network security

  1. 4056318 - Guidance for securing AD DS account used by Azure AD Connect for directory synchronization - Version: 1.0

    Revision Note: V1.0 (December 12, 2017): Advisory published. Summary: Microsoft is releasing this security advisory to provide information regarding security settings for the AD DS (Active Directory Domain Services) account used by Azure AD Connect for directory synchronization. This advisory...
    • News
    • Thread
    • active directory ad administrators ad ds azure ad cloud services directory synchronization guidance it management microsoft microsoft security network security on-premises ad revision note security advisory security settings system administration technology version 1.0
    • Replies: 0
    • Forum: Security Alerts

  2. TA17-318B: HIDDEN COBRA – North Korean Trojan: Volgmer

    Original release date: November 14, 2017 Systems Affected Network systems Overview This joint Technical Alert (TA) is the result of analytic efforts between the Department of Homeland Security (DHS) and the Federal Bureau of Investigation (FBI). Working with U.S. government partners, DHS...
    • News
    • Thread
    • backdoor trojan botnet cybersecurity dhs fbi hidden cobra incident response indicators of compromise ip addresses malicious activity malware malware analysis mitigation network defense network security north korea spear phishing trojan user-agent volgmer
    • Replies: 0
    • Forum: Security Alerts

  3. TA17-318A: HIDDEN COBRA – North Korean Remote Administration Tool: FALLCHILL

    Original release date: November 14, 2017 Systems Affected Network systems Overview This joint Technical Alert (TA) is the result of analytic efforts between the Department of Homeland Security (DHS) and the Federal Bureau of Investigation (FBI). Working with U.S. government partners, DHS...
    • News
    • Thread
    • command and control cybersecurity dhs fallchill fbi hidden cobra incident response indicators of compromise ip addresses malware malware analysis malware detection mitigation techniques network defense network security north korea remote administration tool system information threat report tls communications
    • Replies: 0
    • Forum: Security Alerts

  4. TA17-293A: Advanced Persistent Threat Activity Targeting Energy and Other Critical...

    Original release date: October 20, 2017 Systems Affected Domain Controllers File Servers Email Servers Overview This joint Technical Alert (TA) is the result of analytic efforts between the Department of Homeland Security (DHS) and the Federal Bureau of Investigation (FBI). This alert...
    • News
    • Thread
    • apt control systems credential harvesting cyber espionage cybersecurity dhs energy sector fbi ics incident response indicators of compromise malicious activity malware network security scada spear phishing staging targets technical alert threat detection watering hole attack
    • Replies: 0
    • Forum: Security Alerts

  5. Windows 7 Firewall. How to only allow Email internet access specific network

    Hi, I am running Windows 7 Professional 64 bit. Is there some way I can use Windows Firewall to only allow access to the internet for email (I use outlook 2013) and also say Chrome Browser? Occasionally I use my iPhone to tether my windows 7 laptop, but I have a very limited data plan. I...
    • DaveBrock
    • Thread
    • access control application control block programs chrome data plan email firewall firewall configuration internet access iphone limited access network connections network security outlook 2013 profile settings tethering third-party tools user guide windows 7 windows updates
    • Replies: 3
    • Forum: Windows Help and Support

  6. TA17-164A: HIDDEN COBRA – North Korea’s DDoS Botnet Infrastructure

    Original release date: June 13, 2017 | Last revised: July 07, 2017 Systems Affected Networked Systems Overview This joint Technical Alert (TA) is the result of analytic efforts between the Department of Homeland Security (DHS) and the Federal Bureau of Investigation (FBI). This alert...
    • News
    • Thread
    • application vulnerabilities botnet cyber attacks cybersecurity ddos deltacharlie dhs fbi hidden cobra incident response indicators of compromise ip addresses lazarus group malware mitigation network security north korea security advisory software patch threat intelligence
    • Replies: 0
    • Forum: Security Alerts

  7. TA17-156A: Reducing the Risk of SNMP Abuse

    Original release date: June 05, 2017 Systems Affected SNMP enabled devices Overview The Simple Network Management Protocol (SNMP) may be abused to gain unauthorized access to network devices. SNMP provides a standardized framework for a common language that is used for monitoring and...
    • News
    • Thread
    • access control authentication best practices community strings configuration encryption management mib mitigation network devices network security protocols protocols best practices remote attacks security recommendations snmp snmpv3 udp unauthorized access vulnerability
    • Replies: 0
    • Forum: Security Alerts

  8. TA16-288A: Heightened DDoS Threat Posed by Mirai and Other Botnets

    Original release date: October 14, 2016 | Last revised: November 30, 2016 Systems Affected Internet of Things (IoT)—an emerging network of devices (e.g., printers, routers, video cameras, smart TVs) that connect to one another via the Internet, often automatically sending and receiving data...
    • News
    • Thread
    • attack mitigation bashlite botnets cybersecurity ddos default passwords device protection digital devices firmware update iot krebs security malware mirai network security password security sock vulnerabilities tcp port telecom security threat landscape vulnerabilities
    • Replies: 0
    • Forum: Security Alerts

  9. TA16-250A: The Increasing Threat to Network Infrastructure Devices and Recommended Mitigations

    Original release date: September 06, 2016 | Last revised: September 28, 2016 Systems Affected Network Infrastructure Devices Overview The advancing capabilities of organized hacker groups and cyber adversaries create an increasing global threat to information systems. The rising threat...
    • News
    • Thread
    • admin privileges apt attack vectors authentication cisco configuration cve-2016-6366 cyber threats firewall infrastructure iot malware mitigations network devices network security security best practices segmentation shadow brokers supply chain vpn
    • Replies: 0
    • Forum: Security Alerts

  10. TA17-181A: Petya Ransomware

    Original release date: July 01, 2017 Systems Affected Microsoft Windows operating systems Overview On June 27, 2017, NCCIC was notified of Petya ransomware events occurring in multiple countries and affecting multiple sectors. Petya ransomware encrypts the master boot records of infected...
    • News
    • Thread
    • backup cve-2017-0144 cve-2017-0145 cyber crime data recovery encryption it security malicious software malware ms17-010 nccic network security petya phishing ransomware security smb threat virus windows
    • Replies: 0
    • Forum: Security Alerts

  11. TA17-164A: HIDDEN COBRA – North Korea’s DDoS Botnet Infrastructure

    Original release date: June 13, 2017 Systems Affected Networked Systems Overview This joint Technical Alert (TA) is the result of analytic efforts between the Department of Homeland Security (DHS) and the Federal Bureau of Investigation (FBI). This alert provides technical details on the...
    • News
    • Thread
    • adversaries analysis botnet cve cyber operations cybersecurity data exfiltration ddos deltacharlie dhs fbi hidden cobra incident response malware mitigation network security north korea security practices threat detection vulnerabilities
    • Replies: 0
    • Forum: Security Alerts

  12. Windows 7 Cannot Access XP from Windows 7/8 after updating windows update MS17-010

    Hello guys...! We use various OS such as Windows XP, Windows 7, Windows 8 in our office. In the beginning there's no networking problem, Windows XP can access to higher Windows, and Windows 7/8 can access Windows XP. Everything's fine until installing windows update MS17-010 on last Monday for...
    • yusufks
    • Thread
    • access issues computer name error messages file sharing firewall ip address lan manager local policy ms17-010 network security networking printer sharing ransomware smb troubleshooting update windows 7 windows 8 windows update windows xp
    • Replies: 13
    • Forum: Windows Networking

  13. TA17-117A: Intrusions Affecting Multiple Victims Across Multiple Sectors

    Original release date: April 27, 2017 Systems Affected Networked Systems Overview The National Cybersecurity and Communications Integration Center (NCCIC) has become aware of an emerging sophisticated campaign, occurring since at least May 2016, that uses multiple malware implants. Initial...
    • News
    • Thread
    • attack vectors credential theft cybersecurity data breach defense strategies indicators of compromise intrusion it security it service providers malware nccic network security network traffic plugx rat redleaves risk evaluation threat actors vulnerability windows
    • Replies: 0
    • Forum: Security Alerts
  14. B

    Does a local password increase security against remote attacks?

    I have a user account password on my Windows 10 machine at home and am wondering whether this actually increases security against remote attackers or if it's solely for protecting against local attacks.
    • bur
    • Thread
    • authentication cybersecurity local attacks network security password privacy remote attacks security windows 10
    • Replies: 8
    • Forum: Windows Security

  15. TA17-075A: HTTPS Interception Weakens TLS Security

    Original release date: March 16, 2017 Systems Affected All systems behind a hypertext transfer protocol secure (HTTPS) interception product are potentially affected. Overview Many organizations use HTTPS interception products for several purposes, including detecting malware that uses HTTPS...
    • News
    • Thread
    • best practices certificate client systems compliance cybersecurity encryption https interception internet protocols malware mitm network security risk assessment security security risks ssl technology tls validation web traffic
    • Replies: 0
    • Forum: Security Alerts

  16. MS17-010 - Critical: Security Update for Microsoft Windows SMB Server (4013389) - Version: 1.0

    Severity Rating: Critical Revision Note: V1.0 (March 14, 2017): Bulletin published. Summary: This security update resolves vulnerabilities in Microsoft Windows. The most severe of the vulnerabilities could allow remote code execution if an attacker sends specially crafted messages to a Windows...
    • News
    • Thread
    • critical cybersecurity exploit march 2017 microsoft ms17-010 network security patch remote code execution revision note security update server smb server technet threat update version 1.0 vulnerabilities windows windows update
    • Replies: 0
    • Forum: Security Alerts

  17. Security trends & Windows 10

    Cybersecurity threats both new and known, from Advanced Persistent Threats (APT), to the Internet of Things (IoT), to the shortage of cyberworkers, threaten us each day. To help protect ourselves and our customers, we mobilize threat intelligence and machine learning, a mindset of “assume...
    • News
    • Thread
    • advanced threat protection attack prevention automation cybercrime cybersecurity cybersecurity workforce data protection identity theft iot machine learning malware network security password security ransomware security operations security teams security trends threat intelligence vulnerability windows 10
    • Replies: 0
    • Forum: Live RSS Feeds

  18. Microsoft security advisory: Update for disabling RC4

    Continue reading...
    • News
    • Thread
    • advisory best practices cryptography cybersecurity encryption guidelines information microsoft network security patch rc4 safety security support system security tech news tech update update vulnerability windows
    • Replies: 0
    • Forum: Knowledge Base (KB)
  19. P

    Why are there many "Allow" rules at first time WinFirewall usage? How to reset to initial rule set?

    After having used for some years another firewall I considered now to switch to MS built in Windows Firewall (in Win 7 Pro). So I deinstalled the old FW and enabled the MS WF. When I go now to wf.msc e.g into "Inbound rules" section then there are much to my surprise many "Allow" rules for...
    • pstein
    • Thread
    • 3rd party programs allow rules firewall configuration firewall settings inbound rules initial state internet connection ms firewall network access network security notifications program permissions reset rules security software installation troubleshooting user experience win 7 windows firewall windows security
    • Replies: 1
    • Forum: Windows Security

  20. TA16-250A: The Increasing Threat to Network Infrastructure Devices and Recommended Mitigations

    Original release date: September 06, 2016 Systems Affected Network Infrastructure Devices Overview The advancing capabilities of organized hacker groups and cyber adversaries create an increasing global threat to information systems. The rising threat levels place more demands on security...
    • News
    • Thread
    • access control apt authentication cisco asa cve-2014-3393 cve-2016-6366 cybersecurity firewall hacker threats infrastructure devices malware mitigation network management network security network segmentation remote access router supply chain synful knock vpn
    • Replies: 0
    • Forum: Security Alerts