CoreTrace WhiteSpace

The Application Whitelisting and Security Weblog

The Internet’s Top Botnet, Zeus, Can Rob You Blind

The Internet's Top Botnet, Zeus, Can Rob You BlindZeus isn’t just the ruler of Mount Olympia, for now Zeus is also atop the botnet world.

As I mentioned in my previous blog, the Zeus family of malware is currently the number one botnet online. According to a recent article, “Zeus Trojan moving past anti-virus protections”, this particular type of malware, which targets bank-related information, has infected 3.6 million PC’s in the United States alone. What makes this malicious code so successful is its ability to bypass even the latest anti-virus software without even knowing it. Continue reading this post…

Cisco’s 2009 Security Threat Report: We need a patch for the common user!

In its 2009 Annual Security Report, released today, Cisco Systems did an excellent job of explaining the 2009 threat landscape and outlining its expectations for 2010.

While the 40 page report covers many, many topics, there was one overarching theme that continued to bubble to the surface for me: there are no patches for people, and people are the primary vulnerability going forward.

Like it or not, our people (employees, contractors, partners, etc.) will continue accessing social media sites, cloud computing solutions and parts of the web that we know nothing about (the “Dark Web” as Cisco calls it). Continue reading this post…

GlobalSCAPE announces investment term sheet with CoreTrace

Earlier today, GlobalSCAPE, Inc. (NYSE Amex: GSB) announced that it has entered into an investment term sheet with CoreTrace. Subject to definitive agreements, GlobalSCAPE will invest in CoreTrace in return for an equity position and a seat on the CoreTrace board of directors.

In the announcement, Jim Morris, president and CEO of GlobalSCAPE, explained part of his company’s interest in CoreTrace:

“Because malware has proliferated exponentially, traditional solutions are increasingly stressed beyond their ability to keep pace with the virus of the day. The CoreTrace whitelisting technology has tremendous potential, similar to the early days of the anti-virus market.” Continue reading this post…

Application whitelisting is coming … are you ready?

Application whitelisting is coming ... are you ready?Sometime in 2010 virtually every new Windows PC will now come with a version of application whitelisting installed in the form of AppLocker. It’s time to start thinking about how application whitelisting will change the way you approach desktop security and how you intend to use whitelisting to protect your critical IT assets. In preparation for this shift, I thought it would be good to give some food for thought about what changes and what considerations you should give to your ultimate whitelisting strategy.

First, let’s look at what changes. Continue reading this post…

Microsoft’s Windows 7 AppLocker, a watershed moment for application whitelisting

From WikiAnswers:

Q: What is a watershed moment?
A: A critical turning point.

Microsoft’s decision to include AppLocker, a technology for application whitelisting, in Windows 7 is no less than a critical turning point for the future of endpoint security. You might think it strange that the CEO of an application whitelisting company is saying such a thing about a free software offering that many might see as a competitor. Not so.

AppLocker is an incredibly important step forward toward the realization that application whitelisting is the future cornerstone of a sound endpoint security strategy. Today, Roger Grimes, product reviewer for InfoWorld, wrote reviews for the leaders in application whitelisting, including a comprehensive look at CoreTrace. The results are impressive. Roger writes: Continue reading this post…