Threat Level: green Handler on Duty: Xavier Mertens

SANS ISC: Internet Security | DShield SANS ISC InfoSec Forums

Participate: Learn more about our honeypot network

Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!
Sophos 2012 Security Threat Report

Last week Sophos released it 2012 Security Threat Report which highlighted some key finding from 2011:

- Smartphones and tablets causing significant security challenges
- Major data breaches and targeted attacks on high-profile companies and agencies
- Hacktivism -> A shift from hacking for money to hacking as a form of protest or to prove a point
- Conficker worm is still the most commonly encountered pieces of malicious software seen is Sophos customers
- Fake antivirus software is still the most common type of malware but in second half of the year appears to be on the decline
- Spearphishing attacks on the rise

Despite all this, some successes "On March 16, 2011 a coordinated effort known as Operation b107 between Microsoft, FireEye, U.S. federal law enforcement agents and the University of Washington knocked Rustock offline." [1] The entire report available here.

Handler Mark published a diary on some of the things to take in consideration "When your service provider has a breach". [3]


Data breach diaries reported by ISC in 2011:

[2] RSA Breach
[3] Lockheed Marting
[4] Sega Pass
[5] SonyPictures
[6] DigiNotar SSL Breach (result = bankruptcy)
[7] GlobalSign
[8] Stratfor Global Intelligence


Guy Bruneau IPSS Inc. gbruneau at isc dot sans dot edu


515 Posts
ISC Handler
Feb 3rd 2012

Sign Up for Free or Log In to start participating in the conversation!