admini – Page 89 – CyberSecurity Institute

Sourcefire anti-malware appliance aims to stop APTs in their tracks

Posted on February 25, 2013December 30, 2021 by admini

The firm said the combination of services will offer companies unmatched visibility across their network, letting them dynamically see how malware enters, infects and moves thus letting them intelligently respond to the threat.

“Sourcefire’s threat-centric approach to security gives organisations continuous visibility, analysis and control across their environment and along the full attack continuum – before, during and after an attack.”

Sourcefire is one of many companies to warn businesses that they must implement more robust network monitoring tools if they want to defend themselves from hackers.

BAE Systems recently told V3 that firms’ current lack of knowledge regarding what’s going on in their systems is giving hackers an advantage, by letting them shift tactics whenever they are uncovered.

Link: http://www.v3.co.uk/v3-uk/news/2250158/sourcefire-antimalware-appliance-aims-to-stop-apts-in-their-tracks

Next-Generation Threat Protection From FireEye

Posted on February 25, 2013December 30, 2021 by admini

Multi-Vector Virtual Execution™ (MVX) Engine – The MVX engine is designed to capture and confirm today’s cyber attacks by detonating Web objects, files, suspicious attachments, and mobile applications within instrumented virtual environments. It is the leading signature-less technology that can be used across threat vectors to automate the discovery and forensic analysis of malicious code resulting in multi-vector dynamic threat intelligence on attacks specific to an organization.

By exchanging anonymized threat intelligence through the DTI cloud, participants gain contextual visibility of global attacks and can strengthen their collective security with the latest protections and neutralize attacks before they cause catastrophic damage.

Partner Interoperability via APIs and Standards-based Threat Intelligence Metadata – Partner integrations utilize the FireEye APIs to address the network visibility, endpoint validation, and enforcement options needed by today’s organizations. In addition, FireEye will be publishing a standards-based threat intelligence metadata exchange format that enables FireEye and third-party security solutions to interoperate and automate key cyber security workflows.

“Dynamic threat intelligence is critical to combating advanced threats from adversaries that may already be inside your network,” said Mark Seward, senior director of security and compliance at Splunk Inc.

“FireEye is the security platform organizations can rely upon for protection against today’s new breed of cyber attacks,” said David DeWalt, FireEye chairman and CEO. “We have enabled flexible options so customers can integrate our dynamic threat intelligence into their existing security infrastructure to automate the threat response and rapidly neutralize today’s cyber attacks.”

Link: http://www.webhostmagazine.com/2013/02/next-generation-threat-protection-from-fireeye/

Urgency grows to blend cyber, physical combat

Posted on February 22, 2013December 30, 2021 by admini

“We’re pulling in cyber and physical folks to do joint assessments, looking at what are the cyber vulnerabilities, what are the physical vulnerabilities, how do they relate to each other, and importantly, what are the cascading effects?”

An alignment of policies and actions in cybersecurity is happening across the government, recently evidenced by mandates for cooperation and information-sharing rolled out in President Barack Obama’s executive order and accompanying presidential policy directive. On the military side, a parallel alignment is taking place as well, but it has required a careful consideration of core missions and how to meet their requirements, according to one Defense Department official.

“So one thing we needed to do in defining the missions…we needed to align forces, capability and capacity to each one of the missions.”

Those missions – defending national security against cyber threats, securing the DOD information network and supporting combatant commands – are still being tweaked at CyberCom, now in its third year of full operation.

Link: http://fcw.com/articles/2013/02/22/cyber-conventional-war.aspx

Employees May Be a Company’s Greatest Cybersecurity Vulnerability

Posted on February 21, 2013December 30, 2021 by admini

“[A]ll the security controls in the world are useless if an attacker can manipulate an employee with system access,” according to the findings, which include an analysis of more than 450 data breach investigations in 2012.

Whether thieves are after customer data or a company’s intellectual property portfolio, employee email, mobile devices, network passwords, and social media can all open the door for an attack.

The proliferation of smartphones and mobile apps presents another set of security worries, “as these devices routinely connect to unknown networks every day,” says Trustwave. “Posting one’s place of work on Facebook might not seem dangerous,” the report warns, “but when combined with co-worker connections on LinkedIn, pictures of office parties from FlickR and check-ins on Foursquare, an attacker can create a very detailed picture of the internal workings of a company without ever setting foot inside.”

All in all, the authors identified employee education as integral to any other cyber defenses, arguing that “no policy enacted will have much impact if employees aren’t on board (especially if they don’t truly understand the consequences of their actions).”

“This awareness training must include case studies highlighting both obvious pitfalls (clicking on suspicious links) and not-so-obvious ones (posting company photos online in which staff members are wearing their security badges).”

Link: http://www.law.com/corporatecounsel/PubArticleCC.jsp?id=1202588933863&Employees_May_Be_a_Companys_Greatest_Cybersecurity_Vulnerability&slreturn=20130121081231

Blackberry Enterprise Server Vulnerable To Malware From TIFF Images | Ubergizmo

Posted on February 20, 2013December 30, 2021 by admini

According to the advisory given by Blackberry “Vulnerabilities exist in how the BlackBerry MDS Connection Service and the BlackBerry Messaging Agent process TIFF images for rendering on the BlackBerry smartphone. Successful exploitation of any of these vulnerabilities might allow an attacker to gain access to and execute code on the BlackBerry Enterprise Server. Depending on the privileges available to the configured BlackBerry Enterprise Server service account, the attacker might also be able to extend access to other non-segmented parts of the network.”

The good news for system administrators is that Blackberry has announced solutions within its advisory message and has also published a workaround.

Link: http://www.ubergizmo.com/2013/02/blackberry-exchange-server-vulnerable-to-malware-from-tiff-images/

Aust businesses held to cyber ransom | adelaidenow

Posted on February 20, 2013December 30, 2021 by admini

“And of course that’s the very thing that should be reported to CERT Australia, the Australian government’s response team, or to the federal police, to get help and prevent the attacks occurring in the first place,” Mr Dreyfus told reporters on Monday.

With one in five major Australian businesses suffering a cyber attack in the past year, the survey reported attacks are becoming more co-ordinated and targeted.

It found only 64 per cent applied IT security standards or guidelines, less than 50 per cent had plans in place for removable storage devices such as USB memory sticks, and almost 35 per cent had IT security staff with no formal training.

He said larger companies without specialized IT security staff would need to think, “pretty quickly I’d suggest”, about hiring people trained in the field if they wanted to protect their business.

Link: http://www.adelaidenow.com.au/news/breaking-news/cyber-attacks-more-targeted-aust-survey/story-e6frea7l-1226580043617