Mobile Version Subscribe Contact Us About Us Advertising Editorial SC UK SC Aus/NZ

Get up-to-the-minute news and opinions, plus access to a wide assortment of IT security resources that will keep you current and informed.

Email*

Password*

Keep me logged in Forgot your password?

Email*

Advanced Persistent Threats

Are security basics getting lost under the cover of cloud and mobile?

Sean Martin, founder, Imsmartin Consulting April 12, 2012

Be wary of vendor messaging in light of today's threats, as it may be misguided. Organizations can cope with the latest concerns by applying tried-and-true security best practices.

Trojan targets Tibetan activist groups that use Macs

Dan Kaplan March 30, 2012

Researchers have uncovered a rare instance of so-called espionage malware for the Mac OS X platform.

Do you need to worry about the advanced persistent threat?

Wolfgang Kandek, CTO, Qualys February 26, 2012

Yes, advanced persistent threats are stealthy and difficult to stop, but organizations should remember that the most common attack type facing them is mass malware.

Microsoft to scale up its threat intelligence sharing

Stephen Lawton January 13, 2012

Microsoft plans to make available a real-time feed containing data on cyber attacks to help other organizations protect its customers.

Back to basics for enterprise defense

Vicki Ames, former information system security officer at a federal medical research agency • November 01, 2011

Implementing proper security practices protects against today's and tomorrow's risks, says Vicki Ames, former information system security officer at a federal medical research agency .

Your security will fail, but is this the right attitude?

Sean Martin, founder, imsmartin consulting October 27, 2011

IT professionals wishing to protect their systems from sophisticated attacks are receiving mixed messages of how to combat the problem. Their confusion is understandable, but the most important takeaway message is to not accept failure.

Would the United States win a cyberwar?

Cameron Camp, researcher for ESET • September 07, 2011

Cyberthreats are increasing, but can be mitigated with a concerted effort at educating as many people as possible.

Advanced persistent threats call for a reality check

Sean Martin, founder, imsmartin consulting September 07, 2011

Before seeking out help from vendors in dealing with the advanced persistent threat, security professionals must understand exactly what defines such an attack.

Kaspersky says McAfee report is all bark and no bite

Dan Kaplan August 18, 2011

McAfee is dealing with another round of industry disparagement over its "Shady RAT" report, which chronicled a five-year-long hacking campaign.

Lawmaker requests McAfee briefing to discuss Shady RAT

Dan Kaplan August 11, 2011

A California congresswoman has requested a meeting with McAfee's head researcher and his team following the security company's release last week of a 14-page report chronicling a persistent hacking campaign affecting some 50 U.S. organizations.

Tracing the advanced persistent threat: Interview with Joe Stewart

Dan Kaplan August 10, 2011

While McAfee's recently released "Shady RAT" report concentrated on the victims of a mass cyberespionage ring, another researcher has decided to focus his attention on the adversaries behind such attacks. In a video recorded last week at the Black Hat conference in Las Vegas, Joe Stewart of Dell SecureWorks explains how he was able to trace 60 families of custom malware thanks to error messages yielded by a "connection bouncer" tool used by the hackers to hide their tracks, but which inadvertently pointed back to about a dozen command-and-control centers hosted by ISPs in China. Two of the malware families are known to have been used in the RSA SecurID breach. "It gives you a better line on attribution," Stewart told SCMagazineUS.com.

Crooks opt for spear phishing despite higher upfront cost

Dan Kaplan June 30, 2011

Cybercriminals are scrapping widespread malicious email campaigns for more targeted attacks, according to a new Cisco report.

Flash exploits might signal APT activity

Dan Kaplan June 17, 2011

An Adobe Flash vulnerability that was fixed this week is being leveraged in widespread but targeted drive-by downloads and spear phishing attacks.

SC Congress Canada: RSA security architect discusses SecurID breach

Dan Kaplan June 16, 2011

The security architect of RSA offered a candid account of the SecurID breach during a session Wednesday at SC Congress Canada in Toronto.

Lockheed admits to hack that may portend more breaches

Dan Kaplan May 31, 2011

There remain more questions than answers after defense contractor Lockheed Martin over the weekend disclosed that its systems had been successfully breached.