Last month, Microsoft issued 79 patches and among these patches was one for an old Windows XP operating system, which was officially abandoned by Microsoft 5 years ago. The last time Microsoft released an update like this was months before the WannaCry ransomware attacks of 2017 wreaked havoc. Even Microsoft warned of the similarities with Simon Pope, director of incident response for the Microsoft Security Response Center writing, “Any future malware that exploits this vulnerability could propagate from vulnerable computer to vulnerable computer in a similar way as the WannaCry malware spread across the globe in 2017. It is highly likely that malicious actors will write an exploit for this vulnerability and incorporate it into their malware.”
Read More
Tags:
ransomware,
wannacry,
isolation technology,
Web Security,
ZeroTrust
While this post is intended to be a little tongue-in-cheek for readers, it’s been written to provoke discussion on how organizations continue to do the same things they have done for the last 15 years, without thinking of all the issues they bring with them…
Read More
Tags:
phishing,
isolation,
ransomware,
spear-phishing,
web isolation,
malvertising
The past few years, the major studios and production companies that create movies, broadcast television, streaming content, and even online and video games have been under cyber attack.
Read More
Tags:
malware,
isolation,
ransomware,
malicious code,
cyber attacks,
phishing attack
It’s another day and another cyber attack headline in the media. This time it’s another ransomware-style attack; this one is called “Bad Rabbit”. According to media reports, it has impacted organizations in Russia and Ukraine mostly, with reports of some businesses in Turkey and Germany (and possibly in Poland and Japan) also being affected (that we know of so far).
Read More
Tags:
ransomware,
credential theft,
cyber threats,
web isolation,
isolation technology,
javascript,
bad rabbit
Spear phishing attacks continue to plague businesses of all sizes, across all sectors. Detection of these messages remains an impossible feat. Spear phishing messages plague everyone and their intent ranges from delivering malware or ransomware, to stealing passwords and personal information, such as bank account information. All of these things have a high value in the online criminal world, hence why spear phishing is the most popular tool in the cyber attack arsenal today.
Read More
Tags:
ransomware,
anti-phishing,
spear-phishing,
cyber attacks,
cyber training,
cyber security
The financial services industry is consistently among the most highly targeted industries for cyberattacks. Financial services institutions (FSIs) are a popular and frequent focus of attackers because, to quote famed bank robber Willie Sutton, when asked why he robbed banks: “That’s where the money’s at.”
Read More
Tags:
malware,
phishing,
isolation,
ransomware,
credential theft,
drive-by exploits,
phishing prevention,
spear-phishing,
watering hole attacks,
phishing attacks,
financial services industry,
cyberattacks,
banking credentials,
keyloggers,
employee credential theft
Lately, instances of malware with built-in worm functionality have been on the rise. The WannaCry cyberattack is a perfect example. Although the malware was classified as ransomware, to increase the number of infections, the attackers used an SMB exploit to propagate it laterally within enterprises.
Read More
Tags:
malware,
isolation,
ransomware,
cyber threats,
cyber attacks,
wannacry,
web isolation,
worm,
Houdini,
remote access trojan
While Black Hat USA 2017 ended three weeks ago, I wanted to share my thoughts and experiences on my very first Black Hat USA 2017 after being in security for 15+ years.
Read More
Tags:
malware,
cybersecurity,
isolation,
ransomware,
credential theft,
cyber theft,
black hat,
cyber attacks,
cyber training,
authentication and application security,
spearphishing,
Black Hat Conference,
Ichthyology,
phishing training,
phishing attacks
Whilst working with a customer on a web isolation project over the past two weeks, I was passed on a query based on a report published by Recorded Future in December 2016. The report was a summary of what were the popular vulnerabilities used in exploit kits by attackers in 2016 (source: RecordedFuture).
Read More
Tags:
ransomware,
malware vulnerabilities,
web-based vulnerabilities,
web isolation,
malvertising
Another week, another massive cyber attack hits the world. Since the Wikileaks share, powerful new hacking tools are readily available to anyone in the world. This will not be the last attack leveraging these newly available weapons.
Read More
Tags:
cybersecurity,
isolation,
ransomware,
security strategy,
anti-phishing,
bitcoin,
cyber threats,
cyber attacks,
remote browsers,
WannaCrypt,
GoldenEye
