Search

Security Execs’ Advice on Overcoming the Challenges of Remote Work
Blog

Security Execs’ Advice on Overcoming the Challenges of Remote Work

By Joe Pettit on Mon, 08/17/2020
At the outset of the global coronavirus 2019 (COVID-19) pandemic, many organizations decided to enforce social distancing by requiring that their employees begin working from home. This decision changed the fundamental way in which many employees were accustomed to working. It also created new security challenges for organizations that had larger...
New Microsoft Spear-Phishing Attack Uses Exact Domain Spoofing Tactic
Blog

CISA Warns of Phishing Emails Leading to Spoofed COVID-19 Relief Page

By David Bisson on Thu, 08/13/2020
The Cybersecurity & Infrastructure Security Agency (CISA) warned that phishing emails are redirecting recipients to spoofed COVID-19 loan relief pages. On August 12, CISA announced its discovery of the attack campaign in Alert (AA20-225A): The Cybersecurity and Infrastructure Security Agency (CISA) is currently tracking an unknown malicious cyber...
Blog

Survey: 76% of IT Pros Say It’s Difficult to Maintain Security Configs in the Cloud

By Editorial Staff on Wed, 08/12/2020
Cloud misconfigurations are no laughing matter. In its "2020 Cloud Misconfigurations Report," DivvyCloud revealed that 196 separate data breaches involving cloud misconfigurations had cost companies a combined total of approximately $5 trillion between January 1, 2018 and December 31, 2019. The problem is that those costs could be even higher; as reported by ZDNet, 99% of IaaS issues go unreported...
Managing Information Security Skepticism by Changing Workplace Culture
Blog

Managing Information Security Skepticism by Changing Workplace Culture

By Guest Authors on Tue, 08/11/2020
Imagine a workplace in which all of the staff support the function of information security. Employees report suspicious events, are committed to data privacy and see the value in completing the regularly scheduled compliance trainings. How much easier life would be for security professionals! Naturally, it’s hard for people to get behind something...
VERT Threat Alert: June 2022 Patch Tuesday Analysis
Blog

VERT Threat Alert: August 2020 Patch Tuesday Analysis

By Tyler Reguly on Tue, 08/11/2020
Today’s VERT Alert addresses Microsoft’s August 2020 Security Updates. VERT is actively working on coverage for these vulnerabilities and expects to ship ASPL-899 on Wednesday, August 12th. In-The-Wild & Disclosed CVEs CVE-2020-1464 A vulnerability exists in the way that Windows validates file signatures. An attacker could load improperly signed...
Vulnerability & Risk Management
VERT Research
The State of Civil Aviation Cybersecurity
Blog

The State of Civil Aviation Cybersecurity

By Anastasios Arampatzis on Sun, 08/09/2020
Technology and cyber systems have become essential components of modern society. Despite the benefit of cyber technologies, insecurities arise. These could affect all systems and infrastructures. More than that, the threat of a cyberattack could very well have a transnational component and effect as worldwide systems become increasingly...
The Center for Internet Security (CIS) Use Cases and Cost Justification
Blog

The Center for Internet Security (CIS) Use Cases and Cost Justification

By Michael Betti on Thu, 08/06/2020
Vince Lombardi, the famous football coach, used to start his training camp each season with a talk about doing the basics. He’d tell the players that they start with the basics, then he’d take a football and hold it up and tell them, “This is a football.” In football, as in life and IT Security, starting with the basics is the most important step...
PLEASE_READ_ME Ransomware Campaign Targeting MySQL Servers
Blog

Belarus Announces Arrest of GandCrab Ransomware Distributor

By David Bisson on Mon, 08/03/2020
Government officials in Belarus announced they had arrested an individual on charges of having helped to distribute GandCrab ransomware. On July 30, the Ministry of Internal Affairs (MIA) of the Republic of Belarus revealed that it had arrested a 31-year-old resident of Gomel in cooperation with the...
Attacker Hacked into Florida City’s Water Treatment Plant, Attempted to Poison Water Supply
Blog

Effective Threat Intelligence Through Vulnerability Analysis

By Anastasios Arampatzis on Wed, 07/29/2020
Vulnerabilities are weaknesses leveraged by adversaries to compromise the confidentiality, availability or integrity of a resource. The vulnerability ecosystem has matured considerably in the last few years. A significant amount of effort has been invested to capture, curate, taxonomize and communicate the vulnerabilities in terms of severity,...
Ghidra 101: Slice Highlighting
Blog

Ghidra 101: Slice Highlighting

By Craig Young on Wed, 01/06/2021
In this blog series, I will be putting the spotlight on useful Ghidra features you may have missed. Each post will look at a different feature and show how it helps you save time and be more effective in your reverse engineering workflows. Ghidra is an incredibly powerful tool, but much of this power comes from knowing how to use it effectively. In...
Don’t Let Your Stored Procedures Lack Integrity
Blog

Don’t Let Your Stored Procedures Lack Integrity

By Mitch Parker on Mon, 12/28/2020
Unfamiliar territory As a security analyst, engineer, or CISO, there are so many aspects of the field that require immediate attention that one cannot possibly know everything. Some of the common areas of security knowledge include topics such as where to place a firewall, configuration and patch management, physical and logical security, and...
Lessons from Teaching Cybersecurity: Week 12
Blog

Lessons from Teaching Cybersecurity: Week 12

By Tyler Reguly on Wed, 12/23/2020
As I had mentioned previously, this year, I’m going back to school. Not to take classes, but to teach a course at my alma mater, Fanshawe College. I did this about a decade ago and thought it was interesting, so I was excited to give it another go. Additionally, after a friend mentioned that their kid wanted to learn Python, I developed an Intro to...
Continue Clean-up of Compromised SolarWinds Software
Blog

Continue Clean-up of Compromised SolarWinds Software

By Editorial Staff on Mon, 12/21/2020
Last week, the United States Cybersecurity & Infrastructure Security Agency (CISA) advised on initial steps to take in response to the SolarWinds software that was compromised by advanced persistent threat actors. While federal agencies were under a deadline to complete certain actions, this issue will require continued clean-up and longer-term...
VERT Threat Alert: June 2022 Patch Tuesday Analysis
Blog

VERT Alert: SolarWinds Supply Chain Attack

By Tyler Reguly on Fri, 12/18/2020
Vulnerability Description The United States Cybersecurity & Infrastructure Security Agency (CISA) has advised that an advanced persistent threat (APT) actor was able to insert sophisticated malware into officially signed and released updates to the SolarWinds network management software. The attacks have been ongoing since at least March 2020 and...
Vulnerability & Risk Management
VERT Research
12 Essential Tips for Keeping Your Email Safe
Blog

12 Essential Tips for Keeping Your Email Safe

By Katrina Thompson on Thu, 07/06/2023
Hey, did you get that sketchy email? You know, the one from that malicious hacker always trying to fool us into clicking on some malware? Boy, these criminals are relentless. Wait, what? You clicked on it? Uh-oh... A hypothetical scenario, but one that plays out every day in organizations across the globe. The truth is that it is a very real...
Good-Vulnerability-Management-Policy
Blog

4 Things a Good Vulnerability Management Policy Should Include

By Matthew Jerzewski on Wed, 06/12/2024
The Verizon 2024 Data Breach Investigations Report noted a 180% increase in exploited vulnerabilities over the previous year’s figures. The importance of keeping an up-to-date vulnerability management policy for remediating and controlling security vulnerabilities cannot be understated. 1. Overview: Summary of Vulnerability Management Policy Taking the time to give a short summary of the policy...
Vulnerability & Risk Management
PLEASE_READ_ME Ransomware Campaign Targeting MySQL Servers
Blog

Global Phishing Campaign Sets Sights on COVID-19 Cold Chain

By David Bisson on Thu, 12/03/2020
A global phishing campaign targeted organizations associated with the Coronavirus 2019 (COVID-19) cold chain. Discovered by IBM Security X-Force, the operation began in September 2020 by targeting multiple entities that support the Cold Chain Equipment Optimization Platform (CCEOP). A program created by Gavi, The Vaccine Alliance, CCEOP aims to...
How to Protect Your Business From Multi-Platform Malware Systems
Blog

How to Protect Your Business From Multi-Platform Malware Systems

By Guest Authors on Wed, 12/02/2020
The Lazarus Group (also known as Guardians of Peace or Whois) is a notorious cybercrime gang made up of unknown individuals. According to the United States Federal Bureau of Investigations, the group is a North Korean “state-sponsored hacking organization.” However, some believe that their connections to North Korea might be a false flag intending...