ITCurated, Author at Cyber Security Minute

RASP rings in a new Java application security paradigm

Issued by: CIO Security

Runtime Application Self Protection (RASP) is a next-generation cyber security technology designed to redress some of the weak points of application security. Unlike firewalls or code analysis, runtime-based technologies contain application data and contextual awareness, enabling them to be both precise and preemptive. In this article I introduce RASP. I’ll briefly compare RASP to other…

Cloud Security, Network Security

From Chasing Alerts to Hunting Threats: What Makes an Effective SOC is Evolving

Issued by: Security Week

Whether you call it a SOC, a CSOC, a Cyber Defense Center, or something else, security operation centers have the same fundamental mission – to help organizations detect, analyze, respond to, report on, and prevent cyber security incidents. But what it takes to do that effectively has changed in this ever-evolving threat landscape, putting an…

Malware & Threats

Sarvdap Spambot Checks IP Blacklists

Issued by: Security Week

The Sarvdap spambot was recently observed checking the IP addresses of infected hosts against common blacklists, in an attempt to ensure that its spam email is successfully delivered, Palo Alto Networks security researchers reveal. While other spambots typically start sending spam emails as soon as a host has been infected, Sarvdap first checks to see…

Vulnerabilities

“Dirty COW” Linux Kernel Exploit Seen in the Wild

Issued by: Security Week

A new Linux kernel vulnerability disclosed on Wednesday allows an unprivileged local attacker to escalate their privileges on a targeted system. Red Hat said it was aware of an exploit in the wild. The vulnerability, discovered by Phil Oester, was sarcastically dubbed by some people “Dirty COW” due to the fact that it’s caused by…

Cloud Security, Mobile Security

Why Poor Cyber Hygiene Invites Risk

Issued by: Dark Reading

Organizations around the world are implementing mobility, cloud computing, the Internet of Things (IoT), business intelligence, and social media technologies at breakneck speeds in order to remain competitive and relevant in today’s digital economy. However, with the rapid implementation of these technologies, new weak spots are emerging for attackers to exploit. And those adversaries are…

Software Security, Vulnerabilities

US Bank Regulators Draft Rules For Financial Services Cybersecurity

Issued by: Dark Reading

US bank regulators are all set to issue new standards for banks to protect themselves from cyberattacks, reports Reuters. The proposal, expected to be finalized soon and binding on financial institutions with more than $50 billion assets, comes in the wake of US banks suffering serious losses from online thefts. When the rules come into…

Malware & Threats

MBRFilter: Cisco open sources tool to protect the Master Boot Record

Issued by: Help Net Security

Cisco’s Talos research team has open sourced MBRFilter, a tool that aims to prevent a system’s Master Boot Record (MBR) getting overwritten by malware. The latest malware families that use this tactic are HDDCryptor (aka Mamba) and Petya, two pieces of ransomware that not only encrypt victims’ files, but also effectively lock them out of…

Malware & Threats

Hacking 3D manufacturing systems demonstrated by researchers

Issued by: Help Net Security

Researchers from three universities combined their expertise to demonstrate the first complete sabotage attack on a 3D additive manufacturing (AM) system, illustrating how a cyber attack and malicious manipulation of blueprints can fatally damage production of a device or machine. In their paper titled “Dr0wned,” researchers from Ben-Gurion University of the Negev (BGU), the University…

Network Security, Software Security

How cybercriminals attack homes, and how to stop them

Issued by: Help Net Security

At a recent Home Hacker Lab event, an ethical hacker revealed how cybercriminals attack, and what consumers can do to protect themselves. The October 13 workshop in New York City, presented by HSB and Prescient Solutions, mounted a remote cyber-attack on an Internet-connected model home inside the American Modern Insurance Group claims training facility in…

Network Security

Mainframe Security: An Easy and Intuitive Access Security Model

Issued by: Security Intelligence

Mainframe security is simple to understand and extremely intuitive to apply. Some might find it hard to believe that the mainframe security model can be easily integrated with other platforms and applications. As everyone in the IT industry knows, a system’s security level depends strictly on the possibility of attacks from unknown and unplanned access….