Security

FortinetSecurity

Public Cloud Security: Making It a Business Enabler

Credit to Author: Jeannette Jarvis| Date: Mon, 04 Dec 2017 13:50:59 +0000

In general, if a cybercriminal is able to successfully launch an attack at an owner-operated IT infrastructure, they can also launch one at a cloud service provider. In fact, public cloud services have become highly attractive targets for cybercriminals. For them, breaking into a cloud service is like merging onto a superhighway that can deliver their little bundles of evil far and wide, potentially impacting hundreds or thousands of organizations with a single strike.

Read More
FortinetSecurity

Q&A with Bob Fortna President of Fortinet Federal Inc

Credit to Author: Shelly Scarpelli| Date: Mon, 04 Dec 2017 13:45:59 +0000

Bob Fortna joined Fortinet as president of Fortinet Federal Inc. earlier this year. We sat down with Bob to get his perspective on his new role and learn about what he envisions for Fortinet in supporting Federal agencies and partners.   As the Fortinet Federal Inc. leader, what do you see as the company’s role as a Federal agency partner? As prime targets for the most sophisticated adversaries seeking to impact national security, public safety, and civilian services, Federal Government agencies require the most comprehensive…

Read More
QuickHealSecurity

Beware of fake social media messages that talk about SMS-based Aadhaar-LIC linking

Credit to Author: Rajib Singha| Date: Mon, 04 Dec 2017 12:11:32 +0000

You might be aware that LIC policyholders must now link their Aadhaar and PAN to their policies according to a directive issued by the Government of India. The deadline for the Aadhaar-LIC linking is December 31, 2017. And unsurprisingly, fraudsters have started misusing news to their advantage. How? Read what…

Read More
FortinetSecurity

PowerDNS Recursor HTML/Script Injection Vulnerability – A Walkthrough

Credit to Author: Chris Navarrete| Date: Sat, 02 Dec 2017 15:50:59 +0000

PowerDNS Recursor is a high-end, high-performance resolving name server that powers the DNS resolution of at least a hundred million subscribers. The “Recursor” is one of two name server products whose primary goal is to act as resolving DNS server. On Aug. 7, 2017, I reported an XSS (cross-site scripting) vulnerability to PowerDNS and its Security Team. They assigned it the identifier CVE-2017-15092. In this report I will explain how I was able to identify and trigger the vulnerability.

Read More