CVE-2018-12245

Symantec Endpoint Protection prior to 14.2 MP1 may be susceptible to a DLL Preloading vulnerability, which in this case is an issue that can occur when an application being installed unintentionally loads a DLL provided by a potential attacker. Note that this particular type of exploit only...

CVE-2018-12238

CVE-2018-12238 is an AV bypass affecting Norton/Symantec endpoint products. Affected include Norton prior to 22.15; Symantec Endpoint Protection (SEP) prior to 12.1.7454.7000 and 14.2; SEP SBE prior to NIS-22.15.1.8 and SEP-12.1.7454.7000; and SEP Cloud prior to 22.15.1. The issue enables evading...

CVE-2018-12239

Norton prior to 22.15; Symantec Endpoint Protection SEP prior to 12.1.7454.7000 & 14.2; Symantec Endpoint Protection Small Business Edition SEP SBE prior to NIS-22.15.1.8 & SEP-12.1.7454.7000; and Symantec Endpoint Protection Cloud SEP Cloud prior to 22.15.1 may be susceptible to an AV bypass...

CVE-2018-12245

CVE-2018-12245 affects Symantec Endpoint Protection (SEP) Client versions prior to 14.2 MP1. It is a DLL Preloading vulnerability that can trigger when an application is installed, loading a DLL supplied by an attacker. Impact details are described in the connected sources as a install-time issue...

CVE-2018-12239

CVE-2018-12239 affects Norton 22.15 and certain Symantec Endpoint Protection (SEP) lines prior to 12.1.7454.7000 and 14.2, SEP SBE prior to NIS-22.15.1.8/SEP-12.1.7454.7000, and SEP Cloud prior to 22.15.1. The issue is an AV bypass vulnerability where one antivirus engine relies on a signature da...

SEP Multiple Issues

SUMMARY Symantec has released updates to address issues that were discovered in the Norton, Symantec Endpoint Protection SEP, Symantec Endpoint Protection Small Business Edition SEP SBE and Symantec Endpoint Protection Cloud SEP Cloud products. AFFECTED PRODUCTS Norton --- CVE | Affected Versions...

Small Business Benefits of Moving to the Cloud: Resource Friendly

Small businesses never seem to have enough people or funding, and the last thing they need is for their security solution to be eating up precious resources. Your people are stretched thin and don’t really have time or budget to source new hardware or push software updates. Not to mention the...

Best Practices for Endpoint Detection and Response

There are many elements that can complicate enterprise security efforts. From the increasing sophistication of cybercriminal strategies and activities to the wide range of components connected to the network, data protection and infrastructure security has become an uphill battle. Another key...

What You Should Look For in a Next-Generation Security Solution

Today’s businesses face a unique set of challenges. They want security that works and is easy to implement and manage but, frequently, are working with a limited budget and resources. Many organizations know their current antivirus solution has gaps, but don’t know where to begin in the search fo...

Partner Perspectives: The Power of Shared Intelligence: Juniper Sky ATP and Cb Response

Scott Emo is the Director of Field Readiness, Security, for Juniper Networks. Uncover and Mitigate the Most Sophisticated Cyber Attacks The rapid growth of emerging technologies, combined with an increasing number of connected devices running business-critical applications in highly distributed...

Excerpts From: Do More with Less—How Endpoint Security in the Cloud is Helping Companies Stay Secure

If you're responsible for security at your company, you know that you're held back by things like limited budgets, a lack of skilled personnel, and too many security products complicating your stack. In Carbon Black’s recent webinar, we discussed how endpoint security in the cloud can simplify yo...

Partner Perspectives: SOAR with Demisto and Carbon Black

Abhishek Iyer is the Technical Marketing Manager for Demisto. Automate your Endpoint Protection and Incident Response Demisto’s security orchestration and automation platform enables organizations to standardize, automate and coordinate response processes across their security stack. Playbooks...

Adding Cb ThreatHunter to the Cb Predictive Security Cloud (PSC)

This is another big day for Carbon Black. Earlier, we announced Cb ThreatHunter, our newest offering on the Cb Predictive Security Cloud PSC, which delivers powerful threat hunting and incident response IR capabilities to the platform. The announcement of Cb ThreatHunter, which will be the fourth...

Introducing the Bot Endpoint Protection Report

Todays comprehensive monitoring capabilities in Security Center provide great insight into bot activity and countermeasures applied across your valuable web properties. Filter options allow you to focus on almost any desired detail. However, understanding what is happening on specific protected...

Partner Perspectives: Detect All Devices, Respond to All Threats

Michael Tanji is the Chief Operations Officer for Senrio. The ability to detect and respond to cyber threats in a timely manner is an essential capability of every security-minded enterprise. Endpoint detection and response EDR solutions, such as Carbon Black’s Cb Response, are a critical compone...

Threat Identity...The First Line of Defense

Last quarter, we discussed zero trust and identity in regard to remote application access. This focus was primarily looking at enterprise users seeking to gain access to applications on a network where there are no boundaries: The internet. In the concept of zero trust, the internet is considered...

10 Endpoint Security Problems Solved by the Cloud – Responding Quickly To Threats

In this week’s installment of 10 endpoint security problems solved by the cloud, we’re going to step away from last week’s topic, identifying problems, and examine how the cloud helps organizations respond quickly to threats. Speed is Critical Attackers move quickly, and your ability to respond...

How Microsoft 365 Security integrates with your broader IT ecosystem—part 2

Todays post was coauthored by Debraj Ghosh, Senior Product Marketing Manager, and Diana Kelley, Cybersecurity Field CTO. In part 1 of our blog series, we shared the Microsoft 365 Security strategy for integrating with the broader security community. Today, we cover the services Microsoft 365...

Cb Customer Spotlight Series: Q & A with Project Worldwide’s Thomas Munson

Everyday, Carbon Black customers are working together to keep their organizations safe from cyber attacks. To share the knowledge our customers have with the greater security community, we are excited to announce the launch of the Cb Customer Spotlight Series. The Cb Customer Spotlight Series...

10 Endpoint Security Problems Solved by the Cloud – Securing Remote Workers

In last week’s post, we talked about how the cloud solves the problem of managing multiple agents. In this week’s blog, we’re going to look at a security challenge that almost every company faces: Securing Remote Workers. Remote Workers Are A Security Risk Advances in technology are creating...