Microsegmentation is a way to create secure zones in data centers and cloud deployments that allow you to isolate workloads and protect them individually. Microsegmentation is a method of creating secure zones in data centers and cloud deployments that allows companies to isolate workloads from one another and secure them individually. It’s aimed at making network security more granular. Microsegmentation ...
Read More »Author Archives: firewalltraining
Risking security for an easy life: people’s password dilemmas revealed
Today we log into online accounts all the time – from transferring money between bank accounts, to simply ordering some shopping, checking the weather, or booking a taxi on a night out. But what if suddenly you can’t log into the account you need, when you need it? What if you get the dreaded ‘password error’ message? Do you ...
Read More »Ransomware’ Joins the Hallowed Pages of the OED
We all know that the last year has been just the bees-knees for ransomware operators; it’s just the tops, really, between the world-dominating success of WannaCry and NotPetya, the pioneering of ransomware-as-a-service offerings and the development of truly horrific strains of the stuff, like BrickerBot (tagline: The permanent ransomware!). So bad actors already have much to celebrate as they count the ...
Read More »Cybercriminals exploiting traditional trust measures for compromises, study
Cyber-criminals are exploiting traditional measures of trust to gain a foothold on users systems by compromising trusted sites via background initiated requests, using phishing sites, and typo-squatting. While many companies have used categories such as Business and Economy, Shopping, News and Media, and Malware, to help set security policy researchers are warning it’s no longer advisable to consider any category ...
Read More »Bad Rabbit: New Ransomware Attack Rapidly Spreading Across Europe
A new widespread ransomware attack is spreading like wildfire around Europe and has already affected over 200 major organisations, primarily in Russia, Ukraine, Turkey and Germany, in the past few hours. Dubbed “Bad Rabbit,” is reportedly a new Petya-like targeted ransomware attack against corporate networks, demanding 0.05 bitcoin (~ $285) as ransom from victims to unlock their systems. According to ...
Read More »New Rapidly-Growing IoT Botnet Threatens to Take Down the Internet
Just a year after Mirai—biggest IoT-based malware that caused vast Internet outages by launching massive DDoS attacks—completed its first anniversary, security researchers are now warning of a brand new rapidly growing IoT botnet. Dubbed ‘IoT_reaper,’ first spotted in September by researchers at firm Qihoo 360, the new malware no longer depends on cracking weak passwords; instead, it exploits vulnerabilities in various IoT devices and enslaves ...
Read More »WebRTC Vulnerability leaks Real IP Addresses of VPN Users
An extremely critical vulnerability has recently been discovered in WebRTC (Web Real-Time Communication), an open-source standard that enables the browsers to make voice or video calls without needing any plug-ins. AFFECTED PRODUCTS Late last month, security researchers revealed a massive security flaw that enables website owner to easily see the real IP addresses of users through WebRTC, even if they are using ...
Read More »Hackers Use New Flash Zero-Day Exploit to Distribute FinFisher Spyware
FinSpy—the infamous surveillance malware is back and infecting high-profile targets using a new Adobe Flash zero-day exploit delivered through Microsoft Office documents. Security researchers from Kaspersky Labs have discovered a new zero-day remote code execution vulnerability in Adobe Flash, which was being actively exploited in the wild by a group of advanced persistent threat actors, known as BlackOasis. The critical type confusion vulnerability, ...
Read More »Fbi Arrests A Cyberstalker After Shady “No-Logs” VPN Provider Shared User Logs
FBI recently arrested a psycho cyber stalker with the help of a popular VPN service and this case apparently exposed the company’s lies about the “no logs” policy. Taking down cyber stalkers and criminals is definitely a good thing, and the FBI has truly done a great job, but the VPN company whose first line of the privacy policy is—“We ...
Read More »fake Digital Certificates Found in the Wild While Observing Facebook SSL Connections
Visiting a website certified with an SSL certificate doesn’t mean that the website is not bogus. Secure Sockets Layer (SSL) protect the web users in two ways, it uses public key encryption to encrypt sensitive information between a user’s computer and a website, such as usernames, passwords, or credit card numbers and also verify the identity of websites. Today hackers ...
Read More »