Endpoint isn’t the best place to block threats

Hackers often look for a number of ways to target business users, compromise critical systems and get away with sensitive information or money. These attacks can come from email and web sources, and even infect business endpoints. According to a 2015 industry survey, 73 percent of respondents...

Ransomware Roundup: Alternative Techniques featuring CTB-Faker

Ransomware is innovating to spread faster, hit harder and increase its payout potential. New unknown variants pop up daily, and many leverage non-malware techniques to evade traditional defenses. CTB-Faker is a perfect example of how modern ransomware is leveraging these new techniques to easily...

“The 101” – Episode 10 – What, Exactly, is a Botnet?

We’re back with another episode of The 101! This weekly security series aims to define endpoint security one question at a time. Tune in each week as we tackle a new term, concept, or comparison in our ongoing effort to provide clear definitions. In this week’s episode, we learn more about a...

“The 101” – Episode 9 – What Makes a Rootkit So Dangerous?

We’re back with another episode of The 101! This weekly security series aims to define endpoint security one question at a time. Tune in each week as we tackle a new term, concept, or comparison in our ongoing effort to provide clear definitions. In this week’s episode, we learn more about a...

Monitoring Windows Console Activity (Part 1)

Introduction While performing incident response, Mandiant encounters attackers actively using systems on a compromised network. This activity often includes using interactive console programs via RDP such as the command prompt, PowerShell, and sometimes custom command and control C2 console tools...

“The 101” – Episode 8 – What Makes a Trojan… a Trojan?

We’re back with another episode of The 101! This weekly security series aims to define endpoint security one question at a time. Tune in each week as we tackle a new term, concept, or comparison in our ongoing effort to provide clear definitions. This week we’re going to profile a type of malware...

SANS Institute: Hackers Paint a Bullseye on Your Employees and Endpoints

End users and their devices are right smack in the center of the battle between enterprise InfoSec teams and malicious hackers, and it’s not hard to see why. When compromised, connected endpoints — desktops, laptops, smartphones, tablets — offer intruders major entry points into corporate network...

“The 101” – Episode 7 – Why is Ransomware on the Rise?

We’re back with another episode of The 101! This weekly security series aims to define endpoint security one question at a time. Tune in each week as we tackle a new term, concept, or comparison in our ongoing effort to provide clear definitions. Much like viruses and adware were top of mind in t...

SMBLoris: What You Need To Know

What's Up? Astute readers may have been following the recent news around "SMBLoris" -- a proof-of-concept exploit that takes advantage of a vulnerability in the implementation of SMB services on both Windows and Linux, enabling attackers to "kill you softly" with a clever, low-profile...

“The 101” – Episode 6 – Why is Malware Still Successful?

We’re back with another episode of The 101! This weekly security series aims to define endpoint security one question at a time. Tune in each week as we tackle a new term, concept, or comparison in our ongoing effort to provide clear definitions. In the past few episodes we’ve spoken about the...

“The 101” – Episode 5 – How does Malware Actually Work?

We’re back with another episode of The 101! This weekly security series aims to define endpoint security one question at a time. Tune in each week as we tackle a new term, concept, or comparison in our ongoing effort to provide clear definitions. Last week we started our discussion about malware ...

Adding Security to Your Managed Services Offering

Over the years Trend Micro has collaborated with and learned from a variety of MSPs. Today’s threat landscape is continuously evolving, becoming more complex and sophisticated than it was even a year ago. For MSPs to rely on a single solution is not practical or in the best interest of their...

August 3, 2017 – Morning Cyber Coffee Headlines – “Tony Bennett” Edition

Good morning! Sit with Carbon Black this morning over a cup of coffee or tea and browse a few industry headlines to get the day started. We’ve got just enough information below to get you through that first cup…enjoy! August 3, 2017 - Headlines Carbon Black in the News: 10 tips for effective thre...

“The 101” – Episode 4 – What are the Different Types of Malware?

We’re back with another episode of The 101! This weekly security series aims to define endpoint security one question at a time. Tune in each week as we tackle a new term, concept, or comparison in our ongoing effort to cut through the noise and provide clear definitions. So far we’ve talked abou...

“The 101” – Episode 3 – How Do Different Types of Antivirus Work?

We’re back with another episode of The 101! This weekly security series aims to define endpoint security one question at a time. Tune in each week as we tackle a new term, concept, or comparison in our ongoing effort to cut through the noise and provide clear definitions. For the past few decades...

“The 101” – Episode 2 – What is Next-Generation Antivirus, or NGAV?

We’re back with another episode of The 101! This weekly security series aims to define endpoint security, one question at a time. Tune in each week as we tackle a new term, concept or comparison in our ongoing effort to cut through the noise and provide clear definitions. Recently, we helped defi...

Carbon Black and Siemplify Announce Integration Partnership

Carbon Black and Siemplify are excited to announce a partnership to deliver a fully integrated solution for incident response. By combining forces, Siemplify and Carbon Black will provide clients around the world with stronger prevention, detection and response strategies and capabilities. The...

“The 101” – Episode 1 – What is a Non-Malware Attack?

Welcome to our new video series, “The 101!” This weekly security series aims to do one thing: define endpoint security, one question at a time. Tune in each week as we tackle a new term, concept or comparison in our ongoing effort to cut through the noise and provide clear definitions. Security c...

Customer Case Study: Stonewall Kitchen Prevents a New Trend in Malware with Carbon Black

In the retail industry, a new level of security and compliance challenges have emerged making IT’s role even more pivotal and challenging. This is certainly the case for Stonewall Kitchen, creator of specialty food products. Since the company does all of their own manufacturing, distribution,...

Breaking the attack chain

The attack chain. It’s a term used often in infosecurity. Also known as the kill chain, it was originally used as a military concept to describe the structure of an attack. It serves the same function in cybersecurity, where various methods of malware infiltration, deployment, and execution are...