IPv6 router in the crosshairs

Easy-to-use attack exploits IPv6 traffic on IPv4 networks

Setting up a rogue IPv6 router on an IPv4 network gives attackers access to the host's Internet traffic, one more reason to enable IPv6 rather than waiting for an attacker to do it for you.

privguard

Privilege Guard watches those who watch over the network

The product extends privilege management to admins, giving them enough control to do their jobs but restricting them to authorized tasks.

cracked phone

Phun with Phones: 3 ways to phreak Android, iOS

The convergence of computing and mobile telephony has made smartphones the new frontier of cybersecurity, with a host of new vulnerability research presented at this year’s Black Hat Briefings.

comfoo

Reverse engineering reveals inner workings of Comfoo Trojan

Researchers at Dell SecureWorks were able to monitor the command and control system of the persistent RAT, which was used in the 2010 RSA breach that also compromised DOD contractors and is still in wide use.

Ants on a jar of honey

Industrial control 'honeypots' show systems are under attack

Recent research by Trend Micro shows ICS networks are frequently attacked -- and not by accident.

Savannah

Energy lab's wireless system secure enough for classified data

The Savannah River National Lab’s prototype hardware, designed in collaboration with NSA, uses Suite B cryptography for a system that could be adapted for other uses.

Gen. Keith Alexander

NSA's Alexander to Black Hats: Trust us, we need you

Gen. Keith Alexander traveled to the "technical center of gravity" instead of appearing before Congress to plead his case that surveillance programs are targeted, limited and under control.

QRadar

IBM adds vulnerability tool to security arsenal

IBM says its QRadar Vulnerability Manager (QVM) provides security managers a single view of vulnerability data aggregated from network, endpoint, database and application scanners.

encryption

After XKeyscore, is encryption the next big thing?

The latest reports on the NSA's surveillance could raise awareness on a practice that is regularly recommended but frequently ignored.

GPS spoofing

Yacht hijacking shows the potential power of GPS spoofing

Last year, a University of Texas professor's team took control of a drone in flight. This year, it was a super yacht on the Ionian Sea. But they’re also evaluating ways to prevent spoofing.

e-authentication

E-authentication: What IT managers will be focusing on over the next 18 months

The moves to cloud computing and shared databases are among the factors driving e-authentication.

securlert

Seculert upgrades in-cloud security with radar and a sandbox

Seculert's cloud-based advanced threat protection solution features Elastic Sandbox technology, an updated API and a new user interface.

Topic Resources

  • Increase Data Security through Your Print Solution

    You’ve consolidated your desktops with virtualization and moved your data to the cloud. What else can you do to obtain additional costs savings and increase security while keeping your network flexible? Connect print and digital information from across your organization with the people who need it, exactly when they need it. Join this webcast to learn how security software and printing solutions work together to eliminate extraneous printers at multiple sensitivity levels, allowing organizations to recognize significant savings from reduced hardware, space, power, support and supplies.

  • Continuous Monitoring: Elevating Cybersecurity in State and Local Government

    State and local agencies are not required to comply with federal policies related to continuous monitoring and NIST's Cybersecurity Framework, but they would be better off if they did. Whether it is required or not, the concept of continuous monitoring has been proven to raise the level of cybersecurity when implemented appropriately and with the right tools. Join this webcast to learn more about how your agency could benefit from continuous monitoring and NIST guidance.

  • All About Self-Encrypting Drives

    With data security risks on the rise, an influx of government mandates and regulations for securing data have been implemented and are becoming the norm. Eliminating exposure of private data is now simply viewed as a mandatory and sound business practice. To avoid the high costs associated with these types of data compromises, organizations must put in place a comprehensive security strategy. Read this whitepaper to learn how self-encryption is achieving this initiative.

  • The Rising Threat of Enterprise Cybercrime

    Cybercriminals are leveraging vulnerabilities of the Internet, browsers, operating systems, and applications to secretly and proficiently gain access to information assets. Compromising employee endpoints with malware has become the preferred method; a far simpler path into the network than a direct network attack. Agencies need to recognize and address this growing danger.