Cb Integrations: Cb Response Timeliner

Editor's Note: This post originally appeared on StillzTech.com and is being republished with permission from the author. Github: Incident Response is a challenging career. As responders, we must do our best to keep up to date with the latest attack trends, malware and forensic techniques...

Partner Perspectives: IR Challenges Solved by IncMan SOAR + Cb Response

John Moran is the Senior Product Manager for DFLabs. Cb Response is one of the most effective endpoint solutions when it comes to detecting, investigating and responding to advanced threats. I do not say this as a marketing person I am not, but as a former incident response consultant who utilize...

Excerpts From “Why Companies Are Replacing AV with Advanced Endpoint Security”

Is legacy antivirus failing to keep your endpoints secure? In Carbon Black's recent webinar, Fulcanelli Chavez, Sr. Security Operations Analyst at D.A. Davidson, shared how switching from McAfee to Cb Defense has improved protection and simplified operations for his team. Below are excerpts from...

Using MITRE ATT&CK When Researching Attacker Behavior in a Post-Compromise World

MITRE ATT&CK is arguably one of the best assets available to security professionals who want to dive into the intricacies of detecting and preventing adversary behaviors. Why is that? It’s a great knowledge base of known adversarial behaviors overlayed with attacker TTPs and their state in the...

Cb Protection 8.1 Makes Replacing Legacy Antivirus On Critical Systems and Servers Easier Than Ever

Cb Protection, has a long history of innovation in the market. Many have referred to Cb Protection as a pioneer in the application control market. Application control also known as whitelisting is used to lock down critical systems and servers. It's also one of the strongest forms of protection a...

Cb Customer Spotlight Series: Q&A with Hologic’s Ryan Manni

Being able to influence Carbon Black products through the Cb Defenders Design Partner Program is one Ryan Manni’s favorite aspects of being a Carbon Black customer. Ryan Manni is the current Manager of Security Operations at Hologic, an innovative medical technology company primarily focused on...

Announcing “Cb Threat Hunters,” Carbon Black’s First Skill-Based Program

Carbon Black is excited to announce “Cb Threat Hunters,” the company’s first skill-based program debuting at Cb Connect 2018. Cb Threat Hunters gives you the opportunity to develop your threat-hunting skills to stay ahead of evolving attacks. With this program, our expert team will arm you with t...

Cb Customer Spotlight Series: How Purdue Federal Credit Union Achieves Critical System Lockdown

Featuring Dee Lucas, Sr. Network Administrator at Purdue Federal Credit Union Leading financial institution, Purdue Federal Credit Union, serves over 71,000 members nationwide. This makes security of the utmost importance for Sr. Network Administrator Dee Lucas who supports Purdue Federal’s SOC...

Carbon Black Announces Cb LiveOps, a New Offering on the Cb Predictive Security Cloud (PSC), Delivering Real-Time Query and Response

Today is another exciting day for Carbon Black! Earlier, we announced the release of Cb LiveOps™- the newest offering built on our Cb Predictive Security Cloud™ PSC. a platform delivering complete endpoint prevention, detection, and response, all from a single agent. Cb LiveOps extends core...

Case Study: A Cryptomining Attack — With an Assist From Advanced Malware Techniques

In Carbon Black's Quarterly Incident Response Threat Report QIRTR, some of the world’s leading incident response IR professionals reported seeing an uptick in lateral movement, counter incident response, and island-hopping attacks from motivated nation-states. In the case study below, Kroll notes...

THULAC Null Pointer Dereference Vulnerability

THULAC is a Chinese lexical analysis toolkit introduced by the Natural Language Processing and Social Humanities Computing Laboratory of Tsinghua University, which supports Chinese word segmentation and lexical annotation functions. A null pointer dereference vulnerability exists in the...

SC Media Awards Cb Defense, Cb ThreatSight 5 Out of 5 Stars

"During testing, Cb Defense performed as a top-quality endpoint security program…Great intuitive cloud platform with an armament of modern security technologies with a quick implementation into your business environment." - SC Media "Carbon Black also offers Cb ThreatSight as an add-on, which is...

Cb ThreatSight Investigation Reveals RETADUP Worm Leverages AutoIt to Launch Monero Cryptomining Campaign

While monitoring a customer’s environment, the Carbon Black ThreatSight team discovered a series of unusual alerts. Further investigation of the suspect processes revealed these alerts were related to an attacker leveraging the open-source Monero framework to launch a crypto-mining campaign. Afte...

CVE-2018-10407

An issue was discovered in Carbon Black Cb Response. A maliciously crafted Universal/fat binary can evade third-party code signing checks. By not completing full inspection of the Universal/fat binary, the user of the third-party tool will believe that the code is signed by Apple, but the malicio...

Code injection

An issue was discovered in Carbon Black Cb Response. A maliciously crafted Universal/fat binary can evade third-party code signing checks. By not completing full inspection of the Universal/fat binary, the user of the third-party tool will believe that the code is signed by Apple, but the malicio...

CVE-2018-10407

CVE-2018-10407 affects Carbon Black Cb Response. A maliciously crafted Universal/Fat binary can bypass third‑party code signing checks, causing the unsigned payload to execute while the signed Apple image is treated as legitimate. Exploitation relies on embedding unsigned Mach‑O binaries inside a...

CVE-2018-10407

An issue was discovered in Carbon Black Cb Response. A maliciously crafted Universal/fat binary can evade third-party code signing checks. By not completing full inspection of the Universal/fat binary, the user of the third-party tool will believe that the code is signed by Apple, but the malicio...

cb-content.com Open Redirect vulnerability

Open Bug Bounty ID: OBB-617610 Description| Value ---|--- Affected Website:| cb-content.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4...

cb-downloads.com Improper Access Control vulnerability

Open Bug Bounty ID: OBB-617609 Description| Value ---|--- Affected Website:| cb-downloads.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| IAC Improper Access Control / CWE-284 CVSSv3 Score:| 6.5...

Turning the Tables on Cyber Attackers

Today, Carbon Black joins the community of public companies NASDAQ: CBLK. While we are humbled and excited by this milestone, we also acknowledge there’s plenty of progress still to be made. For Carbon Black as a company and the industry as a whole, that progress starts with shifting the balance ...