CoreTrace WhiteSpace

The Application Whitelisting and Security Weblog

Cyber thieves cracking banks’ two-factor authentication systems

According to Gartner’s Avivah Litan, even two-factor authentication systems can’t stop today’s cyber thieves. Over the past few months, banks around the world that rely on one-time-password authentication systems have been compromised by man-in-the-middle attacks, despite having two-factor security in place.

Thomas Claburn of InformationWeek writes in his article, “Strong Authentication Not Strong Enough,” that fraudsters are now using call forwarding to bypass security measures. ( Read More… )

Please use the comment form and leave your thoughts!

Web-based malware breaking traditional AV model

Web-based malware breaks traditional AV modelFor years, antivirus engines have been the primary defense against viruses, worms, Trojans, bots, and all other forms of malware designed to gain access to our emails, social networking sites, and corporate networks. While collecting their signatures from honeypots and gathering self-propagating threats has been useful in detecting malicious behavior in the past, things have changed. Today’s threats aren’t propagating. They’re using social engineering to lure their victims instead, thus breaking the traditional AV model. ( Read More… )

Please use the comment form and leave your thoughts!

A call for proactive security … I prefer real protection

A call for proactive security ... I prefer protectionWith industrialized hacking on the rise, organizations serious about protecting their data must take proactive measures if they expect to win the war against cybercriminals. That’s Imperva CTO Amichai Shulman’s straight-forward message to applications owners everywhere and lists some real trends that are threatening businesses everywhere. My take, this is a good list, but while proactive is good, protective is better.

In this week’s TechJournal South article, “Industrialized hacking tops five data security trends for 2010″, Mr. Shulman’s data security firm listed its top five security predictions for 2010: ( Read More… )

Please use the comment form and leave your thoughts!

Cisco’s 2009 Security Threat Report: We need a patch for the common user!

In its 2009 Annual Security Report, released today, Cisco Systems did an excellent job of explaining the 2009 threat landscape and outlining its expectations for 2010.

While the 40 page report covers many, many topics, there was one overarching theme that continued to bubble to the surface for me: there are no patches for people, and people are the primary vulnerability going forward.

Like it or not, our people (employees, contractors, partners, etc.) will continue accessing social media sites, cloud computing solutions and parts of the web that we know nothing about (the “Dark Web” as Cisco calls it). ( Read More… )

Most recent comment:   Stopping the payload key to thwarting targeted cyberattacks — CoreTrace WhiteSpace

[...] we pointed out in the blog, “Cisco’s 2009 Security Threat Report: We need a patch for the common user!” ...

Grid security still in national spotlight – Obama declares December Critical Infrastructure Protection Month

I recently wrote about a the 60 Minutes special on cyber security, and how a former chief of national intelligence didn’t believe the U.S. is prepared for a sophisticated attack that could bring down a major power grid. Opinions varied about the special itself, but the one thing people shouldn’t overlook is that cyber threats are real and that the infrastructure that protects our power grids needs to be defended.

The spotlight on this need continued last week when President Obama issued a statement saying December was Critical Infrastructure Protection (CIP) Month. Proclamations like these won’t change the world. Our systems won’t magically become secure, and most of the people responsible for these systems are already working hard to defend them.

That said, this proclamation adds to the increased awareness of the need for infrastructure protection against all attacks including cyber attacks. ( Read More… )

Most recent comment:   Toney Jennings

Thank you for the kind words, Cindy. I think the market has evolved--largely supported by social media--into one that ...