This post was updated on January 27. See end of file for update. There has been a great explosion of chatter in the last day around Anonymous’ “Operation Last Resort” (a.k.a. #OpLastResort). The entities behind the various “official” communications around this operation have a sense of humor that we must point out (especially because if Read more…
Tags: Anonymous, Barrett Brown, Data Protection, Last Resort, malware, McAfee Labs, Network Security, OpLastResort, social networking, Swartz, twitter, USSC
Iranian infrastructure has been on the radar of cyberattackers for a couple of years. We have already witnessed organized and sophisticated attacks such as Stuxnet, Duqu, and similar assaults. Now we have seen yet another attack against Iran, this one primarily targeting the Microsoft SQL Server databases of some Iranian financial software. This attack has Read more…
Tags: Data Protection, financial software, Iran, malware, McAfee Labs, Microsoft SQL Server database, Narilam, trojan
We’ve seen it before, and we’ll see it again: Yahoo, Utah Department of Technology Service, LinkedIn, eHarmony – the list goes on. The number of database breaches through Q3 2012 has already surpassed the entirety of 2011, with more sure to come. In the latest McAfee Labs Threats Report, we saw a few new trends Read more…
Tags: data breach, database security, McAfee Labs Q3 Threat Report
News broke today of a large data breach against Yahoo Voices, resulting in more than 400,000 username/password combinations being posted in clear text. The compromise involved a basic SQL-injection attack against an exposed Yahoo server (dbb1.ac.bf1.yahoo.com). Similar to other recent events, the account data was reportedly stored in an unencrypted state. We see this type of attack Read more…
Tags: Database, sql attacks, SQL Injection, Yahoo!
About 2 months ago, the public got wind of what is thus far one of the largest US data breaches in 2012– and possibly the worst ever suffered by the state of Utah. The state’s Department of Technology Services had some 800,000 personal records (and 280,000 Social Security numbers) compromised in an attack that is Read more…
Tags: breach, Database, firewall, security, sensitive information, server, vulnerability
The more data you have, the more insight and knowledge you possess, right? But what happens when your data stores grow so large that securing and managing them effectively is no longer in the cards? A few extra gigabytes here and terabytes there, and before you know it, you’ve got a big security data problem. Read more…
Tags: Big Data, big security data, enterprise, enterprise security, epo, ePolicy Orchestrator, ESM, global threat intelligence, GTI, McAfee Risk Advisor, NitroView, security information and event management, SIEM
Posts in Database Security