CoreTrace WhiteSpace

The Application Whitelisting and Security Weblog

Once again, we agree with McAfee… to a point

I recently came across an interesting article that struck a cord with me on many different levels. In the story, “McAfee CEO stresses mobility at T.O. event,” I once again agree with a number of points Dave DeWalt made at a partner summit in Toronto, with one big exception.

First, I couldn’t agree more with his general outlook:

  • Mobile devices are the wave of the future
  • Microsoft is not going to be the end-all, be-all dominant player in the corporate environment
  • Whitelisting and blacklisting in combination is the way the security world is going
  • Blacklisting is moving to the cloud rather than directly on every single device Continue reading this post…

How to stop 60,000 new threats each day… without knowing them or killing performance.

It’s really puzzling to me to think about how today’s IT security professionals are trying to stop cyber threats. I mean, why go through the trouble of detecting 60,000 newly discovered threats each day, not to mention endure the performance impact that scanning has on a system, when you can quickly and automatically identify the few dozen applications that you would like to run on your endpoint computers?

In this week’s release of the McAfee Threats Report: Third Quarter 2010, the security software maker claims that malware reached an all-time high, averaging 60,000 new threats each day in the third quarter. That number has nearly quadrupled since 2007. Continue reading this post…

Top Endpoint Security stories for October 2010 — If cyber threats are up, then why are companies’ security budgets possibly going down?

October saw another fake antivirus alert make the rounds, only this time masquerading Microsoft Security Essentials. This trend, along with more information about the Stuxnet worm, are making security experts wonder if these are signs of things to come. So, with cyber threats up and growing in severity, why then are security budgets down? According to McAfee, this is the paradox facing the IT security industry. Here are some of the top endpoint security stories of October 2010. Continue reading this post…

Protect your endpoint systems from Stuxnet with CoreTrace BOUNCER

I just posted a video walking through the stuxnet exploit and how it can impact endpoints simply by viewing the site and how a strong application whitelisting solution like BOUNCER stops this.

This attack is a good illustration of a vulnerability that affects all versions of Windows and was specifically targeting SCADA environments. More specifically it affects any systems that use shortcuts.

While antivirus companies scramble for a fix to the latest threat of the day, it seems to make more sense to look for security solutions that defend against these sorts of attacks proactively.




Top endpoint security stories for April 2010 – April sees cyber crime in full bloom

April showers may bring May flowers, but the Internet also saw something else in full bloom — cyber crime. Computer systems around the globe experienced a variety of problems in April ranging from more fake antivirus software to malicious code that avoids detection from search engine Web crawlers. But none were as big as a well-publicized faulty security update that crashed thousands of computers and became a public relations nightmare for one of the world’s top security software makers. Here were some of the top security stories from April 2010: Continue reading this post…