Fortinet

Credit to Author: Kushal Arvind Shah| Date: Thu, 22 Jun 2017 01:00:00 +0000

This past June 17th and 18th, 2017, Google hosted their second annual Capture The Flag (CTF) competition. The Google team created security challenges and puzzles that contestants were able to earn points for solving. It’s a clever way to leverage the security community to help protect Google users, and the web as a whole. Last year, over 2,400 teams competed, and this year the number was even higher. FortiGuard Labs decided to pull together a team and then write up a report on the experience. So, first things first, this challenge was…

Credit to Author: Hemant Jain| Date: Tue, 20 Jun 2017 12:56:00 +0000

Blockchain is a shared and continuously reconciled database used to maintain a list of digital records, called blocks. It is quickly becoming an important tool not just for financial information, but also for managing and recording virtually all types of data, such as medical and other records, identity management, and transaction processing. Because a blockchain database is distributed and interconnected, it provides several essential services. The first is transparency. Because data is embedded within the network as a whole, it is by definition…

Credit to Author: Drew Del Matto| Date: Mon, 19 Jun 2017 12:56:00 +0000

In the context of digital trust, effective cybersecurity can become an essential enabler of digital transformation. In other words, if organizations and users can’t trust their data, and trust that it is safe, they will not engage, and the Digital Economy will fail.

Credit to Author: Susan Biddle| Date: Fri, 16 Jun 2017 13:04:00 +0000

Nine out of ten healthcare organizations have suffered a breach in the past two years, according to a new Ponemon study, and the data shows that these breaches could be costing the industry upwards of $6 billion. When analyzing the sources of these breaches, it should come as no surprise that criminal attacks represent more than half of the total as healthcare records provide a treasure trove of valuable data. The remainder of the breaches tends to result from internal issues like employee mistakes, third-party snags, and stolen connected devices. While…

Credit to Author: Susan Biddle| Date: Thu, 15 Jun 2017 13:29:00 +0000

The Department of Homeland Security (DHS) has identified 16 sectors that have been determined to be designated as critical infrastructure due to the debilitating effect on security, national economic security, national public health or safety, or any combination that would result from any of these sectors being compromised. Included in this list of 16 is the Government Facilities Sector, which covers, “a wide variety of buildings, located in the United States and overseas, that are owned or leased by federal, state, local, and tribal governments.”…

Credit to Author: Honggang Ren| Date: Wed, 14 Jun 2017 16:19:29 +0000

Summary In December 2016, FortiGuard Labs discovered and reported a WINS Server remote memory corruption vulnerability in Microsoft Windows Server. In June of 2017, Microsoft replied to FortiGuard Labs, saying, "a fix would require a complete overhaul of the code to be considered comprehensive. The functionality provided by WINS was replaced by DNS and Microsoft has advised customers to migrate away from it." That is, Microsoft will not be patching this vulnerability due to the amount of work that would be required. Instead, Microsoft…

Credit to Author: Derek Manky| Date: Wed, 14 Jun 2017 13:02:02 +0000

The recent WannaCry attack was interesting for a couple of reasons. First, the speed and scale of the attack was impressive. Over the course of a couple of days, hundreds of thousands of systems were affected and disrupted. Second, it also unveiled a disturbing trend. The attack malware exploited a known vulnerability that not only had been revealed through the highly public release of stolen cyber tools, but Microsoft had also released a patch for the targeted vulnerability over two months before. Which means that the scale of the attack was…

Credit to Author: Dave Morrissey| Date: Tue, 13 Jun 2017 17:05:35 +0000

Fortinet is proud to announce that our FortiSIEM solution is now available for the AWS Marketplace. Fortinet’s auto scaling security solution provides the resources needed to help with deployment in order to optimize AWS networks. FortiSIEM for AWS provides essential security services for cloud environments