Dark Reading is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

Comments
How (And Why) Hackers Target Your Business
Newest First  |  Oldest First  |  Threaded View
Joe Stanganelli
50%
50%
Joe Stanganelli,
User Rank: Ninja
1/28/2016 | 12:34:41 PM
Re: More that the Dollar Bill
I think that was also a Fairly Oddparents episode.  ;)
RetiredUser
50%
50%
RetiredUser,
User Rank: Ninja
1/28/2016 | 11:45:54 AM
Re: More that the Dollar Bill
Joe, I think the orphan scenario presents challenges, but doesn't require tools other than what is out there already.  While a person won't be at the other end of the orphan's data stream to receive/utilize stolen info, or to update instructions/features, there is risk that a potential step-parent could stumble upon them and take over their use.  If dormant, all you can do is use existing tools to comb through systems and look for known signatures in activity and code profiles.  If active and trying to reach out to its absent parent or systems long down where data would have been sent, all the same network and data analysis tools would be used to detect aberrant activity.  

Of course, if this were Ghost in the Shell, things would be a whole lot more interesting and there's be AI-driven bots out there hunting down these orphans and shredding them into digital oblivion... sorry, got carried away there :-)
Joe Stanganelli
50%
50%
Joe Stanganelli,
User Rank: Ninja
1/27/2016 | 3:36:35 PM
Re: More that the Dollar Bill
@Christian: I'm curious to what extent "good-guy" AI tools could be used to help defeat the "self-aware" bots and tools out there that you mention.
RetiredUser
100%
0%
RetiredUser,
User Rank: Ninja
1/25/2016 | 10:45:40 PM
Re: More that the Dollar Bill
And we haven't even mentioned autonomous RATs, bots and spiders!  There's nothing more exciting (or tragic) than trying to anticipate through the chaos of "self-sufficient" and "self-aware" hacking tools when they will next strike.  How many of these things are out there, now orphans, their creators long gone, still infecting and attacking systems...
Joe Stanganelli
100%
0%
Joe Stanganelli,
User Rank: Ninja
1/25/2016 | 7:01:08 PM
Re: More that the Dollar Bill
It's also important to consider the potential links between ability of hackers to do damage and the kind of damage they are looking to do.  The quality of attacks you'll face from Russian cybergangs looking to make some fast bucks will be very different from the quality of attacks you'll face from Chinese nation-state hackers, which in turn are very different from the quality of attacks you'll face from independent hacktivists.  Additionally, different things are at stake in all three examples.
RetiredUser
100%
0%
RetiredUser,
User Rank: Ninja
1/25/2016 | 6:42:56 PM
More that the Dollar Bill
I look forward to the panel.  I think it is also important to remind companies that hackers are not always in their business for the money.  This is an important distinction because tactics change between those seeking profit and those seeking information, or to do harm.  Especially with mega corporations who may have leadership who are clueless as to why someone would have a grudge against their company, making the assumption that cyber attackers are only there for the money could cost dearly.  Also, how one responds to a cyber-attack might depend upon whether they are just thieves, or on a mission driven by a cause.  It's definitely a new era and "hackers" are far more than the band of thieves many imagine they are.


Limited-Time Free Offers to Secure the Enterprise Amid COVID-19
Curtis Franklin Jr., Senior Editor at Dark Reading,  3/31/2020
COVID-19: Latest Security News & Commentary
Dark Reading Staff 4/3/2020
Register for Dark Reading Newsletters
White Papers
Video
Cartoon Contest
Current Issue
6 Emerging Cyber Threats That Enterprises Face in 2020
This Tech Digest gives an in-depth look at six emerging cyber threats that enterprises could face in 2020. Download your copy today!
Flash Poll
State of Cybersecurity Incident Response
State of Cybersecurity Incident Response
Data breaches and regulations have forced organizations to pay closer attention to the security incident response function. However, security leaders may be overestimating their ability to detect and respond to security incidents. Read this report to find out more.
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2020-11586
PUBLISHED: 2020-04-06
An XXE issue was discovered in CIPPlanner CIPAce 9.1 Build 2019092801. An unauthenticated attacker can make an API request that contains malicious XML DTD data.
CVE-2020-11587
PUBLISHED: 2020-04-06
An issue was discovered in CIPPlanner CIPAce 9.1 Build 2019092801. An unauthenticated attacker can make an API request and get the content of ETL Processes running on the server.
CVE-2020-11589
PUBLISHED: 2020-04-06
An Insecure Direct Object Reference issue was discovered in CIPPlanner CIPAce 9.1 Build 2019092801. An unauthenticated attacker can make a GET request to a certain URL and obtain information that should be provided to authenticated users only.
CVE-2020-11590
PUBLISHED: 2020-04-06
An issue was discovered in CIPPlanner CIPAce 9.1 Build 2019092801. An unauthenticated attacker can make an HTTP GET request to HealthPage.aspx and obtain the internal server name.
CVE-2020-11591
PUBLISHED: 2020-04-06
An issue was discovered in CIPPlanner CIPAce 9.1 Build 2019092801. An unauthenticated attacker can make an API request and obtain the full application path along with the customer name.