Fortinet

Credit to Author: David Maciejak| Date: Thu, 13 Apr 2017 06:58:13 -0700

FortiGuard Labs has put together answers to some of the most frequently asked questions you may have about the new emerging technology called WebAssembly (WA). What is WebAssembly? WebAssembly is a low-level, portable, binary format for the web that aims to speed up web apps. It is designed to parse faster (up to 20X), and execute faster than JavaScript (JS). When was it announced? The WebAssembly Community Group was created in April 2015, with the mission of “promoting early-stage cross-browser collaboration on a new, portable,…

Credit to Author: Xiaopeng Zhang| Date: Thu, 13 Apr 2017 14:14:13 -0700

In every country and region in the world, tax season is also a time when we see a spike in scams, phishing, and targeted malware. The tax return season in the US is coming to the end. Have you filed your tax return yet? Did you receive any notifications from the IRS (the Internal Revenue Service) in your email?  We did, but not from the real IRS. (Remember, the IRS never communicates important information with taxpayers by email.) FortiGuard Labs recently collected a number of malware samples related to the current tax season in the US….

Credit to Author: Hemant Jain| Date: Thu, 13 Apr 2017 05:38:18 -0700

According to a recent prediction detailed in the Deloitte Global TMT Predictions 2017 report, incidents of DDoS are expected to rise to 10 million attacks during the year. The escalation of DDoS, according to them, is primarily due to the growing base of insecure IoT devices, readily available online instructions for unskilled attackers, and rising uplink data speeds. One of the solutions Deloitte Global has recommended is certification marks for connected devices. They propose that device vendors should obtain security certification for their…

Credit to Author: John Maddison| Date: Tue, 11 Apr 2017 06:05:40 -0700

Companies are building out flexible and scalable infrastructure with the use of private and public clouds. This makes maintaining a strong and consistent security posture both essential and difficult. To meet this challenge, Fortinet is enhancing its security capabilities across private, infrastructure, and application clouds through our Security Fabric. This ranges from increased scalability, new public cloud features, and SaaS visibility via a new CASB offering, all delivering optimal security performance at cloud-scale.

Credit to Author: Keith Rayle| Date: Mon, 10 Apr 2017 09:00:15 -0700

Investigate technologies that employ automation to analyze suspicious attachments, Web sites, and other avenues of attack. Fortinet delivers proactive malware identification and an unparalleled depth of analysis capabilities. This includes machine learning analysis capabilities backed up by a dedicated team of human analysts. Ask how FortiGuard Cyber Threat Intelligence services can be leveraged with the Fortinet Security Fabric to provide the strongest malware protection available in the industry.

Credit to Author: Rajoo Nagar| Date: Mon, 10 Apr 2017 08:35:23 -0700

FortiGate 7060E – Delivering Layer 7 Security without Performance Compromises In today’s cloud scale data centers, security is front and center. The changing threat landscape, more and increasingly diverse threats, and much larger attack surfaces have made security top of mind for CIOs and IT teams worldwide. Networks are undergoing a radical transformation. With over 35B IoT devices attaching to networks, and a global cloud revolution fueled by a hyper-connected digital economy and driven by data, by 2020 almost all traffic entering…

Credit to Author: Jasper Manuel and Artem Semenchenko | Date: Wed, 05 Apr 2017 08:58:18 -0700

In part 1 of FortiGuard Labs’ analysis of a new variant of the BADNEWS backdoor, which is actively being used in the MONSOON APT campaign, we did a deep technical analysis of what this backdoor of capable of and how the bad guys control it using the command and control server. In this part of the analysis, we will try to discover who might be behind the distribution of these files.

Credit to Author: Jasper Manuel and Artem Semenchenko| Date: Wed, 05 Apr 2017 08:58:03 -0700

Three weeks ago, FortiGuard Labs, along with @_ddoxer (Roland de la Paz), using VirusTotal Intelligence queries, spotted a document with the politically themed file name (Senate_panel.doc). This malicious RTF file takes advantage of the vulnerability CVE-2015-1641.