Xiaoqing Zheng, an engineer working for GE in Albany, was arrested and charged by the FBI for stealing around 20,000 files and providing them to the Chinese government. Interestingly, Zheng used steganography – hiding data in images – to remove the data off of GE’s network. The accused has been charged, but not convicted. Zheng […]
Read more
A new cryptomining malware, unofficially titled ZombieBoy, is active and exploiting numerous vulnerabilities in an effort to increase the likelihood of infection. Similar to WannaCry, it exploits CVE-2017-0143 and CVE-2017-0146, DoublePulsar and EternalBlue respectively. These two exploits look for open SMB (445) ports and exploits those that are unpatched. It also exploits CVE-2017-9073, which is […]
How do you know if you are hacked? That is one of the first five questions I ask when consulting a CISO or discussing Security On-Demand services with clients and customers. It’s a simple but important question that is much harder to answer than you might expect, especially if you have a young or immature […]
It has been nearly 3-months since GDPR went into effect. In some ways the impact has been notable for everyone as we have all seen a ton of “privacy policy” notifications to agree to. What may not be as noticeable is its impact on Security Operations Manange Service Providers. These businesses are designed to […]
If 2017 was the year of Ransomware, 2018 may well be known as the year of Cryptocurrency Miners. Crypto mining in and of itself is neither malicious nor a security event. However, the same tools and domains that any random individual may use to legitimately mine their own crypto are also being used by botnets […]
Phishing is one of the most effective ways for hackers to breach a network, steal personal data, or conduct identity theft. One would think that after so many years of phishing and spam emails coming at us and all the ways in which companies are training their staff on how to identify phishing that phishing […]
Insider threats continue to be the most dangerous threat to any organization. They are threats to internal data and intellectual property, network performance and security, and even the health and safety of the workforce. The veracity of this threat is exemplified by the FBI charging Joshua Schulte, a CIA engineer, as the individual behind the […]
If you’ve followed data breaches over the years you will notice that no industry is safe – which is no secret to anyone. But what may be surprising is the amount of Universities and local governments (including States) are targeted by hackers. Perceived of Lack of Security Being either government or non-profit (in the case […]
This morning US-CERT published a malware analysis report on a North Korean trojan they call “TYPEFRAME”. The report contains 11 malware samples that targeted Windows machines using executables and a macro-enabled Microsoft Word document. TYPEFRAME appears to have much of the expected functionality of an Advanced Persistent Threat type malware; including connecting to C2 nodes […]
Everyone uses Email; business and society can not seemingly function without it. Like most other communications technology, Email can be sent unsecured or encrypted. As is no secret, people use encrypted email to send information to others that needs to be kept private; away from the prying eyes of the government, public, or anyone else. […]
