Carbon Black TAU Threat Analysis: Emotet Banking Trojan Leverages MS Office Word Docs, PowerShell to Deliver Malware

Emotet is a family of banking malware, which has been around since at least 2014. Attackers continue to leverage variants of Emotet and are becoming increasingly shrewd in the techniques they employ to deliver the malware onto an infected system. In the spring of 2018 Carbon Black's Threat Analys...

The vulnerability of the cbstream.sys component of the Carbon Black monitoring system allows a perpetrator to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the cbstream.sys component of the Carbon Black monitoring system is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information by interacting wi...

When Looking at Data, It’s All A Matter of Preference

Are you a cash or card kind of person? Currency has always been fascinating to me. Plenty of us grew up with parents who predominantly carried cash, paid all bills through mail, and even balanced a checkbook! I will never forget the days of taking my paychecks down to the bank and waiting in line...

Carbon Black’s Colleen Grounds and Melanie Holterhoff Named to CRN’s 2018 Women of the Channel List

Carbon Black's Colleen Grounds, Director of Channel Marketing, and Melanie Holterhoff, Channel Marketing Manager, have been named to CRN's prestigious 2018 “Women of the Channel” list. View the full news release here. The women who comprise this annual list span the IT channel, representing...

Carbon Black: A “Great Place to Work”

I am excited to announce Carbon Black has been certified as a “Great Place to Work” by the Great Place to Work Institute. It’s Carbon Black’s first such accolade on a national level and speaks volumes for our nearly 1,000 employees worldwide who come to work every day to create a world safe from...

WSO2 Carbon WSO2 Dashboard Server 5.3.0 - Persistent Cross-Site Scripting

WSO2 Carbon WSO2 Dashboard Server 5.3.0 - Persistent Cross-Site Scripting SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: Multiple Stored XSS Vulnerabilities product: WSO2 Carbon, WSO2 Dashboard Server vulnerable...

WSO2 Identity Server 5.3.0 Cross Site Scripting Vulnerability

Exploit for php platform in category web applications ======================================================================= title: Multiple Stored XSS Vulnerabilities product: WSO2 Carbon, WSO2 Dashboard Server vulnerable version: WSO2 Identity Server 5.3.0 fixed version: WSO2 Identity Server...

Carbon Black’s Predictive Security Cloud (PSC) To Help Power Newly Launched IBM X-Force Threat Management Services

Today is another exciting day for Carbon Black and IBM! This morning we announced Carbon Black has expanded its relationship with IBM Security as the Cb Predictive Security Cloud PSC™ will be part of the newly launched IBM X-Force Threat Management Services to further combat advanced threats acro...

Carbon Black Given 5-Star Rating in CRN’s 2018 Partner Program Guide

We are proud to announce that CRN®, a brand of The Channel Company, has given Carbon Black a 5-Star rating in its 2018 Partner Program Guide. According to CRN, this annual guide is the definitive listing of partner programs from technology vendors that provide products and services through the IT...

Carbon Black Elevated to CDW Emerging Gold Partner

I am proud to announce that CDW recently elevated Carbon Black from the “Silver” partner designation to “Emerging Gold!” This honor is a true testament to our growing partnership with CDW. It’s also a reflection of CDW’s continued commitment to endpoint security by leveraging Next-Generation...

Unspecified Vulnerability in OpenDayLight Carbon

Opendaylight, a project of the Linux Foundation in the United States, is a community-driven, open source, software-defined networking framework that contains a collection of modules capable of performing networking tasks that need to be done quickly.Carbon is one of the releases. A security...

CVE-2018-1078

OpenDayLight version Carbon SR3 and earlier contain a vulnerability during node reconciliation that can result in traffic flows that should be expired or should expire shortly being re-installed and their timers reset resulting in traffic being allowed that should be expired...

CVE-2018-1078

OpenDayLight version Carbon SR3 and earlier contain a vulnerability during node reconciliation that can result in traffic flows that should be expired or should expire shortly being re-installed and their timers reset resulting in traffic being allowed that should be expired...

CVE-2018-1078

CVE-2018-1078 affects OpenDayLight Carbon SR3 and earlier. During node reconciliation, all flows (active and inactive) may be reinstalled in the switch upon reconnection, causing timers for those flows to be reset. This can result in traffic flows that should be expired (or expiring soon) being r...

Threat Analysis: Recent Attack Technique Attempts to Bypass Whitelisting by Leveraging MS Office Document Macros, MSBuild, Certutil

Carbon Black continues to monitor and track evolving techniques that attackers leverage. Over the last several years, there has been an increase in attackers leveraging open source frameworks and proof of concept POC techniques that are released publically by researchers. A document was recently...

A Star Wars Analogy to Defend Against Non-Malware Attacks and the Dark Side

I like watching movies because I can relate almost anything in my real life to the movies I watched. Last week, I did a presentation at "Security Days Tokyo 2018," and I used Star Wars to describe the targeted attacks, non-malware attacks, AI-based, NGAV, etc. The Star Wars analogies were well...

What Is FIPS 140-2 & Why Does It Matter?

Editor's Note: Ray Potter, the blog's author, is the CEO and Co-founder of SafeLogic. Carbon Black has just announced the successful FIPS 140-2 validation of their Carbon Black Cryptographic Module and availability within their Cb Response and Cb Protection products. Our team at SafeLogic is...

With the Predictive Security Cloud (PSC) Leading the Way, Carbon Black is Named One the “Coolest 20 Vendors in Endpoint Security” by CRN

Editor’s Note: Victor Baez, Carbon Black’s VP of WW Channel and this blog’s author, was recently named a 2018 CRN Channel Chief. As part of CRN's annual Security 100 list, 20 endpoint companies have been named “Coolest Endpoint Security Vendors of 2018.” Carbon Black is among them. We are honored...

Value of Integrations Highlighted At Fortinet’s Accelerate 18 Conference

Changing the hearts and minds of security teams is no easy task. Everyone has been told for so long how to protect their environment, and more importantly how to buy the various tools needed to enable that protection. Collectively we’ve adopted the unintentional job of assuming all these things...

VIDEO: Cybersecurity Trends: A Look Back on 2017 and Key Predictions for 2018

Editor's Note: This article originally appeared on BizTechMagazine.com. The security landscape is constantly changing and 2017 had some major sea changes for IT on the security front. BizTech Magazine spoke with Rick McElroy and Paul Drapeau from Carbon Black to get their take on what the notable...