Archiv für das Monat: September, 2019

By Anthony Grieco The world is facing a collective challenge with a growing cyber threat landscape. Trends like the Internet of Things (IoT) and 5G are expanding the attack surface with over 40 billion devices expected online within five years. A new wave of advanced ransomware may cost our global economy up to $20 billion by the year 2021. Countries and regions alike are struggling to create consistent regulations that protect their citizens and stay ahead of emerging threats. Organizations wanting to go digital are looking around for who they can trust. To deliver security and trust on a global scale in this environment will require more than individual companies operating in silos, it is a multi-party responsibility including both the public and private sector. It will require a new set of diverse talent. It will require new technical capabilities. It will require research to help stay one step ahead. It will require collaboration. Each of these requirements need to be cultivated to get us where we need to be as an industry.

The time to plant the seeds for our collective future is with action – today.

We know the pain of digital transformation. At Cisco, we’ve gone through our own transformation in a highly complex environment. Think many clouds, operating 176,000 networks across the globe, blocking 20 billion threats on the internet a day, not to mention delivering our portfolio of over 600 product lines. The struggle is real. But even if we don’t have all the answers, the silver lining is that this experience has pushed us to learn at every stage of our journey. We see it as our role and responsibility to share our experience with others and are constantly looking for new opportunities to amplify those efforts. After all, cybersecurity is a team sport. As organizations, countries, and regions raise the bar for global cybersecurity…we all reap the benefits. Many are talking about co-innovation, collaboration and partnerships. We need to do more than talk. We need the right tools and the right environment where productive conversations, best practice sharing, and hands-on learning can happen.
That is why we are investing in our first Center of Excellence and Co-Innovation that will focus on cybersecurity and privacy. Opening in Milan in 2020, the center will bring together experts from both the public and private sectors to connect, learn, research and create solutions to help solve some of our most pressing security and privacy challenges. Leveraging our global network of Co-Innovation Centers and Cisco DevNet, a platform with more than 500,000 developers, the center will provide an environment to tackle complex challenges such as securing critical infrastructure (i.e. utilities, smartgrids) as well as evaluating the future complications of technologies like IoT and 5G. To supplement our investment on the future, we are also supporting a number of scholarships for a Master of Science in Cyber Risk Strategy & Governance at two Italian universities.
Cisco works with universities around the world in over a hundred different research projects and programs related to the enhancement of cybersecurity, data protection and privacy. This is in addition to more than 326,000 students worldwide who took cybersecurity courses last fiscal year through Cisco Networking Academy. Through collaboration and education, our goal is for these actions to cultivate future talent and build expertise for the next generation.
I am proud of the long-term commitment Cisco has laid down to help build the next generation of cybersecurity talent and co-innovation. My challenge to each of you is to join us – either physically at one of our programs or philosophically aligned to the spirit of collaboration. Regardless of where you are on your journey. Maybe you are new to cybersecurity. Or you are just starting to take your organization digital. There is a role and place for your contribution. If you have just started, I encourage you to seek out others who have a long history and experience with security and privacy challenges. For those of you who have that proven experience…it is your role to share it. Because the reality is that no one is going to win alone. It’s time for action and to get involved.
To succeed in tackling the world’s most critical and complex cybersecurity challenges we must work together. Join the team.
Want to hear more about Cisco’s cybersecurity journey? Check out our Trust Center to learn more.

Source:: Cisco Security Notice

By Talos Group
Today, Talos is publishing a glimpse into the most prevalent threats we’ve observed between Sep. 13 to Sep 20. As with previous roundups, this post isn’t meant to be an in-depth analysis. Instead, this post will summarize the threats we’ve observed by highlighting key behavioral characteristics, indicators of compromise, and discussing how our customers are automatically protected from these threats.
As a reminder, the information provided for the following threats in this post is non-exhaustive and current as of the date of publication. Additionally, please keep in mind that IOC searching is only one part of threat hunting. Spotting a single IOC does not necessarily indicate maliciousness. Detection and coverage for the following threats is subject to updates, pending additional threat or vulnerability analysis. For the most current information, please refer to your Firepower Management Center, Snort.org, or ClamAV.net.
Read More
Reference:
TRU09202019 – This is a JSON file that includes the IOCs referenced in this post, as well as all hashes associated with the cluster. The list is limited to 25 hashes in this blog post. As always, please remember that all IOCs contained in this document are indicators, and that one single IOC does not indicate maliciousness. See the Read More link above for more details.

Source:: Cisco Security Notice

By Talos Group This blog post was written by Colin Grady, William Largent, and Jaeson Schultz.
Emotet is still evolving, five years after its debut as a banking trojan. It is one of the world’s most dangerous botnets and malware droppers-for-hire. The malware payloads dropped by Emotet serve to more fully monetize their attacks, and often include additional banking trojans, information stealers, email harvesters, self-propagation mechanisms and even ransomware.
At the beginning of June 2019, Emotet’s operators decided to take an extended summer vacation. Even the command and control (C2) activities saw a major pause in activity. However, as summer begins drawing to a close, Talos and other researchers started to see increased activity in Emotet’s C2 infrastructure. And as of Sept. 16, 2019, the Emotet botnet has fully reawakened, and has resumed spamming operations once again. While this reemergence may have many users scared, Talos‘ traditional Emotet coverage and protection remains the same. We have a slew of new IOCs to help protect users from this latest push, but past Snort coverage will still block this malware, as well traditional best security practices such as avoiding opening suspicious email attachments and using strong passwords.
Read More

Source:: Cisco Security Notice

Source:: Innovaphone