How IOC Sharing Will Help Us Build a More Secure Healthcare Sector

At Trend Micro we work hard every day to reduce the risk posed by cyber attacks from hacktavists, transnational cybercriminals, and cyber espionage groups. Nowhere is this more pertinent than in the healthcare industry, where everything from data breaches to ransomware attacks impacting medical...

WannaCry and the Executive Order

Last week, The White House released its long awaited Executive Order EO, Strengthening the Cybersecurity of Federal Networks and Critical Infrastructure, ironically enough during the same week we experienced the largest single ransomware attack that, by some estimates, has affected more than...

Lines Around Cyber Threat Intelligence Sharing Blurring

SINT MAARTEN—The rift between between threat intelligence services, private companies, and the government is getting muddier around information sharing. Catherine Lotrionte, the Associate Director of the Institute for Law, Science and Global Security at Georgetown University, described the some o...

DHS Chairman Paints Bleak U.S. Cybersecurity Picture

SAN FRANCISCO – The United States is losing ground against its adversaries as illustrated by reports of Russian and Chinese hacking of U.S. interests, and breaches against private companies such as Yahoo, said Rep. Michael McCaul R-TX, chairman of the House Committee on Homeland Security, during ...

[SECURITY] Fedora 23 Update: elog-3.1.1-7.fc23

ELOG is part of a family of applications known as weblogs. Their general purpose is: 1. To make it easy for people to put information online in a chronological fashion, in the form of short, time-stamped text messages "entries" with optional HTML markup for presentation, and optional file...

Malware Information Sharing Platform Insecure Temporary File Creation Vulnerability

The Malware Information Sharing Platform MISP is an open source software solution for collecting, storing, distributing and sharing cybersecurity metrics and analyzing cybersecurity events and malware. A security vulnerability exists in the app/Controller/TemplatesController.php file in MISP...

[SECURITY] Fedora 25 Update: elog-3.1.1-7.fc25

ELOG is part of a family of applications known as weblogs. Their general purpose is: 1. To make it easy for people to put information online in a chronological fashion, in the form of short, time-stamped text messages "entries" with optional HTML markup for presentation, and optional file...

CVE-2015-5720

Multiple cross-site scripting XSS vulnerabilities in the template-creation feature in Malware Information Sharing Platform MISP before 2.3.90 allow remote attackers to inject arbitrary web script or HTML via vectors involving 1 add.ctp, 2 edit.ctp, and 3 ajaxification.js...

Free Cross Platform Information Sharing: DemonSaw

THE FUTURE OF INFORMATION SHARING Finally, simple and truly secure sharing is available – for free – across every platform Demonsaw is a new type of information sharing application that allows you to share your files securely. It’s the next leap in the evolution of a free internet, and the debut ...

SWIFT Urges Collaboration on Financial Security

The SWIFT banking network on Friday updated financial institutions worldwide of new security resources it has developed in the wake of massive fraud. Officials also reminded banks of their role in securing their respective infrastructures. Banks in Bangladesh, Vietnam and Ecuador have been...

Misunderstanding APT Indicators of Compromise

Threatpost Op-Ed is a regular feature where experts contribute essays and commentary on what’s happening in security and privacy. Today’s contributors are Dave Dittrich and Katherine Carpenter. Reports of APT activities detail compromises spanning multiple organizations, sectors, industry...

Modern Defenders Share, Visualize and Succeed

TENERIFE, Spain – Network defenders who rely solely on lists of assets to protect are running a fool’s errand. Instead, it’s crucial to think in graphs to not only visualize threats, but also to understand network edges, and dependencies between assets and accounts in order to be able to capture...

What You Need to Know From the Cybersecurity Act of 2015: Part One

On Dec. 18, 2015, President Obama signed into law an omnibus spending bill that included the Cybersecurity Act of 2015 "The Act". The Act was a compromise of cybersecurity information sharing bills that passed the House and Senate earlier in 2015. It creates a voluntary process for sharing...

FDA Issues Guidelines on Medical Device Cybersecurity

The Food and Drug Administration FDA issued a new set of draft guidelines on Friday in hopes that medical device manufacturers not only address cybersecurity risks before they design products, but also during the maintenance of those products. FDA outlines cybersecurity recommendations for medica...

CISA Passes Senate Without Addressing Privacy Concerns

To the consternation of many — tech companies, privacy advocates, and civil liberties groups included — members of the Senate voted overwhelmingly Tuesday to pass a version of the Cybersecurity Information Sharing Act, a bill that many opposed argue will lead to continued pervasive government...

HackerOne Vulnerability Coordination Maturity Model

The proliferation of independent and vendor-sponsored bug bounties has not only put some money in researchers’ pockets, but has also forced enterprises—and software makers—to put processes in place to handle outside bug reports. “Saying you want one is not enough,” said Katie Moussouris, chief...

Facebook ThreatExchange Information Sharing

As Facebook’s ThreatExchange information-sharing platform hits its six-month milestone, the social network today announced that its closing in on 100 participants and has streamlined the application process. ThreatExchange was launched in February as a free vehicle for sharing threat and attack...

DHS Raises Privacy Concerns With Senate Cyber Threat Sharing Bill

A major information-sharing bill that’s in the Senate right now would allow private organizations to share threat data with any government agency, something that the Department of Homeland Security says could have severe privacy implications and cause confusion and inefficiencies inside the feder...

U.S. and Japan to Cooperate on Cybersecurity, Information Sharing

The United States and Japan have agreed to cooperate more closely on cybersecurity and information sharing initiatives as a way to help both countries defend against future threats and attacks. The new initiative will include a variety of components, most notably cooperation during serious...

Threat Intelligence Sharing Still Seen as a Challenge

SAN FRANCISCO–The discussion about information sharing has been going on in the security community since before there was a security community, but the tone and shape of the conversation have changed recently thanks to an executive order from the Obama administration and the relentless drumbeat o...