ZombieLoad Affects Data Centers and Here’s What You Can Do About It
Data Center Knowledge, May 15, 2019, with comments by Satya Gupta; Experts say exploits would be sophisticated and take a long time to build, but operators should act now. Yesterday more news of another Intel chip vulnerability was revealed where attackers can grab sensitive data while processes are running. Nearly ... Read More
Chinese Hacking Group, Buckeye, Used Stolen NSA Hacking Tools Ahead of Shadow Brokers’ Leaks
NSA Hacking tools Stolen in 2016 Were Leaked into the Wild in 2016 and 2017 In August of 2016, the mysterious group called The Shadow Brokers released its first round of stolen NSA hacking tools into the wild. They reportedly stole these prized hacking tools from the Equation Group, the ... Read More
Prediction Series #13 Final: For Defending Against 2019 Application Security Threats, Virsec Has You Covered
In our Prediction blog series for 2019, we’ve outlined in 12 blogs 12 troubling areas where we expect cyber threats to expand this year. The Troubling Twelve 1. Security systems are blind to memory-based threats - a failure that will continue to pose data theft risks 2. Critical infrastructure organizations ... Read More
Prediction Series #11: Servers and endpoints differ vastly from each other & cannot be protected by the same means
Priorities for servers, apps, and cloud workloads are shifting Nothing has changed the business and technology world more than the cloud. The cloud has changed the application delivery landscape, and the area that may be most effected of all is the area of security strategies. As businesses move their applications ... Read More
LockerGoga Ransomware Slams Industrial Firms in Europe, Could Hit Anyone
LockerGoga combines ransom demand “negotations”, aggressive disruption and total lock out Over the last few months, a new ransomware, LockerGoga, has been hitting industrial and manufacturing firms and causing devastating impact. Later strains of it have been even more damaging than the initial rounds. In some cases, it’s evident the ... Read More
Prediction Series #10: Reports of China chip hacking should be a warning to US supply chain
Last Fall reports came out claiming that rice-grain sized spying devices were secretly being planted onto US servers during the manufacturing process. The article created an uproar. Apple and Amazon, 2 of 30 companies said to be affected, adamantly denied the claims that malicious spy chips had been planted on ... Read More
Prediction Series #9: Hackers continue spending weeks & months of dwell time in networks
As NVD vulnerabilities and cyber breaches rise, so does hacker dwell time The number of known vulnerabilities year over year is exploding. The National Vulnerability Database (NVD) approached 20,000 vulnerabilities for 2018, an increase of over a 40% over 2017. This explosion reflects the increased complexity of the software stack ... Read More
Prediction Series #8: GDPR Breach Disclosure Mandate Is Now Global & Must Be Timely
Companies will be forced to be upfront and timely or face even steeper fines Coming up on the first anniversary, many companies still working on compliance On May 25, 2018, the much-anticipated GDPR went into affect, requiring that firms get specific permission from customers and prospects to use their information ... Read More
Prediction Series #7: If organizations are to increase their focus on application security, they must move beyond RASPs
Gaining truly self-defending application protection requires more than RASPs RASPs over promise and under deliver The concept of making applications self-protecting is powerful as cyberattacks continue to grow in frequency and severity. Advanced threat visibility across applications would enable teams to respond to threats in real time. Original concept was ... Read More
Prediction Series #6: Alert fatigue undermines security, exhausts SOC teams
Security teams sometimes dial down WAFs, which achieves fewer false positives but compromises security Indulging false positives sacrifices security No one likes hearing an alarm going off – whether it’s a fire alarm, a break-in alarm or some other emergency, it’s a nerve wracking experience, especially if you think the ... Read More
