Navigation section
incident response
-
TA17-164A: HIDDEN COBRA – North Korea’s DDoS Botnet Infrastructure
Original release date: June 13, 2017 Systems Affected Networked Systems Overview This joint Technical Alert (TA) is the result of analytic efforts between the Department of Homeland Security (DHS) and the Federal Bureau of Investigation (FBI). This alert provides technical details on the...- News
- Thread
- adversaries analysis botnet cve cyber operations cybersecurity data exfiltration ddos deltacharlie dhs fbi hidden cobra incident response malware mitigation network security north korea security practices threat detection vulnerabilities
- Replies: 0
- Forum: Security Alerts
-
TA17-132A: Indicators Associated With WannaCry Ransomware
Original release date: May 12, 2017 | Last revised: May 13, 2017 Systems Affected Microsoft Windows operating systems Overview According to numerous open-source reports, a widespread ransomware campaign is affecting various organizations with reports of tens of thousands of infections in as...- News
- Thread
- backups cybersecurity data loss dhs encryption fbi incident response malware ms17-010 patch phishing prevention ransomware remediation smb threats vulnerability wannacry windows windows 10
- Replies: 0
- Forum: Security Alerts
-
K
Windows Server Files Auditing - Tracking File Tampering/ Data Loss prevention
We anticipate threats like files being deleted from servers by disgruntled employees. 1. Can someone suggest what preventive measures that can be implemented ? (DLP implementation is in pipeline, but would like to see if there are alternate measures) 2. If somehow files are deleted, we would...- karthikaravind
- Thread
- access control audit events data loss prevention data security dlp employee threats environment file auditing file deletion file tampering incident response it governance it security log monitoring monitoring tools preventive measures server 2008 server 2012 server management
- Replies: 3
- Forum: Windows Security
-
VIDEO Announcing Windows Defender Advanced Threat Protection
We designed Windows 10 from the very beginning to be our most secure platform ever. With features like Credential Guard, Device Guard, Windows Hello, and Enterprise Data Protection, Windows 10 offers unique defenses from attacks. Windows Defender, our free anti-malware service, provides...- News
- Thread
- advanced threat protection attack response behavioral sensors breach detection cloud security cybersecurity data protection defender endpoint security enterprise incident response infrastructure it security malware security threat analytics threat intelligence update user feedback windows 10
- Replies: 0
- Forum: Live RSS Feeds
-
TA15-314A: Web Shells – Threat Awareness and Guidance
Original release date: November 10, 2015 Systems Affected Web servers that allow web shells Overview This alert describes the frequent use of web shells as an exploitation vector. Web shells can be used to obtain unauthorized access and can lead to wider network compromise. This alert...- News
- Thread
- application security asp command control cyber security data exfiltration detection exploitation incident response malware mitigation network compromise perl php python remote access security practices threat updates vulnerabilities web shells
- Replies: 0
- Forum: Security Alerts
-
August 2015 Security Update Release Summary
Today we released security updates to provide protections against malicious attackers. As a best practice, we encourage customers to apply security updates as soon as they are released. More information about this month’s security updates and Link Removed can be found in the Security TechNet...- News
- Thread
- august 2015 best practices cybersecurity important updates incident response malware msrc patch management protection security software updates system security technet threat mitigation update user safety vulnerability windows update
- Replies: 0
- Forum: Security Alerts
-
TA15-119A: Top 30 Targeted High Risk Vulnerabilities
Original release date: April 29, 2015 Systems Affected Systems running unpatched software from Adobe, Microsoft, Oracle, or OpenSSL. Overview Cyber threat actors continue to exploit unpatched software to conduct attacks against critical infrastructure organizations. As many as 85 percent of...- News
- Thread
- administrative privileges adobe attack vectors cybersecurity impact incident response malware microsoft mitigation network security openssl oracle patching prevention restoration sensitive information software threats vulnerabilities whitelisting
- Replies: 0
- Forum: Security Alerts
-
Driving a Collectively Stronger Security Community with Microsoft Interflow
Today, Microsoft is pleased to announce the private preview of Link Removed, a security and threat information exchange platform for analysts and researchers working in cybersecurity. Interflow uses industry specifications to create an automated, machine-readable feed of threat and security...- News
- Thread
- automated systems cloud computing collaboration cost management cybersecurity cybox data exchange data feeds incident response interflow mapp microsoft network security private preview security community security software software vulnerability stix taxii threats
- Replies: 0
- Forum: Security Alerts
-
MSRC looks back at ten years, and the February 2012 bulletins
Ever wondered where Update Tuesday bulletins come from, or what it’s like around Microsoft when a serious information-security situation arises? Or wondered who precisely is responsible for getting your monthly bulletin releases out the door? Update Tuesday, which brings us here today, is...- News
- Thread
- bulletins c runtime collaboration cumulative update deployment ecosystem exploitability february 2012 incident response internet explorer microsoft msrc remote code execution research security technet trustworthy computing update vulnerabilities webcast
- Replies: 0
- Forum: Security Alerts
-
MS10-072 - Important: Vulnerabilities in SafeHTML Could Allow Information Disclosure (2412048)
Bulletin Severity Rating:Important - This security update resolves one publicly disclosed vulnerability and one privately reported vulnerability in Microsoft SharePoint and Windows SharePoint Services. The vulnerabilities could allow information disclosure if an attacker submits specially...- News
- Thread
- attack bulletin cybersecurity incident response information disclosure microsoft ms10-072 patch privately reported publicly disclosed safehtml script injection security update sharepoint target site threat vulnerability web security windows services
- Replies: 0
- Forum: Security Alerts
-
VIDEO 7 Things Every CEO Should Know About Information Security
- whoosh
- Thread
- ceo compliance cybersecurity data protection incident response information security leadership privacy risk management threats
- Replies: 1
- Forum: Windows Security
-
Windows 7 Computer security
http://en.wikipedia.org/wiki/Computer_security The technologies of computer security are based on Link Removed due to 404 Error. As security is not necessarily the primary goal of most computer applications, designing a program with security in mind often imposes restrictions on that program's...- whoosh
- Thread
- access control audit trails cascading security computer security defense in depth design principles failure modes formal verification incident response layered architecture privilege management risk management security measures security policy security strategies security techniques software architecture subsystem design system integrity trust models
- Replies: 0
- Forum: Windows Security