Page 27 - Secure Development News Today

Joseph Blankenship, vice president, research director, security and risk, Forrester Organizations must adopt a new approach to security automation thats tailor-made to address todays threats, says Joseph Blankenship, a vice president and research director at Forrester. SIEM tools provide SOC analysts with limited contextualized data as well as a disproportionate amount of false positives, he says. So the analysts need to use security analytics and other tools. “One of the things that we ...

Israel’s cyber ecosystem starts with conscripts in specialist military units. Picture Israel Defense Force Israels cybersecurity sector continues to thrive, with investments pouring in and exports increasing, according to the Israel National Cyber Directorate, the government agency responsible for advancing the county’s cyber capabilities and ensuring national cyber defense. The directorate reports that pre-IPO investments in domestic cybersecurity firms totaled $2.9 billion in 2020, up 70...

Get Permission Threat actors are exploiting vulnerable Microsoft Remote Desktop Protocol servers to amplify various distributed denial-of-service attacks, according to a report from application and network performance firm Netscout. Netscout researchers have identified about 33,000 vulnerable Microsoft RDP servers that could be abused by threat actors to boost their DDoS attacks. RDP is a proprietary Microsoft communications protocol that system administrators and employees use to remotely con...

GovInfoSecurity Compliance gsuparna) • January 11, 2021     Adam Turteltaub, chief engagement and strategy officer at the Society of Corporate Compliance and Ethics Adam Turteltaub, chief engagement and strategy officer at the Society of Corporate Compliance and Ethics, says compliance teams should create a dashboard of data that will help keep track of actions taken by staff members who are working remotely. “...

Diagram shows how ransomware operators incorporate the SystemBC malware into an attack. (Source: Sophos) Several recent ransomware attacks, including those involving Ryuk and Egregor, have used a commodity malware variant called SystemBC as a backdoor, security firm Sophos reports. First uncovered by security firm Proofpoint in August 2019, SystemBC works as a network proxy for concealed communications and as a remote access Trojan, or RAT, that allows threat actors to deploy additional command...

Andrew Levine (left), partner, Debevoise & Plimpton LLP; Vincent Walden, managing director, Alvarez and Marsal To improve compliance efforts, organizations can turn to a number of technologies, including data analytics. Vincent Walden, managing director at Alvarez and Marsal, and Andrew Levine, partner, Debevoise & Plimpton LLP, share their views on making the most of automation and integration tools. “The pandemic saw increased use of data analytics for data monitoring by compliance teams,...

LinkedIn From heightened risks to increased regulations, senior leaders at all levels are pressured to improve their organizations risk management capabilities. But no one is showing them how - until now. Learn the fundamentals of developing a risk management program from the man who wrote the book on the topic: Ron Ross, computer scientist for the National Institute of Standards and ...