article thumbnail

15+ Years of Loading Threat Intel into SIEM: Why Does This Still Suck?

Anton on Security

Specifically, how can we detect better usingTI? Before we get to the current answer, let me present my 2019 answer: Detecting Threats by Matching Threat Intel to LogsOh Really? Jul 2019). What can we do to make TI work better inside yourSIEM?

article thumbnail

10 Vendors Making Product Announcements at RSA Conference 2019

eSecurity Planet

Product announcements at the 2019 RSA Conference spanned email security, container security, threat detection, SIEM, EDR and cloud security.

Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

Anton’s Security Blog Quarterly Q3 2024

Anton on Security

Dall-E via Copilot, prompt “security blog quarterly, steampunk” Top 7 posts with the most lifetime views (excluding paper announcement blogs): Security Correlation Then and Now: A Sad Truth About SIEM (2019!) Can We Have “Detection as Code”? Does the World Need Cloud Detection and Response (CDR)?” “Use Use Cloud Securely?

article thumbnail

ASyncRat surpasses Dridex, TrickBot and Emotet to become dominant email threat

Malwarebytes

As cybercriminals adapted and restrictions eased, detection numbers surged again in 2021, on Windows business machines and home computers, and on Macs. Windows malware detections from January 2019 to May 2022. Top 10 Windows malware detection categories 2021. Dramatic change in email detections.

article thumbnail

Botnet operators target multiple zero-day flaws in LILIN DVRs

Security Affairs

According to the Chinese security firm Qihoo 360’s Netlab team, operators of several botnets , including Chalubo , FBot , and Moobot , targeting LILIN DVRs at least since August 30, 2019. ” reads the advisory published by Netlab.

Firmware 139
article thumbnail

The Changing Face of Data Security in Australia and New Zealand

Thales Cloud Protection & Licensing

The traditional focus on security has been on breach prevention and threat detection but these can only go so far. Among some of the interesting key findings of the Thales 2019 Data Threat Report-Australia/New Zealand Edition are: 95% of Australian/New Zealand organisations use sensitive data in digitally transformative technologies.

article thumbnail

Financial Cyberthreats in 2020

SecureList

This research is a continuation of our annual financial threat reports ( 2019 , 2018 and 2017 ) providing an overview of the latest trends and key events across the financial threat landscape. Traditionally, the study covers the common phishing threats encountered by users, along with Windows and Android-based financial malware.

Banking 145