Kaspersky Lab announces its support of the Archeological Society at Athens (ASA) in its restoration of the murals at the excavation of the Akrotiri settlement on Santorini Island, known as the Greek “Pompeii”.
from http://ift.tt/1MG5ZTB
Monday, August 3, 2015
Getting to Know Tom Powledge, Vice President of Cisco Managed Security Services
After several months leading the managed security services portfolio at Cisco, I sat down with the social media team to discuss my path to Cisco, the evolution of the security market, and the future of security. [Note: This is an abridged version of the full interview .] Q: After nearly 20 years at Symantec, why did you decide to move to Cisco? TP: Cisco has all of the pieces necessary to solve the biggest security problems facing businesses today and into the [...]
from Cisco Blog » Security http://ift.tt/1SA2KC0
from Cisco Blog » Security http://ift.tt/1SA2KC0
Untethered TaiG Jailbreak Tool for iOS 8.4 [Mac OS X version] Released
Good news for iOS 8.4 users! The Chinese jailbreaking team TaiG has finally released its long-awaited Untethered Jailbreak tool for Apple's iOS 8.4 mobile operating system for the Mac OS X platform. Yes, TaiG Jailbreak is now officially available for OS X users that will allow you to jailbreak iOS 8.4 on your Mac computer without having to resort to using a virtual machine. <!-- adsense
from The Hacker News http://ift.tt/1DmmK3T
from The Hacker News http://ift.tt/1DmmK3T
Sunday, August 2, 2015
Interpol is training police to fight crime on the Darknet
Police officers from around a dozen countries have just completed a five-day course on Tor hidden services, illegal marketplaces and cryptocurrencies to help them investigate crimes on the Darknet.
from Latest topics for ZDNet in Security http://ift.tt/1N2Kj27
from Latest topics for ZDNet in Security http://ift.tt/1N2Kj27
Saturday, August 1, 2015
TA15-213A: Recent Email Phishing Campaigns – Mitigation and Response Recommendations
Original release date: August 01, 2015
from US-CERT: The United States Computer Emergency Readiness Team http://ift.tt/1JYpUrI
Systems Affected
Microsoft Windows Systems, Adobe Flash Player, and Linux
Overview
Between June and July 2015, the United States Computer Emergency Readiness Team (US-CERT) received reports of multiple, ongoing and likely evolving, email-based phishing campaigns targeting U.S. Government agencies and private sector organizations. This alert provides general and phishing-specific mitigation strategies and countermeasures.
Description
US-CERT is aware of three phishing campaigns targeting U.S. Government agencies and private organizations across multiple sectors. All three campaigns leveraged website links contained in emails; two sites exploited a recent Adobe Flash vulnerability (CVE-2015-5119) while the third involved the download of a compressed (i.e., ZIP) file containing a malicious executable file. Most of the websites involved are legitimate corporate or organizational sites that were compromised and are hosting malicious content.
Impact
Systems infected through targeted phishing campaigns act as an entry point for attackers to spread throughout an organization’s entire enterprise, steal sensitive business or personal information, or disrupt business operations.
Solution
Phishing Mitigation and Response Recommendations
- Implement perimeter blocks for known threat indicators:
- Email server or email security gateway filters for email indicators
- Web proxy and firewall filters for websites or Internet Protocol (IP) addresses linked in the emails or used by related malware
- DNS server blocks (blackhole) or redirects (sinkhole) for known related domains and hostnames
- Remove malicious emails from targeted user mailboxes based on email indicators (e.g., using Microsoft ExMerge).
- Identify recipients and possible infected systems:
- Search email server logs for applicable sender, subject, attachments, etc. (to identify users that may have deleted the email and were not identified in purge of mailboxes)
- Search applicable web proxy, DNS, firewall or IDS logs for activity the malicious link clicked.
- Search applicable web proxy, DNS, firewall or IDS logs for activity to any associated command and control (C2) domains or IP addresses associated with the malware.
- Review anti-virus (AV) logs for alerts associated with the malware. AV products should be configured to be in quarantine mode. It is important to note that the absence of AV alerts or a clean AV scan should not be taken as conclusive evidence a system is not infected.
- Scan systems for host-level indicators of the related malware (e.g., YARA signatures)
- For systems that may be infected:
- Capture live memory of potentially infected systems for analysis
- Take forensic images of potentially infected systems for analysis
- Isolate systems to a virtual local area network (VLAN) segmented form the production agency network (e.g., an Internet-only segment)
- Report incidents, with as much detail as possible, to the NCCIC.
Educate Your Users
Organizations should remind users that they play a critical role in protecting their organizations form cyber threats. Users should:
- Exercise caution when opening email attachments, even if the attachment is expected and the sender appears to be known. Be particularly wary of compressed or ZIP file attachments.
- Avoid clicking directly on website links in emails; attempts to verify web addresses independently (e.g., contact your organization’s helpdesk or sear the Internet for the main website of the organization or topic mentioned in the email).
- Report any suspicious emails to the information technology (IT) helpdesk or security office immediately.
Basic Cyber Hygiene
Practicing basic cyber hygiene would address or mitigate the vast majority of security breaches handled by today’s security practitioners:
- Privilege control (i.e., minimize administrative or superuser privileges)
- Application whitelisting / software execution control (by file or location)
- System application patching (e.g., operating system vulnerabilities, third-party vendor applications)
- Security software updating (e.g., AV definitions, IDS/IPS signatures and filters)
- Network segmentation (e.g., separate administrative networks from business-critical networks with physical controls and virtual local area networks)
- Multi-factor authentication (e.g., one-time password tokens, personal identity verification (PIV cards)
Further Information
For more information on cybersecurity best practices, users and administrators are encouraged to review US-CERT Security Tip: Handling Destructive Malware to evaluate their capabilities encompassing planning, preparation, detection, and response. Another resource is ICS-CERT Recommended Practice: Improving Industrial Control Systems Cybersecurity with Defense-In-Depth Strategies.
References
- Executive Order 13636: Cybersecurity Framework
- US-CERT Security Tip: Handling Destructive Malware
- ICS-CERT Recommended Practice: Improving Industrial Control Systems Cybersecurity with Defense-In-Depth Strategies
Revision History
- August 1, 2015: Initial Release
This product is provided subject to this Notification and this Privacy & Use policy.
from US-CERT: The United States Computer Emergency Readiness Team http://ift.tt/1JYpUrI
Security Inside Out Newsletter, July Edition is Out (Security Inside Out)
Blogs.Oracle.Com - Security Inside Out
via Oracle Secure Enterprise Search Results for: security http://ift.tt/1gnaq9D
via Oracle Secure Enterprise Search Results for: security http://ift.tt/1gnaq9D
White House will not force FBI to get a warrant for email data
If you were waiting for Congress to act, now is the time to go grab yourself some popcorn.
from Latest topics for ZDNet in Security http://ift.tt/1JDPkiE
from Latest topics for ZDNet in Security http://ift.tt/1JDPkiE
Subscribe to:
Posts (Atom)