April 2016

Verizon DBIR 2016 shows we haven't learned how to improve security

The 2016 Verizon DBIR skimps on data breach analysis and instead focuses on common issues, such as phishing, vulnerability management and access controls, which are still befuddling IT pros.  Continue Reading

Simple, yet undetectable Windows AppLocker bypass discovered

A Windows command-line utility dating back to XP, Regsvr32, reportedly enables a simple and virtually undetectable Windows AppLocker whitelist bypass.  Continue Reading

How can Vonteera adware be prevented from disabling antimalware?

Vonteera adware has the ability to disable antimalware software on endpoint devices. Expert Nick Lewis explains how enterprises can prevent this attack.  Continue Reading

Why a cap-less cybersecurity budget could harm security

An unlimited cybersecurity budget may sound like a dream, but in reality it could do more harm than good for an enterprise. Expert Mike O. Villegas explains.  Continue Reading

ModPOS: How can enterprises defend against POS malware?

ModPOS, a new POS malware, compromised millions of credit card accounts in 2015. Expert Nick Lewis explains how cybercriminals use this malware and what can be done to stop it.  Continue Reading

Software-defined network security: A 'no-touch' approach

One way to achieve software-defined network security is to implement a no-touch approach to networking administration. Learn how it can be done, and what needs to change before it’s possible.  Continue Reading

Can credit card hacking be stopped with Chip and PIN alone?

Amex cards have been discovered to be vulnerable to credit card hacking. Expert Nick Lewis explains how this happens, and what can be done about Chip and PIN security.  Continue Reading

Choosing secure file transfer products for your enterprise

Are you concerned about file transfer security? Expert Karen Scarfone discusses the best products for transporting files while maintaining their confidentiality.  Continue Reading

'Going dark' battle moves to Congressional encryption hearing

Experts face off in Congress over 'going dark' encryption debate, stake out positions on security, privacy and government access; polls show support for strong encryption.  Continue Reading

Oracle patches now more critically rated with CVSS 3.0

Oracle patches 136 security flaws in various products and a number of vulnerabilities were rated more critical because of a switch to CVSS 3.0.  Continue Reading

How to buy the best SSL for your enterprise

To choose the best SSL for your enterprise, you need to stay up to date on SSL/TLS encryption developments. Learn why SSL/TLS remains a vital technology and how to determine the approach that will work best for your company.  Continue Reading

How does the banking Trojan Dyreza exploit Windows 10?

A variant of banking Trojan Dyreza has begun to target Windows 10. Expert Nick Lewis explains the new attack functionalities, and Windows 10 and user vulnerabilities.  Continue Reading

Breaking down the DROWN attack and SSLv2 vulnerability

A DROWN attack can occur through more than a third of all HTTPS connections. Expert Michael Cobb explains how DROWN enables man-in-the-middle attacks and mitigation steps to take.  Continue Reading

JBoss vulnerability highlights dangers of unpatched systems

Up to 3.2 million servers with unpatched JBoss vulnerability from 2010 are open to spread ransomware through networks; experts urge keeping up with software patches to stay safe.  Continue Reading

Google's second Android Security Report is a mixed bag

The second annual Android Security Report details a number of ways Google has been working to improve security on its mobile platform but also highlights persistent problems.  Continue Reading

Find the security advantage in SDN

The implications of software-defined networking (SDN) are still being sorted out. Still, there is little doubt that this approach brings sweeping changes throughout the IT infrastructure and the way it is managed.

Decoupling network ...  Continue Reading

How did remote access Trojan GlassRAT evade detection?

A remote administration tool like GlassRAT can go undetected for long periods of time. Expert Nick Lewis uncovers how this type of malware works and affects corporations.  Continue Reading