mitigation

  1. AA19-024A: DNS Infrastructure Hijacking Campaign

    Original release date: January 24, 2019 Summary The National Cybersecurity and Communications Integration Center (NCCIC), part of the Cybersecurity and Infrastructure Security Agency (CISA), is aware of a global Domain Name System (DNS) infrastructure hijacking campaign. Using compromised...
    • News
    • Thread
    • attack best practices campaign cisa credentials cybersecurity dns encryption hijacking infrastructure inspection malware manipulation mitigation network phishing security threat traffic validation
    • Replies: 0
    • Forum: Security Alerts

  2. Standing behind “MSRC Listens”

    Last week at BlueHat’s “MSRC Listens” session, I took the stage with Mechele Gruhn, manager of the Vulnerability Response PM team, to explain how MSRC is changing our communication, workflows, and tooling to deliver an improved user experience for our partners in the security research community...
    • News
    • Thread
    • bluehat bounty bounty terms cfg change logging communication community programs evaluation mitigation msrc research security submission tooling transparency user experience vulnerability workflows
    • Replies: 0
    • Forum: Security Alerts

  3. Intel Foreshadow vulnerability

    Intel has revealed another major security vulnerability in its CPUs, similar to the Meltdown/Spectre vulnerabilities revealed earlier this year. It is understood that at this time there are no current exploits and further information can be found on the released Link Removed . AMD chips are...
    • kemical
    • Thread
    • amd cache timing cpus cybersecurity data cache exploits hardware information disclosure intel l1tf meltdown mitigation processor core security side-channel spectre speculative execution technology vulnerability
    • Replies: 1
    • Forum: Windows Hardware

  4. TA18-141A: Side-Channel Vulnerability Variants 3a and 4

    Original release date: May 21, 2018 Systems Affected CPU hardware implementations Overview On May 21, 2018, new variants—known as 3A and 4—of the side-channel central processing unit (CPU) hardware vulnerability were Link Removed. These variants can allow an attacker to obtain access to...
    • News
    • Thread
    • attack cpu cve-2017-5715 cve-2017-5753 cve-2017-5754 cve-2018-3639 cve-2018-3640 exfiltration hardware impact meltdown mitigation patches security side-channel software spectre variant 3a variant 4 vulnerability
    • Replies: 0
    • Forum: Security Alerts

  5. How do you balance privacy and security

    For a while now I've been trying to avoid Google and Microsoft services as much as possible. Yet we all know that's not probable if you want to function normally in today's world. Well I've kind of hit a point where the geeky side of me has won over the cautious once bitten twice from the...
    • Axel PC
    • Thread
    • best practices chrome community discussion concerns data protection digital life features geek culture google information sharing microsoft mitigation online safety privacy security service usage social apps tech balance user advice windows forum
    • Replies: 8
    • Forum: Windows Security

  6. TA18-106A: Russian State-Sponsored Cyber Actors Targeting Network Infrastructure Devices

    Original release date: April 16, 2018 Systems Affected Generic Routing Encapsulation (GRE) Enabled Devices Cisco Smart Install (SMI) Enabled Devices Simple Network Management Protocol (SNMP) Enabled Network Devices Overview This joint Technical Alert (TA) is the result of analytic efforts...
    • News
    • Thread
    • command and control critical infrastructure cybersecurity dhs espionage exploitation fbi hacking indicators of compromise infrastructure international security legacy protocols malware mitigation network devices russian actors smart install snmp telnet tftp
    • Replies: 0
    • Forum: Security Alerts

  7. Speculative Execution Bounty Launch

    Today, Microsoft is announcing the launch of a limited-time bounty program for speculative execution side channel vulnerabilities. This new class of vulnerabilities was disclosed in January 2018 and represented a major advancement in the research in this field. In recognition of that threat...
    • News
    • Thread
    • attack methods azure bounty program bounty tiers coordinated disclosure cve-2017-5715 cve-2017-5753 microsoft mitigation payout research security research speculative execution threat environment tier 1 tier 2 tier 3 tier 4 vulnerabilities windows 10
    • Replies: 0
    • Forum: Security Alerts

  8. KB4090007: Intel microcode updates

    Intel release updates for Spectre on 6th generation (Skylake) chips: Intel Link Removed that they have completed their validations and started to release microcode for newer CPU platforms around Spectre Variant 2 (CVE 2017-5715 (“Branch Target Injection”)). This update includes microcode...
    • kemical
    • Thread
    • cpus cve 2017-5715 device manufacturer fall creators update guidance intel microcode mitigation patch registry rtm security skylake spectre speculative execution update update catalog vulnerabilities windows 10 windows server
    • Replies: 0
    • Forum: Software Updates

  9. TA17-318B: HIDDEN COBRA – North Korean Trojan: Volgmer

    Original release date: November 14, 2017 Systems Affected Network systems Overview This joint Technical Alert (TA) is the result of analytic efforts between the Department of Homeland Security (DHS) and the Federal Bureau of Investigation (FBI). Working with U.S. government partners, DHS...
    • News
    • Thread
    • backdoor trojan botnet cybersecurity dhs fbi hidden cobra incident response indicators of compromise ip addresses malicious activity malware malware analysis mitigation network defense network security north korea spear phishing trojan user-agent volgmer
    • Replies: 0
    • Forum: Security Alerts

  10. TA17-164A: HIDDEN COBRA – North Korea’s DDoS Botnet Infrastructure

    Original release date: June 13, 2017 | Last revised: July 07, 2017 Systems Affected Networked Systems Overview This joint Technical Alert (TA) is the result of analytic efforts between the Department of Homeland Security (DHS) and the Federal Bureau of Investigation (FBI). This alert...
    • News
    • Thread
    • application vulnerabilities botnet cyber attacks cybersecurity ddos deltacharlie dhs fbi hidden cobra incident response indicators of compromise ip addresses lazarus group malware mitigation network security north korea security advisory software patch threat intelligence
    • Replies: 0
    • Forum: Security Alerts

  11. TA17-163A: CrashOverride Malware

    Original release date: June 12, 2017 | Last revised: July 27, 2017 Systems Affected Industrial Control Systems Overview The National Cybersecurity and Communications Integration Center (NCCIC) is aware of public reports from ESET and Dragos outlining a new, highly capable Industrial...
    • News
    • Thread
    • attack authentication authorization crashoverride cybersecurity detection exploitation ics industrial control systems infrastructure malware mitigation monitoring nccic remote access response risk evaluation threat ttps vulnerability
    • Replies: 0
    • Forum: Security Alerts

  12. TA17-156A: Reducing the Risk of SNMP Abuse

    Original release date: June 05, 2017 Systems Affected SNMP enabled devices Overview The Simple Network Management Protocol (SNMP) may be abused to gain unauthorized access to network devices. SNMP provides a standardized framework for a common language that is used for monitoring and...
    • News
    • Thread
    • access control authentication best practices community strings configuration encryption management mib mitigation network devices network security protocols protocols best practices remote attacks security recommendations snmp snmpv3 udp unauthorized access vulnerability
    • Replies: 0
    • Forum: Security Alerts

  13. Announcing the Windows Bounty Program

    Windows 10 represents the best and newest in our strong commitment to security with world-class mitigations. One of Microsoft’s longstanding strategies toward improving software security involves investing in defensive technologies that make it difficult and costly for attackers to find, exploit...
    • News
    • Thread
    • application guard bounty program bug bounty customer privacy defensive technologies hyper-v insider preview microsoft edge mitigation payments payout range remote code execution research security security bugs software security vulnerabilities windows 10 windows defender windows server
    • Replies: 0
    • Forum: Security Alerts

  14. TA17-164A: HIDDEN COBRA – North Korea’s DDoS Botnet Infrastructure

    Original release date: June 13, 2017 Systems Affected Networked Systems Overview This joint Technical Alert (TA) is the result of analytic efforts between the Department of Homeland Security (DHS) and the Federal Bureau of Investigation (FBI). This alert provides technical details on the...
    • News
    • Thread
    • adversaries analysis botnet cve cyber operations cybersecurity data exfiltration ddos deltacharlie dhs fbi hidden cobra incident response malware mitigation network security north korea security practices threat detection vulnerabilities
    • Replies: 0
    • Forum: Security Alerts

  15. TA17-163A: CrashOverride Malware

    Original release date: June 12, 2017 Systems Affected Industrial Controls Systems Overview The National Cybersecurity and Communications Integration Center (NCCIC) is aware of public reports from ESET and Dragos outlining a new, highly capable Industrial Controls Systems (ICS) attack...
    • News
    • Thread
    • applicationwhitelisting authentication authorization backupstrategies commandinjection crashoverride criticalinfrastructure cybersecurity detection ics industrial malware mitigation nccic procedures remoteaccess riskevaluation tactics techniques threat
    • Replies: 0
    • Forum: Security Alerts

  16. TA17-156A: Reducing the Risk of SNMP Abuse

    Original release date: June 05, 2017 Systems Affected SNMP enabled devices Overview The Simple Network Management Protocol (SNMP) may be abused to gain unauthorized access to network devices. SNMP provides a standardized framework for a common language that is used for monitoring and...
    • News
    • Thread
    • access control authpriv best practices configuration cybersecurity devices encryption integrity management mib mitigation monitor network network traffic recommendations security snmp udp update whitelisting
    • Replies: 0
    • Forum: Security Alerts

  17. Strengthening the Microsoft Edge Sandbox

    In a recent post, we outlined the layered strategy that the Microsoft Edge security team employs to protect you from vulnerabilities that could be used to compromise your device or personal data. In particular, we showed how Microsoft Edge is leveraging technologies like Code Integrity Guard...
    • News
    • Thread
    • appcontainer attack brokers browser capabilities creatersupdate defense edge exploit flash microsoft mitigation privileges protectedmode rce sandbox security surface vulnerabilities web
    • Replies: 0
    • Forum: Live RSS Feeds

  18. TA16-288A: Heightened DDoS Threat Posed by Mirai and Other Botnets

    Original release date: October 14, 2016 Systems Affected Internet of Things (IoT)—an emerging network of devices (e.g., printers, routers, video cameras, smart TVs) that connect to one another via the Internet, often automatically sending and receiving data Overview Recently, IoT devices...
    • News
    • Thread
    • attack bashlite botnet cybersecurity data security ddos default passwords harden networks internet of things iot malware mirai mitigation networking prevention protect iot reboot security threats vulnerabilities
    • Replies: 0
    • Forum: Security Alerts

  19. TA16-250A: The Increasing Threat to Network Infrastructure Devices and Recommended Mitigations

    Original release date: September 06, 2016 Systems Affected Network Infrastructure Devices Overview The advancing capabilities of organized hacker groups and cyber adversaries create an increasing global threat to information systems. The rising threat levels place more demands on security...
    • News
    • Thread
    • access control apt authentication cisco asa cve-2014-3393 cve-2016-6366 cybersecurity firewall hacker threats infrastructure devices malware mitigation network management network security network segmentation remote access router supply chain synful knock vpn
    • Replies: 0
    • Forum: Security Alerts

  20. TA16-132A: Exploitation of SAP Business Applications

    Original release date: May 11, 2016 Systems Affected Outdated or misconfigured SAP systems Overview At least 36 organizations worldwide are affected by an SAP vulnerability Link Removed. Security researchers from Onapsis discovered indicators of exploitation against these organizations’ SAP...
    • News
    • Thread
    • business applications cloud security compliance crm erp exploitation governance invoker servlet mitigation onapsis patching plm remote access risk management sap scm security threat intelligence user authorization vulnerability
    • Replies: 0
    • Forum: Security Alerts