Network Security Archives - Page 22 of 98

Cybersecurity Companies Join Forces Against Controversial DMCA Section

Issued by: Security Week

The DMCA is a copyright law that was passed in 1998. It prohibits the production and dissemination of technology, devices, or services designed to circumvent measures that control access to copyrighted works. One section of the DMCA, section 1201, has posed some problems for the cybersecurity community. According to the U.S. Copyright Office, “section 1201…

Network Security

Data Security Company Symmetry Systems Raises $15 Million

Issued by: Security Week

The round was led by Prefix Capital and ForgePoint Capital, with participation from Accenture Ventures, as well as individual investors Tom Gonser, founder of DocuSign; Omkhar Arasarathnam, engineering director at Google Cloud; Bob Gleichauf, EVP at InQTel and ex-CTO at Cisco; David Tsao, VP of security engineering at Marqeta; and Sameer Sait, CISO at Amazon…

Network Security

Mitre Adds D3FEND Countermeasures to ATT&CK Framework

Issued by: Security Week

The project, called D3FEND, is available through the non-profit Mitre Corporation as a catalog of defensive cybersecurity techniques and their relationships to offensive/adversary techniques. The primary goal of the initial D3FEND release is to help standardize the vocabulary used to describe defensive cybersecurity technology functionality. Mitre described D3FEND as an “early stage experimental research project”…

Network Security

NSA Releases Guidance for Securing Enterprise Communication Systems

Issued by: Security Week

UC and VVoIP are call-processing systems that are used for communications and collaboration by many enterprises, including government agencies and their contractors. The NSA has warned that if these systems are not properly secured, they are exposed to the same risks as IP systems, including software vulnerabilities and various types of malware. Threat actors could…

Network Security

Cybersecurity Training Company Immersive Labs Raises $75 Million

Issued by: Security Week

Founded in 2017, by a former employee of the UK’s GCHQ intelligence agency, the company has offices in Bristol and Boston, helping both private and government organizations improve the cybersecurity skills of their employees. The new funding round, Immersive Labs says, will help it accelerate the delivery of a new Cyber Workforce Optimization platform. Leveraging…

Network Security

Canada Privacy Watchdog Slams Police Use of Facial Recognition Tool

Issued by: Security Week

In a report to lawmakers, privacy commissioner Daniel Therrien said Clearview AI‘s collection of images without consent and the Royal Canadian Mounted Police (RCMP)’s use of that database were illegal. The software startup has stockpiled more than three billion images grabbed from popular social media platforms including Facebook, Instagram, Twitter and YouTube, as well as millions…

Network Security

Honeywell Launches OT Cybersecurity Monitoring and Response Service

Issued by: Security Week

The new service, named Advanced Monitoring and Incident Response (AMIR), is part of Honeywell’s Forge managed security services offering. It’s designed to help security teams detect and respond to attacks targeting industrial control systems (ICS) and operational technology (OT) networks. Honeywell says AMIR is designed to continuously monitor OT environments for suspicious events. It collects…

Network Security

Poison in the Water: The Physical Repercussions of IoT Security Threats

Issued by: Security Intelligence

d wager few people had ever heard of Oldsmar, Florida, prior to 2021. That all changed in February when the city made headlines. The reason? An Internet of things (IoT) security incident moved into the physical world. A Tale of Lifted Lye Levels At 8 a.m. local time on February 5, 2021, an operator at…

Network Security

At Odds: The Promise vs. Operational Reality of Security Solutions

Issued by: Security Week

By now you’ve probably spent at least a few minutes watching “What I thought I was getting vs. what I actually got” videos. There’s the pet edition, the mature husband edition, even a personal edition – “How I thought I looked vs. how I actually looked.” You get the picture. A similar phenomenon has been…

Network Security

Half-Double: Google Researchers Find New Rowhammer Attack Technique

Issued by: Security Week

Rowhammer attacks — first discussed in 2014 — involve repeatedly accessing a row of memory in an effort to cause bit flips in adjacent rows, which can be useful for by passing memory protections. A malicious actor could use Rowhammer to escalate privileges and for other purposes, and researchers have demonstrated over the past years…