Navigation section
network security
-
4056318 - Guidance for securing AD DS account used by Azure AD Connect for directory synchronization - Version: 1.0
Revision Note: V1.0 (December 12, 2017): Advisory published. Summary: Microsoft is releasing this security advisory to provide information regarding security settings for the AD DS (Active Directory Domain Services) account used by Azure AD Connect for directory synchronization. This advisory...- News
- Thread
- account security active directory ad administrators ad ds azure ad cloud services directory synchronization guidance it management microsoft microsoft security network security on-premises ad revision note security advisory security settings system administration technology version 1.0
- Replies: 0
- Forum: Security Alerts
-
TA17-318B: HIDDEN COBRA – North Korean Trojan: Volgmer
Original release date: November 14, 2017 Systems Affected Network systems Overview This joint Technical Alert (TA) is the result of analytic efforts between the Department of Homeland Security (DHS) and the Federal Bureau of Investigation (FBI). Working with U.S. government partners, DHS...- News
- Thread
- backdoor trojan botnet cybersecurity dhs fbi hidden cobra incident response indicators of compromise ip addresses malicious activity malware malware analysis mitigation network defense network security north korea spear phishing trojan user-agent volgmer
- Replies: 0
- Forum: Security Alerts
-
TA17-318A: HIDDEN COBRA – North Korean Remote Administration Tool: FALLCHILL
Original release date: November 14, 2017 Systems Affected Network systems Overview This joint Technical Alert (TA) is the result of analytic efforts between the Department of Homeland Security (DHS) and the Federal Bureau of Investigation (FBI). Working with U.S. government partners, DHS...- News
- Thread
- command and control cybersecurity dhs fallchill fbi hidden cobra incident response indicators of compromise ip addresses malware malware analysis malware detection mitigation techniques network defense network security north korea remote administration tool system information threat report tls communications
- Replies: 0
- Forum: Security Alerts
-
TA17-293A: Advanced Persistent Threat Activity Targeting Energy and Other Critical...
Original release date: October 20, 2017 Systems Affected Domain Controllers File Servers Email Servers Overview This joint Technical Alert (TA) is the result of analytic efforts between the Department of Homeland Security (DHS) and the Federal Bureau of Investigation (FBI). This alert...- News
- Thread
- apt control systems credential harvesting cyber espionage cybersecurity dhs energy sector fbi ics incident response indicators of compromise malicious activity malware network security scada spear phishing staging targets technical alert threat detection watering hole attack
- Replies: 0
- Forum: Security Alerts
-
Windows 7 Firewall. How to only allow Email internet access specific network
Hi, I am running Windows 7 Professional 64 bit. Is there some way I can use Windows Firewall to only allow access to the internet for email (I use outlook 2013) and also say Chrome Browser? Occasionally I use my iPhone to tether my windows 7 laptop, but I have a very limited data plan. I...- DaveBrock
- Thread
- access control application control block programs chrome data plan email firewall firewall configuration internet access iphone limited access network connections network security outlook 2013 profile settings tethering third-party tools user guide windows 7 windows updates
- Replies: 3
- Forum: Windows Help and Support
-
TA17-164A: HIDDEN COBRA – North Korea’s DDoS Botnet Infrastructure
Original release date: June 13, 2017 | Last revised: July 07, 2017 Systems Affected Networked Systems Overview This joint Technical Alert (TA) is the result of analytic efforts between the Department of Homeland Security (DHS) and the Federal Bureau of Investigation (FBI). This alert...- News
- Thread
- application vulnerabilities botnet cyber attacks cybersecurity ddos deltacharlie dhs fbi hidden cobra incident response indicators of compromise ip addresses lazarus group malware mitigation network security north korea security advisory software patch threat intelligence
- Replies: 0
- Forum: Security Alerts
-
TA17-156A: Reducing the Risk of SNMP Abuse
Original release date: June 05, 2017 Systems Affected SNMP enabled devices Overview The Simple Network Management Protocol (SNMP) may be abused to gain unauthorized access to network devices. SNMP provides a standardized framework for a common language that is used for monitoring and...- News
- Thread
- access control authentication best practices community strings configuration encryption management mib mitigation network devices network security protocols protocols best practices remote attacks security recommendations snmp snmpv3 udp vulnerability
- Replies: 0
- Forum: Security Alerts
-
TA16-288A: Heightened DDoS Threat Posed by Mirai and Other Botnets
Original release date: October 14, 2016 | Last revised: November 30, 2016 Systems Affected Internet of Things (IoT)—an emerging network of devices (e.g., printers, routers, video cameras, smart TVs) that connect to one another via the Internet, often automatically sending and receiving data...- News
- Thread
- attack mitigation bashlite botnets cybersecurity ddos default passwords device protection digital devices firmware update iot krebs security malware mirai network security password security sock vulnerabilities tcp port telecom security threat landscape vulnerabilities
- Replies: 0
- Forum: Security Alerts
-
TA16-250A: The Increasing Threat to Network Infrastructure Devices and Recommended Mitigations
Original release date: September 06, 2016 | Last revised: September 28, 2016 Systems Affected Network Infrastructure Devices Overview The advancing capabilities of organized hacker groups and cyber adversaries create an increasing global threat to information systems. The rising threat...- News
- Thread
- admin privileges apt attack vectors authentication cisco configuration cve-2016-6366 cyber threats firewall infrastructure iot malware mitigations network devices network security security best practices segmentation shadow brokers supply chain vpn
- Replies: 0
- Forum: Security Alerts
-
TA17-181A: Petya Ransomware
Original release date: July 01, 2017 Systems Affected Microsoft Windows operating systems Overview On June 27, 2017, NCCIC was notified of Petya ransomware events occurring in multiple countries and affecting multiple sectors. Petya ransomware encrypts the master boot records of infected...- News
- Thread
- backup cve-2017-0144 cve-2017-0145 cyber crime data recovery encryption it security malicious software malware ms17-010 nccic network security petya phishing ransomware security smb threat virus windows
- Replies: 0
- Forum: Security Alerts
-
TA17-164A: HIDDEN COBRA – North Korea’s DDoS Botnet Infrastructure
Original release date: June 13, 2017 Systems Affected Networked Systems Overview This joint Technical Alert (TA) is the result of analytic efforts between the Department of Homeland Security (DHS) and the Federal Bureau of Investigation (FBI). This alert provides technical details on the...- News
- Thread
- adversaries analysis botnet cve cyber operations cybersecurity data exfiltration ddos deltacharlie dhs fbi hidden cobra incident response malware mitigation network security north korea security practices threat detection vulnerabilities
- Replies: 0
- Forum: Security Alerts
-
Windows 7 Cannot Access XP from Windows 7/8 after updating windows update MS17-010
Hello guys...! We use various OS such as Windows XP, Windows 7, Windows 8 in our office. In the beginning there's no networking problem, Windows XP can access to higher Windows, and Windows 7/8 can access Windows XP. Everything's fine until installing windows update MS17-010 on last Monday for...- yusufks
- Thread
- access issues computer name file sharing firewall ip address lan manager local policy ms17-010 network security networking printer sharing ransomware smb troubleshooting update windows 7 windows 8 windows update windows xp
- Replies: 13
- Forum: Windows Networking
-
TA17-117A: Intrusions Affecting Multiple Victims Across Multiple Sectors
Original release date: April 27, 2017 Systems Affected Networked Systems Overview The National Cybersecurity and Communications Integration Center (NCCIC) has become aware of an emerging sophisticated campaign, occurring since at least May 2016, that uses multiple malware implants. Initial...- News
- Thread
- attack vectors credential theft cybersecurity data breach defense strategies indicators of compromise intrusion it security it service providers malware nccic network security network traffic plugx rat redleaves risk evaluation threat actors vulnerability windows
- Replies: 0
- Forum: Security Alerts
-
B
Does a local password increase security against remote attacks?
I have a user account password on my Windows 10 machine at home and am wondering whether this actually increases security against remote attackers or if it's solely for protecting against local attacks.- bur
- Thread
- authentication cybersecurity local attacks network security password privacy remote attacks security user account windows 10
- Replies: 8
- Forum: Windows Security
-
TA17-075A: HTTPS Interception Weakens TLS Security
Original release date: March 16, 2017 Systems Affected All systems behind a hypertext transfer protocol secure (HTTPS) interception product are potentially affected. Overview Many organizations use HTTPS interception products for several purposes, including detecting malware that uses HTTPS...- News
- Thread
- best practices certificate client systems compliance cybersecurity encryption https interception internet protocols malware mitm network security risk assessment security security risks ssl technology tls validation web traffic
- Replies: 0
- Forum: Security Alerts
-
MS17-010 - Critical: Security Update for Microsoft Windows SMB Server (4013389) - Version: 1.0
Severity Rating: Critical Revision Note: V1.0 (March 14, 2017): Bulletin published. Summary: This security update resolves vulnerabilities in Microsoft Windows. The most severe of the vulnerabilities could allow remote code execution if an attacker sends specially crafted messages to a Windows...- News
- Thread
- critical cybersecurity exploit march 2017 microsoft ms17-010 network security patch remote code execution revision note security update server smb server technet threat update version 1.0 vulnerabilities windows windows update
- Replies: 0
- Forum: Security Alerts
-
Security trends & Windows 10
Cybersecurity threats both new and known, from Advanced Persistent Threats (APT), to the Internet of Things (IoT), to the shortage of cyberworkers, threaten us each day. To help protect ourselves and our customers, we mobilize threat intelligence and machine learning, a mindset of “assume...- News
- Thread
- advanced threat protection attack prevention automation cybercrime cybersecurity cybersecurity workforce data protection identity theft iot machine learning malware network security password security ransomware security operations security teams security trends threat intelligence vulnerability windows 10
- Replies: 0
- Forum: Live RSS Feeds
-
Microsoft security advisory: Update for disabling RC4
Continue reading...- News
- Thread
- advisory best practices cryptography cybersecurity encryption guidelines information microsoft network security patch rc4 safety security support system security tech news tech update update vulnerability windows
- Replies: 0
- Forum: Knowledge Base (KB)
-
P
Why are there many "Allow" rules at first time WinFirewall usage? How to reset to initial rule set?
After having used for some years another firewall I considered now to switch to MS built in Windows Firewall (in Win 7 Pro). So I deinstalled the old FW and enabled the MS WF. When I go now to wf.msc e.g into "Inbound rules" section then there are much to my surprise many "Allow" rules for...- pstein
- Thread
- 3rd party programs allow rules firewall configuration firewall settings inbound rules initial state internet connection ms firewall network access network security notifications reset rules security software installation troubleshooting user experience win 7 windows firewall windows security
- Replies: 1
- Forum: Windows Security
-
TA16-250A: The Increasing Threat to Network Infrastructure Devices and Recommended Mitigations
Original release date: September 06, 2016 Systems Affected Network Infrastructure Devices Overview The advancing capabilities of organized hacker groups and cyber adversaries create an increasing global threat to information systems. The rising threat levels place more demands on security...- News
- Thread
- access control apt authentication cisco asa cve-2014-3393 cve-2016-6366 cybersecurity firewall hacker threats infrastructure devices malware mitigation network management network security network segmentation remote access router supply chain synful knock vpn
- Replies: 0
- Forum: Security Alerts
