Visualizing Network Traffic Data to Drive Action

Top 5 multi group queries for analyzing network sensor data We launched the Insight Network Sensor earlier this year and have since seen great adoption from both new and existing customers. The main use case behind this success is the need for network visibility. Customers want to know what is...

Akamai's Polymorphic AI Framework Preemptively Manages Bots

Too many security efforts react to threats as they come. While security teams often succeed through Herculean efforts, being constantly under siege takes its toll on your resources. The relentless barrage of bot attacks will eventually crack the human- and system-based methods to block or mitigat...

Define What to Parse From Logs with the Custom Parsing Tool in InsightIDR

Data is essential to any SIEM. Generally, this data is collected from logs, endpoints, and networks. All of this data paints a holistic picture of your network so you have constant visibility into what’s going on, and where. When it comes to security data, log data is the primary driver. In...

CVE-2020-7491

VERSION NOT SUPPORTED WHEN ASSIGNED A legacy debug port account in TCMs installed in Tricon system versions 10.2.0 through 10.5.3 is visible on the network and could allow inappropriate access. This vulnerability was remediated in TCM version 10.5.4...

Enterprise Security Woes Explode with Home Networks in the Mix

The work-from-home WFH paradigm that has become the new normal in the age of coronavirus comes with exacerbated network security risk – as evidenced by growing a number of botnets and automated attacks that are taking advantage of known vulnerabilities in both consumer and corporate IT gear. The...

CVE-2020-7483

VERSION NOT SUPPORTED WHEN ASSIGNED A vulnerability could cause certain data to be visible on the network when the 'password' feature is enabled. This vulnerability was discovered in and remediated in versions v4.9.1 and v4.10.1 on May 30, 2013. The 'password' feature is an additional optional...

CVE-2020-7483

CVE-2020-7483 affects legacy Schneider Electric TriStation 1131 software (TriStation 1131 v1.0.0–4.9.0, v4.10.0 and 4.12.0) where the optional password feature can cause certain data to be transmitted in cleartext over the network. Schneider Electric remediated this by releasing TriStation v4.9.1...

CVE-2020-7483

VERSION NOT SUPPORTED WHEN ASSIGNED A vulnerability could cause certain data to be visible on the network when the 'password' feature is enabled. This vulnerability was discovered in and remediated in versions v4.9.1 and v4.10.1 on May 30, 2013. The 'password' feature is an additional optional...

Partner Perspectives: Stop Advanced Cyber Threats with End-to-End Protection from ThreatWarrior and Carbon Black

Today’s rapidly advancing technology and our “constantly connected” mindset have given rise to a malicious underworld of sophisticated cybercriminals and constantly-evolving cyberattacks. Understanding these new forms of attack, predicting strikes, and responding quickly is the only way to defend...

Through the Years: an Inside Look at Carbon Black Technology

An early Carbon Black customer and Red Canary detection engineer provides perspective on Carbon Black’s technology evolutions. This post was originally published by our partner Red Canary on May 30, 2019. Back in 2013, I was one of the first security professionals to deploy Carbon Black. This was...

Rapid Incident Response Now Available through Cynet’s Free IR Service Providers Offering

Organizations are increasingly outsourcing incident response situations to service providers. This is taking place across the spectrum – from cyber mature companies with highly staffed SOCs, to small operations with no dedicated security personnel. This keeps the IR providers busy, putting the on...

Partner Perspectives: Level Up your EDR Capabilities with Deception-Based Threat Detection from Carbon Black and Smokescreen

Amir Moin is a Product Manager for Smokescreen. All security teams eventually run into the same fundamental problems - low network visibility, overworked security analysts, and breaches that put them on the nine o’clock news. Traditional security solutions are primed toward giving security teams ...

Free Cynet Threat Assessment for Mid-sized and Large Organizations

If you cannot see what’s happening in your network, your ability to make smart security decisions will suffer. Many vendors offer threat assessment options, but they usually require an investment of time and resources. One vendor out there – Cynet – is offering a no-cost threat assessment to...

Mature Your Threat Hunting by Testing Your Visibility

Threat hunting starts with a hypothesis. Without a hypothesis, you’re just combing through log files - and that isn’t threat hunting. Once you have a hypothesis, you can begin your search, but you won’t always find a hacker. Testing, like the open source tests available from Red Canary’s Atomic R...

Partner Perspectives: The Power of Shared Intelligence: Juniper Sky ATP and Cb Response

Scott Emo is the Director of Field Readiness, Security, for Juniper Networks. Uncover and Mitigate the Most Sophisticated Cyber Attacks The rapid growth of emerging technologies, combined with an increasing number of connected devices running business-critical applications in highly distributed...

Firewalls and the Need for Speed

I was looking for resources on campus network design and found these slides pdf from a 2011 Network Startup Resource Center presentation. These two caught my attention: This bothered me, so I Tweeted about it. This started some discussion, and prompted me to see what NSRC suggests for architectur...

Carbon Black Report: A Case Study on Threat Hunting

There are certain seminal experiences you’ll remember all your life — your first kiss, your college graduation, the smell of your favorite home-cooked meal — and then hundreds of mini-experiences that helped you reach each milestone that in short order disappeared from view. The memories you carr...

Federal Agencies Face an Uphill Battle in Cyber-Preparedness

In the wake of the elimination of the federal cybersecurity czar position, the latest federal cybersecurity preparedness report from the Office of Management and Budget OMB and the Department of Homeland Security DHS shows that U.S. government is nowhere near ready for prime time when it comes to...

Skybox Platform 7.0.611 XSS / SQL Injection / Code Execution

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: Multiple Vulnerabilities product: Skybox Platform vulnerable version: =7.0.611 fixed version: 7.5.401 CVE number: impact:...

Skybox Platform 7.0.611 - Multiple Vulnerabilities

Exploit for hardware platform in category web applications Skybox Platform 7.0.611 - Multiple Vulnerabilities product: Skybox Platform vulnerable version: =7.0.611 fixed version: 7.5.401 homepage: www.skyboxsecurity.com/products/appliance...