CyberSecurity Institute

[From the desk of Paul Davis – his opinions and no-one else’s] I will just say two word… RSA conference… so it should be a busy week. So onto the news: INSIGHT: When it comes to threat detection and incident response, context matters This new generation of security analytics tools…

[From the desk of Paul Davis – his opinions and no-one else’s] So onto the news: 4 no-bull facts about Microsoft’s HTTP.sys vulnerability The latest Web server vulnerability affects desktop systems as well as Microsoft products 1. The problem affects systems that aren’t servers or even running IIS 2. It’s…

[From the desk of Paul Davis – his opinions and no-one else’s] So obviously lots and lots of reports about Verizon’s new DBIR which you have probably seen, so Im not going to report any of it. So onto the news: With latest patches, Oracle signals no more free updates…

[From the desk of Paul Davis – his opinions and no-one else’s] So onto the news: The key challenges to timely incident response Security professionals are inundated with security incidents, averaging 78 investigations per organization in the last year, with 28 percent of those incidents involving targeted attacks – one…

[From the desk of Paul Davis – his opinions and no-one else’s] So onto the news: DNS Zone Transfer AXFR Requests May Leak Domain Information A remote unauthenticated user may request a DNS zone transfer from a public-facing DNS server. If improperly configured, the DNS server may respond with information…

[From the desk of Paul Davis – his opinions and no-one else’s] I know that the Beebone botnet was taken down, but users and administrators still need to clean up. So onto the news: Top 5 Cybersecurity Failures in Financial Services … according to a report by the Center for…