enterprises could face in 2020. Download your copy today!
Flash Poll
State of Cybersecurity Incident Response
State of Cybersecurity Incident Response
Data breaches and regulations have forced organizations to pay closer attention to the security incident response function. However, security leaders may be overestimating their ability to detect and respond to security incidents. Read this report to find out more.
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2020-10940
PUBLISHED: 2020-03-27
Local Privilege Escalation can occur in PHOENIX CONTACT PORTICO SERVER through 3.0.7 when installed to run as a service.
CVE-2020-10939
PUBLISHED: 2020-03-27
Insecure, default path permissions in PHOENIX CONTACT PC WORX SRT through 1.14 allow for local privilege escalation.
CVE-2020-6095
PUBLISHED: 2020-03-27
An exploitable denial of service vulnerability exists in the GstRTSPAuth functionality of GStreamer/gst-rtsp-server 1.14.5. A specially crafted RTSP setup request can cause a null pointer deference resulting in denial-of-service. An attacker can send a malicious packet to trigger this vulnerability.
CVE-2020-10817
PUBLISHED: 2020-03-27
The custom-searchable-data-entry-system (aka Custom Searchable Data Entry System) plugin through 1.7.1 for WordPress allows SQL Injection. NOTE: this product is discontinued.
CVE-2020-10952
PUBLISHED: 2020-03-27
GitLab EE/CE 8.11 through 12.9.1 allows blocked users to pull/push docker images.