DNS is a Unique (and Necessary) Security Control
Like many other security professionals, you have been reviewing your security stack, reading up on the latest security trends, and have perhaps recently attended Info-Sec, RSA, Black Hat or some other...
View ArticleClik here to view.
Top 10 Cyber Security Tools for Small Businesses
Small businesses have few options for cyber security tools and even fewer resources to deploy and manage them. You must choose wisely to carefully balance low cost, ease of use, and high impact on the...
View ArticleClik here to view.
Twitch updates security for its TwitchCon event following the Jacksonville...
is today announcing changes to its security procedures for its TwitchCon event taking place in San Jose, California on Saturday, October 27th. The update follows news of the tragic shooting at an...
View ArticleClik here to view.
A Visual Explanation of How DNS Lookups Work
Have you ever wondered what happens when you type an address into your browser? The first step is the translation of a domain name (such as pingdom.com) to an IP address. Resolving domain names is done...
View ArticleClik here to view.
Global Physical Security Information Management Market 2017-2021 | Services...
LONDON (BUSINESS WIRE) #ITSecurity According to the latest market research report released by Technavio, the global physical security information management (PSIM) market is expected to accelerate at...
View ArticleClik here to view.
WPA3 Improving your WLAN security
Introduction After Wi-Fi Alliance (WFA) introduced “Wi-Fi Protected Access” version 3 (WPA3) in late June of 2018 [1], vendors are pretty busy to adopt this security enhancement, which will become...
View ArticleBroCon is coming: 10-12 Oct 2018 Arlington VA
Do you know Bro? If you work in the network security world you most likely do.Bro is an open-source network security monitor. While focusing on network security monitoring, Bro provides a comprehensive...
View ArticleBlackBerry Massively Steps Up Security Efforts to Address Threat Storm
BlackBerry continues to execute on their pivot to become a software, services, and device security firm. This doesn’t mean they don’t still have interesting smartphones, their licensed Key2 phone is...
View ArticleBrian NeSmith, providing SOC-as-a-Service with Arctic Wolf Networks
Brian NeSmith is the CEO of Arctic Wolf Networks, which was started back in 2012. They provide Security Operations Center-as-a-Service. I have known him for decades when he started a quirky company...
View ArticleClik here to view.
盛会回顾 | 当陌陌遇上白帽与摇滚，引爆KCon 2018！（内附议题PPT）
一年一度的KCon大会，是所有白帽们都向往的盛会，2018 Kcon大会在经过高质量的闭门培训，以及两天干货议题分享之后，已于近期圆满落下了帷幕。 无论今年的大会你是否在现场，作为KCon 2018「Rocking Live Show」环节连续两年独家冠名赞助商，陌陌安全应急响应中心今天带你们来回顾下大会的盛况。 18 大议题，干货满满...
View ArticleClik here to view.
VMware郭尊华：数字化转型重塑安全
VMware全球副总裁、大中华区总裁―郭尊华 2018 年 8 月 28 日，ISC 互联网安全大会在北京奥运村国家会议中心成功举办，作为受邀方之一，我代表 VMware 就产业峰会中的 “互联网大安全” 话题进行了深入讨论。 互联网发展十年间，信息安全时代与大安全时代接连到来，安全始终与互联网行业相辅相成，信息安全问题也在各行各业间搭起了合作的桥梁。 我曾担任全球最大安全软件公司 Symantec...
View Article给网络安全加上“金钟罩”
网络就像一把双刃剑，每享受一种便利其实也意味着风险又增加一分。如何为网络安全加上“金钟罩”?记者从即将在沪举行的网络安全周新闻通气会上了解道，本市将评选出十佳“首席安全官”，这些优秀个人凭借他们的努力，在申城的网络信息安全管理岗位上做出了积极贡献。...
View ArticleClik here to view.
Asymetric Encryption 5min walk-through
Cryptography is one of the key-elements in the Blockchain world. We were already looking into the one-way encryption with hash function in the previouspost. Encryption of data to be decrypted again,...
View ArticleClik here to view.
Fbot, A Satori Related Botnet Using Block-chain DNS System
Since 2018-09-13 11:30 UTC, a new botnet (we call it Fbot) popped up in our radar which really caught our attention. There are 3 interesting aspects about this new botnet: First, so far the only...
View ArticleClik here to view.
How to Set Up HTTPS on Your Site: A Simple Guide
As of July 2018, Google started marking your website as “not secure” for anyone visiting it using Google Chrome. If you don’t want to lose traffic, it’s a good idea to make sure SSL is set up on your...
View ArticleClik here to view.
Clik here to view.
APT10使用新技术对日本公司发起攻击
介绍 2018年7月，FireEye检测并阻止了针对日本媒体行业的APT10（Menupass）活动。该组织通过发送包含恶意文档的鱼叉式网络钓鱼电子邮件进行传播，此恶意文件会导致安装UPPERCUT后门。这个后门被称为ANEL。 攻击概述 在邮件中被传递的文件是Microsoft Word文档，其中包含了恶意VBA宏。虽然恶意文件的内容不可读，但标题与海事，外交和朝鲜问题有关。 文件名 MD5...
View ArticleClik here to view.
三大EOS DAPP被黑客攻破薅走数万EOS
昨天，日收万金的EOS大赌场：eosbet 被黑客攻击了――黑客aabbccddeefg 利用合约漏洞，零成本薅走 bet 奖池约 5万EOS。 eosbet 官方紧急发表声明，并关闭了游戏： eosbet官方紧急关闭了游戏 eosbet刚被攻击关停，排名其后的 dice游戏被同一个黑客再次攻破 ，使用同样的攻击手段， 转走大量EOS。。。。去中心化交易所 newdex也被用同样的手段攻破...
View ArticleClik here to view.
相比众多 CTF 和 PWN，安全圈的这场比赛更值得关注
对于攻击者而言，如何用最低的成本，获取最好的攻击效果是他们一直追求的，如果还能让自己不易被发现，那再好不过。 近几年，通过软件供应链污染来达到恶意攻击的手段，就因为上面这个原因而频频被使用。 2015年9月，XcodeGhost 事件爆发，当年这个所有iOS程序员都会用到的开发工具，让超过 4000个不同版本的苹果应用被感染，该事件影响了中国近一亿苹果手机用户，由此，软件供应链安全问题开始广受关注。...
View ArticleHackers Steal $200,000 Worth of EOS, dApp Had Smart Contract Flaw
A gambling application that is based on the EOS blockchain has had a flaw in its smart contract system exploited. Hackers were able to make off with $200,000 worth of EOS due to the vulnerability....
View Article