Computer Security Articles – Page 1928 – RSS Reader for Computer Security Articles

Credit to Author: John Maddison| Date: Tue, 12 Dec 2017 13:45:59 +0000

The transition to hyperconnected networks, such as smart cities and connected utility services, is driving the convergence of IT, OT, and IoT networks. To successfully defend these integrated networks, organizations need an architecture that scales across the entire infrastructure to provide unified visibility and control, distributed segmentation, and integrated protection.

Fortinet Security

December 12, 2017 admin

What is the Appropriate Level of Cybersecurity for OT Systems? Cyber Insurers Want to Know

Credit to Author: Ronald J. Hebert, Jr, Michelle Balderson| Date: Tue, 12 Dec 2017 13:45:59 +0000

So, how much should a company invest in the cybersecurity of their OT systems and what is the appropriate level of cybersecurity required for them?

Kaspersky Security

December 12, 2017 admin

Protecting NAS from malware

Credit to Author: Anna Markovskaya| Date: Tue, 12 Dec 2017 14:00:04 +0000

Do you use NAS for backup? We’ll tell you how to protect it from new threats

Security TrendMicro

December 12, 2017 admin

Applying Lean to Information Risk Management

Credit to Author: William “Bill” Malik (CISA VP Infrastructure Strategies)| Date: Tue, 12 Dec 2017 13:00:36 +0000

Lean Manufacturing brings significant benefits to industry, including cost reduction, quality improvement, reduced cycle time, and greater customer satisfaction (See “The Machine that Changed the World”, Womak, J., Jones, D., and Roos, D., Free, Press, 1990 for the groundbreaking analysis of Toyota’s Lean Production). Can Information Technology organizations apply Lean to cybersecurity? The core challenge…

Security Wired

December 12, 2017 admin

Exclusive: Tracing ISIS’ Weapons Supply Chain—Back to the US

Credit to Author: Brian Castner| Date: Tue, 12 Dec 2017 11:00:00 +0000

The Islamic State is designing and mass-producing its own advanced munitions—with parts from all over the world.

ScadaICS Schneider

December 12, 2017 admin

Protected: Living and working with a Handicap — Why diversity and inclusion matter at a work place

Credit to Author: Gosia Gorska| Date: Tue, 12 Dec 2017 09:59:44 +0000

There is no excerpt because this is a protected post.

The post Protected: Living and working with a Handicap — Why diversity and inclusion matter at a work place appeared first on Schneider Electric Blog.

Independent Securiteam

December 11, 2017 admin

SSD Advisory – QNAP QTS Unauthenticated Remote Code Execution

Credit to Author: SSD / Maor Schwartz| Date: Mon, 11 Dec 2017 10:16:42 +0000

Vulnerability Summary The following advisory describes a memory corruption vulnerability that can lead to an unauthenticated remote code execution in QNAP QTS versions 4.3.x and 4.2.x, including the 4.3.3.0299. QNAP Systems, Inc. is “a Taiwanese corporation that specializes in providing networked solutions for file sharing, virtualization, storage management and surveillance applications to address corporate, SMB, … Continue reading SSD Advisory – QNAP QTS Unauthenticated Remote Code Execution

Independent Securiteam

December 11, 2017 admin

SSD安全公告-Endian防火墙从存储型XSS到远程命令执行

Credit to Author: SSD / Maor Schwartz| Date: Mon, 11 Dec 2017 09:17:06 +0000

漏洞概要以下安全公告描述了在Endian防火墙5.0.3版本中存在的一个存储型XSS漏洞，成功利用该漏洞可造成远程代码执行。 Endian防火墙是一个“专注Linux安全的发行版本,，它是一个独立的，统一的安全管理操作系统。 Endian防火墙基于强化的Linux操作系统。” 漏洞提交者一位独立的安全研究者向 Beyond Security 的 SSD 报告了该漏洞厂商响应厂商已经发布针对该漏洞的补丁。获取更多信息: https://help.endian.com/hc/en-us/articles/115012996087 漏洞详细信息 Endian防火墙是基于Linux的防火墙/网关。它使用不同的颜色来标记其trusted，untrusted 和DMZ网络：绿色 – trusted网络红色 – untrusted 网络橙色 – DMZ 蓝色 – WiFi 用户可控的输入没有经过充分过滤，通过从untrusted 网络（红色）发送电子邮件到DMZ上的邮件服务器（橙色），Endian防火墙会把来自untrusted 网络的电子邮件隔离。当来自trusted网络（绿色）的用户登录到Endian Firewall WebAdmin并检查隔离区中的电子邮件（Services > Mail Quarantine > quarantine）时，会执行存储型XSS脚本。漏洞证明配置环境安装Endian防火墙虚拟机并设置防火墙网络接口为以下IP：绿色 – 192.168.0.190 红色 – 192.168.0.192 设置以下密码： Web管理员（admin/Password1） SSH管理员（root/Password1）连接Webadmin接口，添加ORANGE网络并更改GREEN … Continue reading SSD安全公告-Endian防火墙从存储型XSS到远程命令执行