Web

Don’t Be The DNC: An Introduction to Enterprise Threat Hunting

In-brief: The New York Times expose on the hack of the Democratic National Committee is a case study in how not to respond to a cyber attack. In this video interview with Tim Bandos of Digital Guardian, we talk about how to do it right. His new ebook on hunting digital threats in the enterprise explains that incident response doesn’t have to cost a fortune. 

Shoddy Supply Chain Lurks Behind Mirai Botnet

In-brief: A common, China-based supplier of management software is the common thread that ties together the myriad digital video recorders, IP-based cameras and other devices that make up the Mirai botnet, according to analysis by the firm Flashpoint. 

A Year Later, Clearly “Blackhat SEO” is still Working

In-brief: Akamai lead researcher Or Katz shares longitudinal data showing that blackhat SEO campaigns designed to improve the ranking of web sites that collect cheating and marital infidelity stories have worked.

Updated: Vulnerability on 3m Systems Could Spread Ransomware To Schools

In-brief: Researchers at Cisco Systems said that they had identified more than 3 million “at risk” application servers running a vulnerable component that has been linked to ransomware infections. More than 1,600 of those systems have already been compromised, including many school libraries. Updated to add comment from Follett Corp. PFR 4/18/2016

Podcast: Security is a Four Letter Word on the Internet of Things

In-brief: In this podcast, Dennis Fisher of onthewire.io and I talk about securing the Internet of Things.