Cyber Pro Files

BLACK HAT SERIES

Purpose-built, specialized malware dubbed "Backoff" is being found in point-of-sales (POS) systems. At the discovery, the malware, which is gathering magnetic strip information, keyed data and more, had low to zero percent anti-virus detection rates. That meant that fully updated anti-virus engines on fully patched computers could not identify malware as malicious, according to the National Cybersecurity and Communications Integration Center (NCCIC), US Secret Service (USSS), Financial Sector Information and Sharing and Analysis Center (FS-ISAC), and Trustwave SpiderLabs.

Meanwhile, exploit kits enabling ransomware are holding data hostage. These business models for criminals are proving to be very lucrative. securitycurrent's Vic Wheatman speaks with Karl Sigler, Manager SpiderLabs Threat Intelligence at Trustwave, on "Backoff" and the latest findings from Trustwave's Global Security Report.

BLACK HAT SERIES

Purpose-built, specialized malware dubbed "Backoff" is being found in point-of-sales (POS) systems. At the discovery, the malware, which is gathering magnetic strip information, keyed data and more, had low to zero percent anti-virus detection rates. That meant that fully updated anti-virus engines on fully patched computers could not identify malware as malicious, according to the National Cybersecurity and Communications Integration Center (NCCIC), US Secret Service (USSS), Financial Sector Information and Sharing and Analysis Center (FS-ISAC), and Trustwave SpiderLabs.

Meanwhile, exploit kits enabling ransomware are holding data hostage. These business models for criminals are proving to be very lucrative. securitycurrent's Vic Wheatman speaks with Karl Sigler, Manager SpiderLabs Threat Intelligence at Trustwave, on "Backoff" and the latest findings from Trustwave's Global Security Report.

BLACK HAT SERIES 2014

IBM's Security Systems X-Force recommends that a shift takes place from focusing on protecting the perimeter to securing applications.

The X-Force publishes a Threat Quarterly Report that analyzes security breaches and methods used by the bad guys. Based on over one million data points, the report found that Java, SQL injections, cross-site scripting and authentication problems remain challenges for developers and recommends they adopt Secure Lifecycle Development to reduce system vulnerabilities.

At Black Hat in Las Vegas, securitycurrent's Vic Wheatman spoke with Michael Hamelin, the Lead X-Force Security Architect on today's most prevalent forms of attack and what should be done.

BLACK HAT SERIES 2014

IBM's Security Systems X-Force recommends that a shift takes place from focusing on protecting the perimeter to  securing applications.

The X-Force publishes a Threat Quarterly Report that analyzes security breaches and methods used by the bad guys. Based on over one million data points, the report found that Java, SQL injections, cross-site scripting and authentication problems remain challenges for developers and recommends they adopt Secure Lifecycle Development to reduce system vulnerabilities.

At Black Hat in Las Vegas, securitycurrent's Vic Wheatman spoke with Michael Hamelin, the Lead X-Force Security Architect on today's most prevalent forms of attack and what should be done.

An upcoming movie shows what happens when a private video goes "up into the cloud" for everyone to see.

The movie is called "Sex Tape." A memorable refrain from one of the characters is "Nobody Understands the Cloud."

securitycurrent's Vic Wheatman speaks with cloud expert JD Sherry of Trend Micro about the responsibilities of the cloud service provider and the controls and protective services organizations should implement to protect their cloud-based applications.

Sherry, Trend Micro's VP of Technology and Solutions, notes that by 2014 some 51 percent of workloads will be processed in the cloud, pointing out that organizations are see the benefits of the adoption of these huge cloud-based services.

And they examine the importance of security and privacy and note real-world instances of just what can happen in a cloud ecosystem.

A recent movie shows what happens when a private video goes "up into the cloud" for everyone to see.

The movie is called "Sex Tape." A memorable refrain from one of the characters in the movie is "Nobody Understands the Cloud."

securitycurrent's Vic Wheatman speaks with cloud expert JD Sherry of Trend Micro about the controls and protective services organizations should implement to protect their cloud-based applications.

Sherry, Trend Micro's VP of Technology and Solutions, notes that by 2014 some 51 percent of workloads will be processed in the cloud, pointing out that organizations are seeing the benefits of the adoption of these huge cloud-based services.

The also examine the importance of security and privacy and note real-world instances of just what can happen in a cloud ecosystem.

Security analysts and experts often talk about big data security analytics as a burgeoning space. But is that the really the case?

What is reality behind big data analytics for security? Is it mainstream? Does a security analytics market even exist?

securitycurrent's Aimee Rhodes speaks with Gartner Research Vice President Anton Chuvakin who researched big data security analytics to find out what it is good for, where it is heading, who is using it, who isn't using it and who should be using it.

Security analysts and experts often talk about big data security analytics as a burgeoning space. But is that the really the case?

What is reality behind big data analytics for security? Is it mainstream? Does a security analytics market even exist? 

securitycurrent's Aimee Rhodes speaks with Gartner Research Vice President Anton Chuvakin who researched big data security analytics to find out what it is good for, where it is heading, who is using it, who isn't using it and who should be using it. 

Many consumer-facing e-commerce implementations depend on 1960s technology to identify and authenticate customers. SecureKey is bringing authentication down to the device and chip level in order to combat fraud. It also is working to share digital IDs across an Identity Federation.

securitycurrent's Vic Wheatman speak with SecureKey's CEO Charles Walton who talks about these timely issues.

Many consumer-facing e-commerce implementations depend on 1960s technology to identify and authenticate customers. SecureKey is bringing authentication down to the device and chip level in order to combat fraud. It also is working to share digital IDs across an Identity Federation.

securitycurrent's Vic Wheatman speak with SecureKey's CEO Charles Walton who talks about these timely issues.