CoreTrace WhiteSpace

The Application Whitelisting and Security Weblog

Top endpoint security stories for April 2010 – April sees cyber crime in full bloom

April showers may bring May flowers, but the Internet also saw something else in full bloom — cyber crime. Computer systems around the globe experienced a variety of problems in April ranging from more fake antivirus software to malicious code that avoids detection from search engine Web crawlers. But none were as big as a well-publicized faulty security update that crashed thousands of computers and became a public relations nightmare for one of the world’s top security software makers. Here were some of the top security stories from April 2010: Continue reading this post…

Conficker expected to continue its wrath on security defenses

Despite consorted efforts to detect and block one of the world’s most dangerous forms of malware, security experts predict the Conficker worm will continue to deactivate security defenses and wreck havoc on computer networks throughout 2010. That’s bad news for security professionals who are actively doing everything they can to protect their networks from more harmful botnets and malware. Continue reading this post…

Top Endpoint Security Stories for December 2009

As we close the door on another year of protecting our networks from the never-ending security threats, I hope the information I’ve provided in this blog has been valuable in your ongoing efforts to make your enterprise more secure. December was a month with a number of articles focused on the larger trends in security in 2009. Continue reading this post…

Web-based malware breaking traditional AV model

Web-based malware breaks traditional AV modelFor years, antivirus engines have been the primary defense against viruses, worms, Trojans, bots, and all other forms of malware designed to gain access to our emails, social networking sites, and corporate networks. While collecting their signatures from honeypots and gathering self-propagating threats has been useful in detecting malicious behavior in the past, things have changed. Today’s threats aren’t propagating. They’re using social engineering to lure their victims instead, thus breaking the traditional AV model. Continue reading this post…

A call for proactive security … I prefer real protection

A call for proactive security ... I prefer protectionWith industrialized hacking on the rise, organizations serious about protecting their data must take proactive measures if they expect to win the war against cybercriminals. That’s Imperva CTO Amichai Shulman’s straight-forward message to applications owners everywhere and lists some real trends that are threatening businesses everywhere. My take, this is a good list, but while proactive is good, protective is better.

In this week’s TechJournal South article, “Industrialized hacking tops five data security trends for 2010″, Mr. Shulman’s data security firm listed its top five security predictions for 2010: Continue reading this post…