Fortinet

FortinetSecurity

Spear Phishing Fileless Attack with CVE-2017-0199

Credit to Author: Bahare Sabouri and He Xu| Date: Tue, 30 May 2017 16:21:54 -0700

Introduction CVE-2017-0199 is a remote code execution vulnerability that exists in the way that Microsoft Office and WordPad parse specially crafted files. An attacker who successfully exploits this vulnerability can take control of an affected system and then install programs, view, change, or delete data, or create new accounts with full user rights. Microsoft issued a patch for this vulnerability April, and most security vendors have published alarms for it. Unfortunately, attacks targeting this vulnerability are still widely being used…

Read More
FortinetSecurity

The Power of Virtual Cell Wi-Fi

Credit to Author: Kaushik Dash, Harish Gnanasambandam, Vikas Banerjee| Date: Tue, 30 May 2017 09:23:26 -0700

Wireless access has not only revolutionized networks. It has profoundly changed our culture. It has transformed how and where we work, how we interact through social media, and how we stay connected with family and friends. The challenge we are now facing is Wi-Fi saturation. Given the number of connected devices online now, and the predictions for exponential growth over just the next few years, we need to ensure that we are building wireless networks that can accommodate both the volume of connections and connected devices coming, the increase…

Read More
FortinetSecurity

FortiVets: Remembering – and Hiring – our Veterans

Credit to Author: Stephan Tallent| Date: Fri, 26 May 2017 09:19:10 -0700

Many Americans see Memorial Day in the US as the holiday that kicks off summer. Stores are loaded with shiny new grills, bags of charcoal, and rows of filled propane tanks. Patio furniture is being dusted off while refrigerators are stuffed with marinating steaks, bowls of potato salad, and chilled beer waiting for friends and family for the traditional weekend barbeque. But Memorial Day is about much more than grilling a burger with a cold beverage in your hand. Memorial Day in the United States, observed every year on the last Monday of May,…

Read More
FortinetSecurity

Trends Affecting Managed Security Service Providers

Credit to Author: Bill McGee| Date: Thu, 25 May 2017 09:06:35 -0700

Given the very public explosion of ransomware, and an ever-growing list of other cyber threats, IT services providers are increasingly looking for ways to meet the insatiable demand for cybersecurity. In this article we will look at some of the trends and challenges facing the MSSP community. How has the cost and shortage of security talent empowered the MSS domain? There are two forces driving the growth of MSS – complexity and cost. The complexity of threats and regulations continues to grow, with no change in sight. On the cost side, there…

Read More
FortinetSecurity

Automating Security Operations: What It Takes to Defend Against Something Like WannaCry

Credit to Author: Douglas Jose Pereira| Date: Tue, 23 May 2017 15:37:42 -0700

A major challenge facing security vendors today is that most solutions and products are developed based on knowledge of previous threats that already exist. This makes many security solutions reactive by their very design, which is not a tenable strategy for facing the volume of new attacks and strategies arising today. This arms race of identifying new threats, then reacting has been the primary strategy since the dawn of malware: A new virus is identified and then security vendors write the antivirus signature to block it; a polymorphic virus…

Read More
FortinetSecurity

What It Takes to Successfully Defend Against WannaCry and Everything Else

Credit to Author: Douglas Jose Pereira| Date: Tue, 23 May 2017 12:23:43 -0700

A major challenge facing security vendors today is that most solutions and products are developed based on knowledge of previous threats that already exist. This makes many security solutions reactive by their very design, which is not a tenable strategy for facing the volume of new attacks and strategies arising today. This arms race of identifying new threats, then reacting has been the primary strategy since the dawn of malware: A new virus is identified and then security vendors write the antivirus signature to block it; a polymorphic virus…

Read More
FortinetSecurity

Byline: Artificial Intelligence: Cybersecurity Friend or Foe?

Credit to Author: Derek Manky| Date: Mon, 22 May 2017 07:41:32 -0700

​​​​​​​Security strategies need to undergo a radical evolution. Tomorrow’s security devices will need to see and interoperate with each other to recognize changes in the networked environment, anticipate new risks and automatically update and enforce policies. The devices must be able to monitor and share critical information and synchronize responses to detected threats.

Read More