Month: February 2017

(Insider Story)

Read More
FortinetSecurity

Ransomware-as-a-Service: Rampant in the Underground Black Market

Credit to Author: Rommel Joven| Date: Thu, 16 Feb 2017 18:32:03 -0800

Given the popularity and success of ransomware, it is no surprise that malware authors have been developing more ransomware than ever before. Last year’s cost of ransomware attacks reached $1 billion, which not only shows how this affects businesses, but for cybercriminals the potential pay-out for cyber-extortion can be very lucrative. The rise of ransomware infections may also be attributed to the attractiveness growing availability of Ransomware-as-a-Service (Raas). Ransomware authors posts are now developing user-friendly…

Read More
FortinetSecurity

PHPMailer Powered – Use It, But Also Remember to Update It

Credit to Author: Tien Phan | Date: Thu, 16 Feb 2017 17:55:21 -0800

At the end of last year, a critical vulnerability in PHPMailer that affected millions of websites – CVE-2016-10033 –  was discovered by Polish security researcher Dawid. This vulnerability allows an attacker to compromise the target’s web application by executing remote code on the vulnerable web server. There are numerous open source web applications that use PHPMailer as their main library for sending emails, including WordPress, Joomla, Yii, SugarCRM… More than a month after PHPMailer released a patch for this critical…

Read More
ComputerWorldIndependent

Experts at RSA offer up their best cybersecurity advice

Credit to Author: Michael Kan| Date: Thu, 16 Feb 2017 16:34:00 -0800

Come to the RSA show, and you’ll find plenty of cybersecurity technology. The top vendors from across the industry are here, showing products for fighting ransomware, preventing data breaches and more.

But even the best security software is useless if users and businesses aren’t taking the right steps to protect themselves. So we asked experts at the show for their best cybersecurity tips.

Joe Stewart, director of malware research at Dell SecureWorks 

He advises everyone to set up two-factor authentication to protect their internet accounts, especially email. It can be particularly useful when stopping hackers who are trying to steal login passwords from users, whether through malware or email phishing schemes.

To read this article in full or to leave a comment, please click here

Read More
FortinetSecurity

RSA 2017 Roundup

Credit to Author: Bill McGee| Date: Thu, 16 Feb 2017 16:03:03 -0800

RSA 2017 is a wrap. The final sessions are being recorded, the coat check area is filled with luggage, and the smell of propane is filling the show floors as forklifts begin to deliver packing crates to this year’s crop of security vendors. As expected, the hottest security topics and offerings were related to IoT and the cloud. Threat intelligence and SOCs were also top of mind as companies try to get a handle on the deluge of data and devices flooding their networks. In spite of the veneer of innovation, however, for far too many vendors…

Read More