Remove Data breaches Remove Digital transformation Remove Firewall Remove Internet
article thumbnail

SHARED INTEL: Report details how cyber criminals leverage HTTPS TLS to hide malware

The Last Watchdog

From January through March 2021, TLS concealed 45 percent of the malware Sophos analysts observed circulating on the Internet; that’s double the rate – 23 percent – seen in early 2020, Dan Schiappa, Sophos’ chief product officer, told me in a briefing. And on the back end, it allows them to cloak any data as it is getting exfiltrated.

Malware 214
article thumbnail

NEW TECH: Data Theorem helps inventory sprawling APIs — as the first step to securing them

The Last Watchdog

Without APIs there would be no cloud computing, no social media, no Internet of Things. APIs are the glue that keeps digital transformation intact and steamrolling forward. APIs have been a cornerstone of our digital economy from the start. But APIs also comprise a vast and continually-expanding attack surface.

Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

Q&A: Here’s why it has become vital for companies to deter ‘machine-identity thieves’

The Last Watchdog

We’re undergoing digital transformation , ladies and gentlemen. And we’re in a nascent phase where clever advances are blossoming even as unprecedented data breaches arise in parallel. LW: Can you frame what’s going on with identities when it comes to digital transformation? Hudson: Sure.

article thumbnail

SHARING INTEL: Here’s why it has become so vital to prioritize the security-proofing of APIs

The Last Watchdog

A chilling illustration of how APIs can factor into an attack sequence comes from the massive Capital One data breach. Former Amazon programmer Paige Thompson is facing a growing list of federal charges for her alleged theft of personal data of more than 100 million Capital One patrons. Dearth of planning. Runtime vigilance.

Big data 240
article thumbnail

Q&A: How emulating attacks in a live environment can more pervasively protect complex networks

The Last Watchdog

Spirent refers to this as “data breach emulation,’’ something David DeSanto, Spirent’s threat research director, told me is designed to give companyies a great advantage; it makes it possible to see precisely how the latest ransomware or crypto mining malware would impact a specific network, with all of its quirky complexity.

article thumbnail

Cyber Defense Magazine: Exclusive Interview with Robert Herjavec

Herjavec Group

I was personally honored in my early career to work for Wang Laboratories and was invited to share one of my visions ‘fax over the internet’ with the company, which I invented. History shows he’s the first person to wrap the remote management business model around firewalls, from a small office on the east coast of Canada.,

article thumbnail

RSAC insights: Sophos report dissects how improved tools, tactics stop ransomware attack

The Last Watchdog

Over the course of 14 days they installed an array of malware deep inside the firewall. This brings up a point: for every massive data breach or high-profile ransomware caper that grabs headlines, I’m starting to hear about more instances like this, where the good guys prevail. From there the hackers moved laterally.