ITCurated, Author at Cyber Security Minute

Cybersecurity is a chess marathon with hackers: Carl Herberger

Issued by: CSO

Apps are an integral part of any business today. Radware, a security and availability solutions provider, is protecting the organizations globally from cybercrime, including DDoS attacks. “We have a phenomenal track record of innovating in security and bringing great partnerships on the table for our end customers. Also we lead the availability solutions area which…

Malware & Threats

Black market medical record prices drop to under $10, criminals switch to ransomware

Issued by: CSO

The black market value of stolen medical records dropped dramatically this year, and criminals shifted their efforts from stealing data to spreading ransom ware, according to a report released this morning. Hackers are now offering stolen records at between $1.50 and $10 each, said Anthony James, CMO at San Mateo, Calif.-based security firm TrapX, the…

Network Security

Secure By Design: Antidote for Dynamic Cyberthreats

Issued by: Security Intelligence

There was an interesting twist to the recent distributed denial-of-service (DDoS) attack against domain name provider Dyn that plunged huge areas of North America and Europe into internet darkness. The perpetrators didn’t directly attack the servers of their ultimate target. Instead, they compromised 100,000 small, interconnected devices with weak default passwords, building an enormous botnet…

Malware & Threats

Explained: Domain-Generating Algorithms

Issued by: Dark Reading

Cybercriminals use domain-generating algorithms to prevent their servers from being blacklisted or taken down. A domain-generating algorithm (DGA) is a program or subroutine that provides malware with new domains on demand or on the fly. Kraken was the first malware family to use a DGA (in 2008) that we could find. Later that year, Conficker made…

Malware & Threats

Rakos Malware Takes Over Embedded Linux Devices

Issued by: Security Week

A recently observed piece of malware targeting embedded Linux systems can provide attackers with full control over the infected devices, ESET security researchers warn. Dubbed Rakos, the newly discovered malware is attacking vulnerable devices via brute force SSH login attempts, a method already observed in various other Linux threats. The new malicious program is looking to infect…

Network Security

BrandPost: A booming business: The rise of cybergangs

Issued by: CSO

Cybergangs are modeling themselves on successful businesses, with often staggering results. Based on the world’s growing interconnectivity, experts estimate that the cost of cybercrime will exceed $6 trillion annually by 2021, due in part to the growth in cybergang activity. In a 2016 report, Europol attributed the continued growth of “crime-as-a-service” activities to the strengthened…

Malware & Threats, Network Security

The year ransomware became one of the top threats to enterprises

Issued by: CSO

On Feb. 5, employees at Hollywood Presbyterian Medical Center in Los Angeles, California, started having network access problems that prevented electronic communications. Over the next few days, they learned that the hospital was the victim of a ransomware attack that encrypted files on multiple computers. After several days during which staff had to resort to pen…

Network Security

Google researchers help developers test cryptographic implementations

Issued by: CSO

Security experts from Google have developed a test suite that allows developers to find weaknesses in their cryptographic libraries and implementations. The company’s Project Wycheproof, which was released on GitHub, contains more than 80 test cases for widely used cryptographic algorithms, including RSA, AES-GCM, AES-EAX, Diffie-Hellman, Elliptic Curve Diffie-Hellman (ECDH), and the digital signature algorithm…

Malware & Threats

Organizations in the Dark as Most Networks Actively Breached: Analysis

Issued by: Security Week

While most of the security industry is looking forward and making threat predictions for 2017, one vendor has stopped to analyze what has been happening in 2016 — and the reality is, we aren’t even aware of what is happening in our networks today. Breach detection firm SS8 used its BreachDetect platform to analyze 20…