Over the past few years, the Zeus virus has infected millions of financial systems worldwide, capturing account credentials that cybercriminals use to gain access to corporate networks and steal sensitive data. While there have been competitive programs designed to dethrone Zeus and remove the widespread malware from infected systems, a newly announced malicious software is threatening to one-up the infamous do-it-yourself banking Trojan. Continue reading this post…
While speculations about the Intel/McAfee deal continued to reverberate throughout the industry, new findings about the intentions of the infamous Stuxnet worm dominated the security headlines in September. Security professionals also ran into an old nemesis when the “Here you have” worm, a throwback email virus, resurfaced and surprisingly infected some the world’s biggest multi-national companies. Why weren’t their networks protected from such an attack? That’s a good question. Here are some of the top endpoint security stories for September 2010. Continue reading this post…
You’ve all been there before. You’re having dinner with friends and out come the baby pictures. Inevitably, you are listening to a set of parents who are gushing about the fact that their child is the next Fabio or Christy Brinkley and THEN you see the picture…
Well, I find myself in the position today of being the doting parent. Only in this case, the “child” is a major overhaul of our flagship product, BOUNCER V6.0. With this new release the “child” has grown into an adult. You’ll have to pardon my metaphor here, but I believe building a product is, in many ways, like watching your kid grow up. With V6, we’re realizing the vision we developed for the product when I joined CoreTrace more than 3 years ago. Continue reading this post…
On July 13, 2010 Microsoft ended its support of Windows 2000-based systems. This week, Gartner Analyst Neil MacDonald detailed the options available to organizations who may still be using Windows 2000:
- Migrate to a newer and supported operating system
- Pay Microsoft for a Custom Support Agreement (CSA), running $50,000 per quarter
- Pay Microsoft for Custom Support Essentials (CSE), to receive critical security fixes
- Continue using Windows 2000-based systems without new patches
For many organizations, the first three options are time intensive and extremely expensive, but they feel concerned about running legacy systems without ongoing security patching. If your organization feels the need to continue to run Windows 2000, application whitelisting, such as our CoreTrace BOUNCER solution, may be exactly what your company needs. Continue reading this post…
For organizations that run the nation’s most critical infrastructures, it’s important to understand that today’s targeted cyber attacks are designed to carry out any number of activities including monitoring network processes to bringing down the grid. Just because hackers haven’t carried out an attack doesn’t mean malware isn’t already resident in a system waiting for the most opportune time to launch.
In the article, “Attackers can take out critical infrastructure, but profit lies elsewhere, researcher says,” Jason Larson, a security researcher at the Idaho National Laboratory, said there’s plenty of evidence that hackers have already infiltrated control systems that run power generation plants, gas and oil refineries, and other chemical factories, but so far their activity is observational. Continue reading this post…