Cyber Security
Siemplify Integrates MITRE ATT&CK Framework into SecOps Platform
Siemplify announced its integration to the MITRE ATT&CK framework, enabling security operations teams to incorporate rich data and actionable intelligence into their incident response workflows. A globally accessible knowledge base of adversary tactics and techniques based on real-world observations, MITRE ATT&CK is used as a foundation for the development of specific threat models and methodologies in the private sector, government and in the cybersecurity product and service community.
Cloud Security Spending in the US Expected to Reach $1.93 billion by 2021
According to PreciseSecurity.com, cloud security spending in the United States is expected to reach $1.93 billion by 2021. Back in 2016, the US region spent $675 million on cloud security solutions in total, meaning it will triple in the following years. In comparison with other regions, the United States also represents the leading cloud security spending region in the World, followed by the Asia Pacific with $638 million cloud security costs expected in 2021.
The New Security Landscape: Where Physical Security and Cybersecurity Converge
Nearly every industry has undergone some form of digital transformation, and security is no exception. More tech solutions hit the market every day and businesses are starting to see the importance of effectively combining their physical security and cybersecurity practices. The influx of IoT-enabled devices, coupled with an increase in cybercrime, has led businesses to take a hard look at preventative measures to protect their people, property and assets from threats.
Viakoo Salutes National Cybersecurity Awareness Month
Viakoo marks the end of National Cybersecurity Awareness Month with insights from three industries that are familiar with addressing cybersecurity challenges. Data centers have a unique position in today?s business landscape, enabling companies to quickly scale their computing and data processing resources. They also present a particularly attractive target for cybercriminals, because of the density of the valuable customer and business data they hold.
Infocyte Launches ?Response Ready? Partner Program and Incident Response Platform Extensions
Infocyte introduced their ?Response Ready? program for certified IR partners. These elite partners have deployed Infocyte into multiple customer environments during cybersecurity incident response operations and proven their ability to address and remediate active attacks. Additionally, Infocyte announced new platform Extensions enabling customers and partners to develop, deploy, and share custom collection and action capabilities built on top of Infocyte?s award-winning platform.
TA505 Distributes New SDBbot Remote Access Trojan with Get2 Downloader
In September 2019, Proofpoint researchers observed a prolific threat actor, TA505, sending email campaigns that attempt to deliver and install Get2, a new downloader. Get2 was in turn observed downloading FlawedGrace, FlawedAmmyy, Snatch, and SDBbot (a new RAT) as secondary payloads. In this post, Proofpoint will detail the tactics, techniques, and procedures associated with these latest campaigns and provide a detailed analysis of Get2 downloader and SDBbot RAT.
National Whistleblower Center Announces Research Partnership with Bradley University?s Center for Cybersecurity
The National Whistleblower Center has established a research partnership with the Center for Cybersecurity at Bradley University. Through this partnership, an academic research working group has been created to facilitate and promote enhanced whistleblower anonymity. Dr. Jacob Young, who has studied whistleblowing systems since 2013, has agreed to serve as the Senior Advisor on Cybersecurity for the National Whistleblower Center. In this role, he will manage and coordinate a multidisciplinary research team.
Qognify Announces the Cyber Security Release of its Cayuga Video Management System
Qognify announced the latest release of its VMS Cayuga R14. In recent years, dealing with cybersecurity issues to safeguard video installations has become of utmost importance. One of the best ways to reduce network vulnerabilities associated with video surveillance systems is to make sure that the communication between the different components of the video solution is securely encrypted.
Lilu / Lilocked Ransomware Attacks
Lilu, also known as Lilocked, a new strain of ransomware, has now infected thousands of Linux servers since mid-July. Chris Gerritz, the co-founder of Infocyte, a pioneer in proactive threat detection and incident response, is available to comment on these attacks. Chris, the U.S. Air Force CERT?s former chief of defensive counter-cyber operations shares his notes.
Kingston to Showcase Cyber Security Solutions Amid Increasing Customer Data Privacy Regulations
Kingston Digital announced it will showcase an array of products at GSX 2019, the leading trade event for security professionals. Amid increasing concerns about data security, the company will showcase its full line of industry-leading encrypted USB Flash drive solutions, including the IronKey? brand, high-density client and enterprise SSDs and Server Premier memory.
Securing Maritime Assets Demands a New Approach
At this moment, cyber-attacks threaten thousands of vulnerable cargo ships, which carry billions of dollars’ worth of goods. Due to the lack of maritime-specific cybersecurity solutions, vessels are highly susceptible to digitally-led hijackings or even ransomware. This threat can wreak havoc on global shipping. With Artificial Intelligence functionality, future solutions include autonomous safety mechanisms which recognize that they are the sole line of defense.
MOBOTIX Obtains the CNPP Trust Passport, Integrating the Cyber-Security Dimension in All of Its Digital Video Surveillance Camera Systems
MOBOTIX is the first manufacturer in Europe to obtain French CNPP certified product certification for its video surveillance cameras, offering a guarantee of IT and electronic ?resistance? to cyber-attacks. MOBOTIX announced its intention to focus more on cyber-security over one and a half years ago, in particular by launching the ?MOBOTIX Cactus Concept.? CNPP is a key player in France in risk prevention and control.
NETSCOUT?s Latest Threat Intelligence Report Uncovers Prime Targets for Cyber Criminals as Attacks Accelerate
NETSCOUT SYSTEMS announced the findings of its Threat Intelligence Report for the first half of 2019. The report underscores how dramatically the cybercriminal business model has matured into an efficient, global operation and the increasing geographical diversity and proliferation of nation-state Advance Persistent Threats (APT) groups. It reinforces the need for companies to minimize risks by having a better view of the threat landscape.
Capital One Hack ?Could be Tip of the Iceberg?
The data breach of US bank Capital One that this week exposed the personal data of over 100-million US customers may be only the start of a series of breach notifications from other organisations. According to research conducted by Israel-based cybersecurity company CyberInt, the threat actor allegedly responsible for the Capital One breach tried to mask their identity and IP address by connecting to ?IPredator?, a Sweden-based virtual private network.
French YouTuber Micode Infiltrates a Tech Support Scammers Network
In a recent series of videos on his YouTube channel aiming to popularize cyber-security, Micode looked into one of the most lucrative scams of the internet. The investigation brought him on the other side of the world in Mauritus for 3 episodes, of which the first have almost reached 1 million views. The 3 episodes have recently been subtitled in English for an international audience to understand how this very popular scam works.
WatchGuard Speeds Zero Day Malware Breach Detection from Months to Minutes
WatchGuard® Technologies announced a series of major updates to its threat correlation and response platform, ThreatSync, with the latest release of Threat Detection and Response. These enhancements include accelerated breach detection, network process correlation and AI-powered threat analysis, enabling managed service providers and the organizations they support to reduce breach detection and containment timeframes from months to minutes.
In Just One Evil Internet Minute Over Two Phish are Detected and $2.9 Million is Lost to Cybercrime, Reveals RiskIQ
RiskIQ released its annual ?Evil Internet Minute? report. The company tapped proprietary global intelligence and third-party research to analyze the volume of malicious activity on the internet, revealing that cybercriminals cost the global economy $2.9 million every minute last year, a total of $1.5 trillion. The data shows that in a single internet minute, $2,900,000 is lost to cybercrime. Top companies pay $25 per minute due to security breaches.
Genetec Partners with BlackBerry Cylance to Include AI-based Antivirus in its Appliance Portfolio
Genetec announced that it is partnering with Cylance, a business unit of BlackBerry, Limited, to bring AI-based antivirus protection to its appliances customers. Through this partnership, Genetec will offer additional cybersecurity protection. Genetec Streamvault all-in-one and rackmount appliances, storage, and workstations are expected to be shipped pre-installed and optimized with CylancePROTECT in September 2019.
ID Incognito Launches a Web App for Online Privacy
ID Incognito is a new web app dedicated to protecting your personal information online. The app was made in response to the growing need to provide personal information in order to use services online, specifically phone numbers and email addresses. The app works by providing phone number and email address aliases for users to give as info whenever signing up for services, subscriptions, or anything else requiring personal info online.
Major Study of Cybersecurity Operations Professionals Reveals Heavy Workload, Lack of Maturity in Four out of Five Businesses
Siemplify released the 2019 Security Operations Maturity Report, revealing critical insights and trends into the state of SecOps, from size and structure of programs to key challenges and growth initiatives. The report is based on a survey of more than 250 security operations practitioners working at enterprises and managed security service providers (MSSPs), who were asked to assess a litany of subjects related to their responsibilities, impediments and needs.