Items Tagged with "Attacks"
Why Does Software Security Keep Falling off your Budget?
May 22, 2012 Added by:Rafal Los
Approximately 3 out of 4 attacks against your enterprise or organization come at your applications. Whether it's at your website, at the mobile app you've deployed, or your enterprise API - you're being attacked where the lowest defenses are - the application...
Comments (0)
Malware Threats: Save Your Company Now
May 21, 2012 Added by:Bill Gerneglia
As the severity of cyber-crimes continues to grow, it’s important to understand the types of malware involved and how they work. Many forms of malware might be familiar, but they evolve as counter measures force adaptation. Today, the adaptation is driven by professional criminals...
Comments (0)
Guessable Passwords: The Unpatchable Exploit
May 21, 2012 Added by:Chris Murrey
During penetration assessments the tester attempts to compromise systems. Many users take short cuts with passwords, this is because they feel they are not a target, not important, or their access doesn’t matter. Penetration testers know this and so do the attackers...
Comments (0)
Logging: Opening Pandora's Box - Part 4 - Awareness
May 21, 2012 Added by:Rafal Los
Awareness is the ability to know, understand and react to various types of events in near-real-time in order to defend your enterprise. Whether you're defending it from performance failures, functionality failures, or security failures is dependent on the group you work in...
Comments (0)
Attribution: Inductive vs. Deductive Reasoning
May 18, 2012 Added by:Scot Terban
In the present day where cyberwar is all the rage, and governments as well as private sector entities are seeking to cash in on the power grab that is mostly information warfare - as the Chinese call it - too many are forgetting a core problem to the picture: Attribution...
Comments (7)
Is Lord Sugar a Member of Anonymous?
May 18, 2012 Added by:Javvad Malik
I’m simply asking the question that if Lord Sugar read something he didn’t agree with, and instead of privately sharing his thoughts or being in any way constructive, why did he expose the email address of Kevin OSullivan and invited 2 million people to DDoS his inbox?
Comments (0)
Implanted Medical Devices: Killed by Your App
May 18, 2012 Added by:Danny Lieberman
Danny Lieberman talks about the dangers of implanted cardiac devices (ICD) like pacemakers and other devices like insulin pumps, and considers that it’s only a question of time before we have a drive by execution of a politician with an implanted medical device...
Comments (0)
Malware Targeting Android Devices Increases Sharply
May 17, 2012 Added by:Headlines
"The number of malicious Android application package files (APKs) received in Q1 2011 and in Q1 2012 reveals... an increase from 139 to 3063 counts... attributed to malware authors crafting their infected or trojanized applications to defeat anti-virus signature detection..."
Comments (0)
Has Anonymous Infiltrated the US Government?
May 16, 2012 Added by:Pierluigi Paganini
"Right now we have access to every classified database in the U.S. government. It’s a matter of when we leak the contents of those databases, not if. You know how we got access? We didn’t hack them. The access was given to us by the people who run the systems…"
Comments (6)
Skype Malware Campaign Spreading Poison Ivy Trojan
May 16, 2012 Added by:Headlines
Malware researcher Dancho Danchev is reporting a widespread social engineering campaign on Skype that is spreading a variant of the Poison Ivy Trojan. Less than half of the 42 commercial antivirus solutions surveyed are able to detect the Trojan's signature...
Comments (0)
Researchers Developing Self-Defending Networks
May 15, 2012 Added by:Headlines
"This is a game-changing idea in cybersecurity.... we are currently losing against online attackers. In order to fundamentally change the cybersecurity landscape and reduce that high risk we need some big, fundamental changes to the way computers and networks are constructed..."
Comments (0)
No National 'Stand Your Cyberground' Law Please
May 14, 2012 Added by:William Mcborrough
We know that some attacks on our privately owned critical infrastructure have been attributed to foreign government networks. Would it be wise to license companies to attack these networks? The last thing we need is an international incident started by some SysAdmin..
Comments (0)
Panetta Treads Lightly Around Chinese Cyber Attacks
May 10, 2012 Added by:Headlines
"I can hardly agree with the proposition that the cyber attacks directed to the United States are directly coming from China. And during the meeting, Secretary Panetta also agreed on my point that we cannot attribute all the cyber attacks in the United States to China..."
Comments (0)
Space Agencies Confirm Network Intrusions
May 10, 2012 Added by:Headlines
“NASA security officials detected an intrusion into the site on April 20... The agency takes the issue of IT security very seriously and at no point was sensitive or controlled information compromised. NASA has made significant progress to better protect the agency’s IT systems..."
Comments (0)
Malware Spreading Through Hotel Internet Connections
May 10, 2012 Added by:Headlines
The FBI and other agencies warn that malicious actors are targeting travelers with pop-up windows while establishing an Internet connection in their hotel rooms, infecting laptops with malicious software. Anyone who has been a target of this attack should contact the FBI and IC3...
Comments (1)
Logging: Opening Pandora's Box - Part 1 - Anxiety
May 10, 2012 Added by:Rafal Los
You're probably worried that log analysis is going to consume all of your time, or you'll find out that your organization has been pwn3d for years and all your data has been exfiltrated in real-time and your latest database is being copied off to China... aren't you?
Comments (0)
Your Own Private Island
December 24, 2011Coming Soon! Build your own Island right here!
Make your home Infosec Island with your own private vanity URL, design options and private network of followers.
Infosec Island v2
December 24, 2011The latest version of Infosec Island is now available. There are more content options and more ways to connect and interact with your peers.
Thanks to everyone for a great year, and we're looking forward to an excellent 2012!