Fortinet

Credit to Author: Jasper Manuel and Artem Semenchenko | Date: Wed, 05 Apr 2017 08:58:18 -0700

In part 1 of FortiGuard Labs’ analysis of a new variant of the BADNEWS backdoor, which is actively being used in the MONSOON APT campaign, we did a deep technical analysis of what this backdoor of capable of and how the bad guys control it using the command and control server. In this part of the analysis, we will try to discover who might be behind the distribution of these files.

Credit to Author: Jasper Manuel and Artem Semenchenko| Date: Wed, 05 Apr 2017 08:58:03 -0700

Three weeks ago, FortiGuard Labs, along with @_ddoxer (Roland de la Paz), using VirusTotal Intelligence queries, spotted a document with the politically themed file name (Senate_panel.doc). This malicious RTF file takes advantage of the vulnerability CVE-2015-1641.

Credit to Author: John Welton| Date: Fri, 07 Apr 2017 07:37:56 -0700

What follows is Part 2 of a two-part interview with Fortinet’s James Cabe on the journey to security automation. Recognizing that most organizations are not prepared to make the jump to automation today, the following presents a realistic timeline to get from an intelligent network to truly automated, intent-based security, and a discussion of what that intent-based security will look like. What is the timeline for getting to automation and intent-based security? When we talk about the evolution of security, we talk about what it should…

Credit to Author: John Welton| Date: Fri, 07 Apr 2017 07:36:58 -0700

As the threat landscape continues to evolve and the cyberskills gap remains a challenge, automation and intent-based security are becoming timely discussions when thinking about the future of cybersecurity. Fortinet’s James Cabe shares some perspective from the trenches. What follows is Part 1 of a two-part overview of the path to automation, beginning with where we need to be and what it will take to get there. Part 2 will discuss a realistic timeline to get from an intelligent network to truly automated, intent-based security, as well as…

Credit to Author: Prasanna Tapkire| Date: Fri, 07 Apr 2017 07:10:38 -0700

Today’s cybercriminals run their operations like a business, and to be successful they constantly invest in the latest tools in order to circumvent security and breach the networks of their targeted victims. As a result, today’s security landscape is highly dynamic and constantly evolving.

Credit to Author: Darlene Gannon| Date: Thu, 06 Apr 2017 04:14:37 -0700

Q&A with Fraser Street, VP of Technical Alliances at Silver Peak Fortinet sits down with Fabric-Ready Partner, Silver Peak to learn what’s top of mind for its customers, the key IT challenges they are facing and how Silver Peak’s approach to integrated security is helping drive business and customer success. Tell us a bit about Silver Peak’s business and the types of customers that you serve. Silver Peak was founded in 2004 and is a global leader in broadband and hybrid WAN solutions. The company serves more than 2000…

Credit to Author: Kai Lu| Date: Wed, 05 Apr 2017 03:33:38 -0700

During the process of analyzing android malware, we usually meet some APK samples which hide or encrypt their main logic code.  Only at some point does the actual code exist in the memory, so we need to find the right time to extract it.  In this blog, I present a case study on how to repair a DEX file in which some key methods are erased with NOPs and decrypted dynamically when ready to be executed. Note: All the following analysis is based on android-4.4.2_r1(KOT49H). Let’s start our journey! First, I open the classes.dex…

Credit to Author: Susan Biddle| Date: Wed, 05 Apr 2017 05:50:26 -0700

On February 21, Hussein Syed, Chief Information Security Officer at Barnabas Health System, and Ladi Adefala, Senior Security Strategist at Fortinet, led a roundtable discussion at HIMSS17 about the evolving challenges of securing the next-generation healthcare enterprise. The session was geared toward providing attendees with information around the current threats targeting the healthcare industry, how organizations can align security to the progressive business model, and the emerging trends in security practices that are protecting organizations…