SANS ISC: Information Security News - Internet Security | DShield

• SANS Site Network
  • Current Site
  • Internet Storm Center
  • Other SANS Sites Help
  • Graduate Degree Programs
  • Security Training
  • Security Certification
  • Security Awareness Training
  • Penetration Testing
  • Industrial Control Systems
  • Cyber Defense Foundations
  • Computer Forensics
  • Software Security
  • Government OnSite Training

Information Security News

16 hours ago IGMP: Leaving a Host Group

As the final step of initialization, hginit calls hgjoin to place the host in the all-hosts group. Once a host has joined the all-hosts group, it will receive IGMP queries.

12 hours ago Akamai Launches New DNS Security Product

Content delivery network and cloud services provider Akamai announced on Tuesday the launch of a new product designed to protect enterprises against malware, phishing and data exfiltration attempts through the analysis of DNS requests.

9 hours ago Petya ransomware: Where it comes from and how to protect yourself

The attack highlights the growing danger of compromised third-party software being used to spread malware throughout firms.

1 day ago This Windows Defender bug was so gaping its PoC exploit had to be encrypted

Is there a fuzzer in the house?

5 hours ago UK's Metropolitan Police Still Using 10,000 Windows XP Computers

Legacy Windows XP systems used by public authorities in the UK remains a concern. The WannaCry outbreak last month followed by the current 'NotPetya' outbreak -- both using a vulnerability patched in newer versions of Windows, but initially unpatched in XP -- highlights the problem.

6 hours ago Windows 10 adds end-to-end security to the Fall Creators Update

Microsoft is ramping up Windows 10 security features, using cloud intelligence to better detect and respond to attacks. Here's how it could help your enterprise.

6 hours ago 'Shadow Brokers' Threaten to Dox Former NSA Hacker

The Shadow Brokers has sent out its first round of exploits and data as part of a recently announced monthly subscription service, and the group claims it has a significant number of subscribers.

7 hours ago 123-reg resolves secure database access snafu

Catches up with https everywhere memo

UK-based hosting and domains provider firm 123-reg has fixed an issue that meant access to some customers' databases ran over an unsecured link, creating a privacy risk in the process.

29 minutes ago Virus (cough, cough, Petya) goes postal at FedEx, shares halted

TNT Express systems blown up by, er, yeah, you get the idea

FedEx has suspended trading of its shares on the New York stock exchange after admitting that its subsidiary TNT Express has been hit by "an information system virus."

29 minutes ago Global Cybersecurity Summit 2017: Are cybersecurity dollars being spent effectively?

A panel of experts at the Global Cybersecurity Summit in Kiev, Ukraine discuss where to allocate the billions of dollars spent towards cybersecurity.

43 minutes ago Watchdog Agency: Many VA Security Weaknesses Persist

Among the Concerns: Making Sure All Devices 'Authorized'A watchdog agency's annual security review of the Department of Veterans Affairs, the nation's largest healthcare provider, makes 33 recommendations for how the VA can address a variety of continuing vulnerabilities, but only three of them are new. What are the latest concerns?

59 minutes ago Dell EMC Wins ISC Supercomputer Conference Vendor Showdown Track 2

For the past few years the International Supercomputing Conference (ISC) has held a vendor showdown. Last week, Dell EMC's Ed Turkel gave the winning presentation for the second of two tracks. This is significant praise from a very technical audience that expects both innovation and execution.

1 hour ago Time For Transportation & Logistics To Up Its Cybersecurity As Hackers Put It On Target List

Transportation and logistics companies are on hackers' radar, based on the recent ransomware attacks that disrupted shipping and ports. The industry, a prime target because of its global, pan-industry nature and increased digitization, needs to make cybersecurity more of a priority moving forward.

2 hours ago Report: Facebook's Content Rules 'Favor Elites And Government' Over Activists, People Of Color

A ProPublica investigation found that the site's methods for managing hate speech come down harder on minority groups than white posters of privilege.

2 hours ago 'Elsa' Tool Allows CIA to Locate Users via Wi-Fi

WikiLeaks has published a document detailing "Elsa," a tool allegedly used by the U.S. Central Intelligence Agency (CIA) to track people's locations via their laptop's Wi-Fi.

2 hours ago Most IoT devices are an attack waiting to happen, unless manufacturers update their kernels

The security of IoT devices rests squarely on the shoulders of manufacturers. Jack Wallen explains and offers up the one solution that could go a long way to securing IoT.

3 hours ago Teardown of 'NotPetya' Malware: Here's What We Know

Malicious Code Moves Laterally, Can Infect Fully Patched Windows PCsMalware known as NotPetya, SortaPetya or GoldenEye continues to spread globally, infecting endpoints via leaked Equation Group exploits as well as built-in Windows tools. Here's a roundup of what we know about the supposed ransomware and its spread so far.

4 hours ago Remote code execution flaws exposed in Kaspersky Server software

Core Security's advisory reveals a number of dangerous vulnerabilities in the antivirus server solution.

4 hours ago Petya ransomware attack: How many victims are there really?

A day on from from the initial reports of the ransomware attack, there are a number of different estimates of how many organisations have been infected.

5 hours ago How to Scale Your Vendor Risk Management Program

5 hours ago When two worlds collide

If any changes you make could potentially result in raw sewage being spilled into the water supply, you tend to be very, very cautious about making changes.

5 hours ago SAP tools for forecasting

When the wheels fall off the forecast process it is usually because some process elements are not very mature or broken.

7 hours ago Petya: The poison behind the latest ransomware attack

Unpatched Windows machines are getting hammered again by a new ransomware attacker.

9 hours ago CROSS APPLY -- Execution Plans

Slowness explained?