Follow along as McAfee experts examine the security industry from a big-picture angle. Learn valuable lessons from their analysis of current events, and find out what McAfee is doing to increase security for its customers.
The recent press activity around the New York Times Cyberattack, and the response from their vendor are causing quite a stir in the malware protection community – so much in fact that some journalists have gone as far as claiming that “antivirus protection alone barely represents a speed bump to determined hackers” Andy Greenburg, Forbes Surprisingly, Read more…
Tags: NY Times
Late last week, reports began to surface that the Israeli police (along with other regional law enforcement) were targeted by a malware attack. The entry vector was described as a phishing campaign sent from Benny Gantz (head of the Israeli Defense Forces). Initially, details and indicators around the malware were beyond sparse. Aside from the FROM: address, Read more…
Tags: antivirus, Cyber Security Mom, Endpoint Protection, global threat intelligence, internet security, Israel, labs, malware, McAfee Labs, Network Security, phishing, security, spam, ValidEdge, web protection, XtremeRAT
News broke today of a large data breach against Yahoo Voices, resulting in more than 400,000 username/password combinations being posted in clear text. The compromise involved a basic SQL-injection attack against an exposed Yahoo server (dbb1.ac.bf1.yahoo.com). Similar to other recent events, the account data was reportedly stored in an unencrypted state. We see this type of attack Read more…
Tags: Database, sql attacks, SQL Injection, Yahoo!
A few weeks ago, Iran reported intensified cyberattacks on its energy sector that they observed as a direct continuation of the Stuxnet and Duqu attacks. Over the weekend, the IR Cert (Iran’s emergency response team) published a new report that describes this attack as Flame and/or Flamer. Some other news agencies also called the attack Read more…
Tags: Advanced Persistent Threat, antivirus, APT, Cybercrime, cyberespionage, cyberwarfare, espionage, global threat intelligence, malware, McAfee Labs, targeted attack
I was in Madrid speaking at a conference a couple of months ago, and arriving after one of my favorite trans-Atlantic flights (you know the ones, where the ratio of screaming children to adults is not conducive to rest or even playing Angry Birds) I was excited to take one of the citi-cabs which have Read more…
Tags: automotive
Blocking spam is the top job of your email security solution. When it is not working well, the user complaints come flying in. An effective anti-spam solution is critically important to have, but are spam catch rates the important criteria for selecting an email security solution? Not anymore. Virus Bulletin recently published its January anti-spam Read more…
Tags: Compliance, DLP, Email & Web Security, Risk and Compliance, spam
The second Tuesday of every month (“Patch Tuesday”) is a very busy day for information security warriors. They have to digest a flood of information from affected vendors (primarily Microsoft and Adobe) and then cross-check and correlate that against whatever their security vendors say. They have to take into account their actual environments, the assets and resources Read more…
Today we announced a technology enhancement in our threat intelligence portfolio: We’re using McAfee Global Threat Intelligence to hunt for new malware. McAfee has led the industry in defining and building our Global Threat Intelligence cloud and integrating it into our products. Now our global footprint of millions of cloud-connected consumer and enterprise PCs, gateways, Read more…
Earlier this week, the alleged mastermind behind Mariposa – one of the biggest viruses we’ve seen to date – was arrested in Slovenia. The investigation leading up to his capture is a perfect indicator of what we’re up against in our fight against cybercrime. It’s also another reason why we spend so much time educating Read more…
Tags: Cybercrime, Mariposa, Operation Aurora
This week, representatives of BP told Congress that the massive Gulf oil spill was not their fault. BP claims the blame should be placed on another company who produced a key safety device that failed. That company, of course, claims yet another company is responsible for doing poor quality work. So how does this relate to Read more…
Tags: Risk and Compliance, Vulnerability Manager, web security
Posts in Security Perspectives