In late 2011, the FBI released documents and data focusing on “Operation Ghost Click.” This malicious operation, leveraging a variety of DNSChanger-type malware, was defined by the FBI as an “international cyber ring that infected millions of computers.” Associated malware samples and events can be traced back several years, and multiple platforms were targeted. To this day many remain Read more…
Tags: Cybercrime, Endpoint Protection, enterprise, global threat intelligence, malware, McAfee, Risk and Compliance
Today we released our Fourth Quarter 2011 Threat Report, revealing that malware surpassed the our estimate of 75 million unique malware samples last year. Although the release of new malware slowed a bit in Q4, mobile malware continued to increase and recorded its busiest year to date. Malware The overall growth of PC-based malware actually Read more…
Tags: Android, Cybercrime, data breach, Data Protection, Endpoint Protection, enterprise, facebook, global threat intelligence, identity protection, Identity thieves and cybercriminals, malware, mobile security, Network Security, Risk and Compliance, security, social networking, spam
I recently read a Gabriel Consulting Group survey entitled 2011 Data Center Security Survey: Virtualization & Clouds. One statistic that really struck me was that approximately 65 percent of the respondents said that they were going to use “the same security mechanisms for physical and virtual systems.” This is an amazing statistic since most security Read more…
Tags: Cloud computing, data center security, enterprise, VIrtual Machines, Virtualization
In early April, I wrote about the famed “LizaMoon” SQL-injection attacks. I said it then, and I’ll say it again now: SQL-injection (SQLi) attacks are a constant. Some of these attacks are more visible than others. Some adversaries find intelligent ways to hide their tracks so as not to splatter evidence of their misdeeds all over various search Read more…
Tags: Cybercrime, Data Protection, database security, enterprise, lizamoon, malware, mass sql injection, Network Security, sql attacks, SQL Injection, urchin.js
Evolution is usually something we see after hundreds of years of gradual change. But with the volume and breadth of technological advancements in the last decade, the process of evolution continues to speed up. As a senior vice president and general manager of McAfee Content & Cloud Security, I am really fortunate to be in Read more…
Tags: Cloud computing, cloud security, enterprise
Gabriel Consulting Group (GCG), an independent analyst firm, today released key findings of its 2011 Data Center Security Survey, a report focused on security issues and solutions among 147 enterprise data center managers responsible for data centers of all sizes. The results were startling, as is often the case with surveys, and so we thought Read more…
Tags: cloud, data center, data center security, enterprise, Virtualization
I recently performed a penetration test of a transportation company in the Midwest. Save for a few low-severity vulnerabilities, Company X had a well-managed public-facing network infrastructure. Satisfied with the status of their network security, I turned my attention to the human network. Searching for Company X on sites like Twitter, Facebook, and LinkedIn, I Read more…
Tags: enterprise, Information Security, privacy, social media
McAfee Security Certification Program Today, McAfee is excited to announce the addition of two new exams and certifications to our McAfee Security Certification Program. We launched the program back in January with two initial assessments, promising to add to our curriculum as time went on. The two new certifications, McAfee Certified Product Specialist – Network Read more…
Tags: certification, enterprise, security
Welcome to another week in infosec with Friday Security Highlights. Yesterday from the @McAfeeBusiness Twitter handle, we live-tweeted the Dark Reading & InformationWeek virtual session The Aftermath of a Security Breach – Getting the Ship Righted Again. We tuned in as speakers and infosec thought leaders Jerry Johnson (@jerryjpnnl), Ernest McDuffie, and Rich Mogull (@rmogull) Read more…
Tags: #SecChat, Cybercrime, data breach, enterprise, Network Security
Visit any news site on the Web, and undoubtedly you’ll come across a barrage of articles publicizing the details of yet another data breach. With the prominence of SQL injection attacks, and malicious insiders and hackers exploiting sensitive data stored on unpatched and vulnerable databases, enterprise organizations have found themselves reevaluating their security strategies. Following Read more…
Posts tagged under enterprise