Category Archives: endpoint security
Flame: The Latest (& Not Last) Targeted Attack
Today I sat down with CoreTrace’s founder and CTO, Dan Teal, to get his perspective on the latest targeted attack gaining publicity: Flame. Readers of this blog know that Dan is uniquely qualified to comment on attacks such as these, … Continue reading
Video: Stopping Reflective Memory Injection with CoreTrace Bouncer
Today’s cyber attackers have added a new weapon into their arsenal: a sophisticated memory attack known as “Reflective Memory Injection”. Reflective Memory Injection goes beyond traditional memory exploits like skape/jt to easily compromise and own a victim computer. Most security … Continue reading
Security Earthquake Nobody Felt: McAfee Endorses Application Whitelisting
Folks in California are so used to earthquakes that sometimes they barely notice when one happens. Folks in the security business are so busy and swamped with the noise of the market that we often miss tectonic shifts in our … Continue reading
Making “Shady RAT” Useful: Open Letter to McAfee & the Australian DoD…
Earlier this week, I wrote a post comparing the cybersecurity strategies of the United States and Australian Departments of Defense. In that post, I applauded the Australians for having a strategy that was “detailed, well-researched and supported, and focused on … Continue reading
Tale of Two DoDs: U.S. & Australian security plans differ in usefulness…
Earlier this week, I came across some coverage about some of the Australian Department of Defence’s (DoD) cyber-security strategies. While not completely fair, I found it an interesting study in contrasts between the Australian strategies/tactics and those recently outlined by … Continue reading
Top Security Stories for July: New plans, breaches, platforms & arrests…
In response to increasing cyber threats targeting the U.S. government, defense contractors and the nation’s critical infrastructure, the Department of Defense released its new strategy for protecting our nation’s systems and networks from cyber attacks. While it’s a nice first … Continue reading
10 Things You Don't Know about Virtualization Security…
When it comes to virtualization security, there are many things that people don’t even know are problems, or don’t even know they need to address. In our recent webinar, “10 Things You Don’t Know about Virtualization Security”, IANS faculty member … Continue reading
Lessons from RSA, Epsilon, etc.: Partners may be the weakest security link.
Computer hackers by and large focus on the weakest link of an organization’s security system. Whether it’s an unprotected server, a newly discovered system vulnerability, or an unsuspecting employee’s computer that is connected to the corporate network, cyber criminals are … Continue reading
Total Application Control (TAC): Best of whitelisting AND blacklisting…
As hackers get better at breaking into networks and compromising data, IT security experts continue to debate the best ways to defend their systems against highly targeted malware attacks. In the PCWorld article, “How to Stop Hack Attacks In One … Continue reading
It's a new platform… So why use an old (broken) security approach?
When it comes to protecting network endpoints against more cunning and deceitful modern malware attacks, deploying proven security tools to prevent malicious code from exploiting your system is job #1. Unfortunately, the cat-and-mouse game between IT security professionals and hackers … Continue reading
Twitter
Linkedin
YouTube
Google +
Facebook
Blog