Hacking the Belkin E Series OmniView 2-Port KVM Switch

By Talos Group Author: Ian Payton, Security Advisory EMEAR Introduction Too frequently security professionals only consider software vulnerabilities when considering the risks of connecting devices to their networks and systems. When it comes to considering potential risks of connected devices and the Internet of Things, not only must security professionals consider potential vulnerabilities in the software and firmware […]

Source:: Cisco Security Notice

Yesterday’s Cyber Posture Just Won’t Work

By Anthony Grieco Cyber threats have changed radically with the evolution of technology. Yet as threats continue to mount, many enterprises are still relying on yesterday’s cyber protection methods, technology infrastructure, and cultural ethos as the foundations for their modernization efforts. While IT digitization is integral to business growth and trajectory, enterprises must also update their cyber resilience […]

Source:: Cisco Security Notice

Yesterday’s Cyber Posture Just Won’t Work

By Anthony Grieco Cyber threats have changed radically with the evolution of technology. Yet as threats continue to mount, many enterprises are still relying on yesterday’s cyber protection methods, technology infrastructure, and cultural ethos as the foundations for their modernization efforts. While IT digitization is integral to business growth and trajectory, enterprises must also update their cyber resilience […]

Source:: Cisco Security Notice

Black Hat Asia 2017: SOC in the NOC

By Jessica Bair Detecting PowerShell Exploits Black Hat returned to Asia again in 2017, with two days of technical hands-on Trainings, followed by two days of the latest research and vulnerability disclosures at the Briefings. The backbone of the conference was the WiFi network, built on site by staff from Ruckus. I was honored to be invited to […]

Source:: Cisco Security Notice

Black Hat Asia 2017: SOC in the NOC

By Jessica Bair Detecting PowerShell Exploits Black Hat returned to Asia again in 2017, with two days of technical hands-on Trainings, followed by two days of the latest research and vulnerability disclosures at the Briefings. The backbone of the conference was the WiFi network, built on site by staff from Ruckus. I was honored to be invited to […]

Source:: Cisco Security Notice

IoT Isn’t Just About the ‘Thing’

By Anthony Grieco Internet of Things (IoT) is the term du jour. As adoption increases the natural question becomes, how has it been secured? To understand an effective security strategy for IoT, we first need to understand where the value from IoT is generated. The ability to use data, collected from a variety of locations and sources, to […]

Source:: Cisco Security Notice

IoT Isn’t Just About the ‘Thing’

By Anthony Grieco Internet of Things (IoT) is the term du jour. As adoption increases the natural question becomes, how has it been secured? To understand an effective security strategy for IoT, we first need to understand where the value from IoT is generated. The ability to use data, collected from a variety of locations and sources, to […]

Source:: Cisco Security Notice

Introducing ROKRAT

By Talos Group This blog was authored by Warren Mercer and Paul Rascagneres with contributions from Matthew Molyett. Executive Summary A few weeks ago, Talos published research on a Korean MalDoc. As we previously discussed this actor is quick to cover their tracks and very quickly cleaned up their compromised hosts. We believe the compromised infrastructure was live […]

Source:: Cisco Security Notice

Introducing ROKRAT

By Talos Group This blog was authored by Warren Mercer and Paul Rascagneres with contributions from Matthew Molyett. Executive Summary A few weeks ago, Talos published research on a Korean MalDoc. As we previously discussed this actor is quick to cover their tracks and very quickly cleaned up their compromised hosts. We believe the compromised infrastructure was live […]

Source:: Cisco Security Notice

Harnessing the Power of NetFlow and Packet Analysis

By Amanda Lemmers Packet capture has long been used by network operators, but a variety of challenges have limited its effectiveness in security and threat detection. In large networks, packet capture can collect terabytes of packet data, and sifting through that data for evidence of an intrusion can take a long time. Traditionally, investigators used broad packet capture […]

Source:: Cisco Security Notice