5 stages of a Web app attack [Infographic]

Web application attacks are among the leading causes of data breaches, according to Verizon's 2015 Data Breach Investigations Report, which looked at data from 80,000 security incidents and over 2,000 confirmed data breaches in 61 countries. The report also found that weak or stolen credentials account for over 50 percent of breaches involving Web applications, and those in the financial services sector are favored targets for Web application attacks.Statistics like that are enough to make anyone sit up and take note.To read this article in full or to leave a comment, please click here(Insider Story)

Android banking malware SlemBunk is part of a well-organized campaign

An Android Trojan that targets mobile banking users has evolved into a sophisticated, persistent and hard-to-detect threat, suggesting that it is part of a well-organized attack campaign.Researchers from security firm FireEye first documented the Trojan in December and named it SlemBunk. Once installed, it starts monitoring the processes running on the device and when it detects that a mobile banking app is launched, it displays a fake user interface on top of it to trick users into inputting their credentials.The Trojan can spoof the user interfaces of apps from at least 31 banks from across the world and two mobile payment service providers.To read this article in full or to leave a comment, please click here

Shift to digital business disrupts traditional IT

2016 is set to be a year of shifts for IT – shuffling budget dollars, reconfiguring business processes, and recasting tech talent.To read this article in full or to leave a comment, please click here(Insider Story)

Worth Reading: Optical Processing

A new type of computer chip developed by researchers at MIT, the University of California, Berkeley, and the University of Colorado, Boulder, could lead to faster data transmissions and potentially more energy efficient data centers. The technology is based on using light rather than streams of electrons to transmit data.

The post Worth Reading: Optical Processing appeared first on 'net work.

Cisco, AT&T & others declare June 20th will be World Wi-Fi Day

With all the unofficial/official international/world/national days that various tech and governmental organizations and their marketing arms have carved out in recent years (World Paper Free Day, Data Privacy Day, etc.), it's amazing that the Wireless Broadband Alliance found an open spot on June 20 to set aside for the inaugural World Wi-Fi Day. But let it be known henceforth that June 20th shall be a day "to accelerate affordable wireless connectivity around the world" and "to recognize and celebrate the significant role Wi-Fi is playing in getting cities and communities around the world connected."To read this article in full or to leave a comment, please click here

Intel’s Ravi Varanasi Talks Mitigating SDDC Security Risks with the Help of HyTrust

Intel's Ravi Varanasi tackles best practices for securing the software-defined data center.

Cisco fixes unauthorized access flaws in access points, wireless LAN controllers

Cisco Systems released critical security updates for several products, including access points and wireless LAN controllers, in order to fix vulnerabilities that could give remote attackers access to devices.The Cisco Aironet 1830e, 1830i, 1850e and 1850i series access points contain a default account with a static password that attackers can use to gain unauthorized access, the company said in an advisory.Fortunately, the account does not have administrative privileges, so the vulnerability is only rated as high impact instead of critical.To read this article in full or to leave a comment, please click here

Cisco fixes unauthorized access flaws in access points, wireless LAN controllers

Cisco Systems released critical security updates for several products, including access points and wireless LAN controllers, in order to fix vulnerabilities that could give remote attackers access to devices.The Cisco Aironet 1830e, 1830i, 1850e and 1850i series access points contain a default account with a static password that attackers can use to gain unauthorized access, the company said in an advisory.Fortunately, the account does not have administrative privileges, so the vulnerability is only rated as high impact instead of critical.To read this article in full or to leave a comment, please click here

Defense One: Islamic State has written its own encrypted communications app

The Islamic State is deploying its own encrypted communications app for Android, an eventuality predicted by experts who oppose efforts of governments to require encryption backdoors so they can find out what criminals are saying to teach other.The app, called lrawi.apk, employs what is described as rudimentary encryption and was available for download last month on a Web site where Islamic State supporters could download it and another app for distributing propaganda, according to a story posted by Defense One.The creation of such an encryption app has been considered a likely outcome of laws being proposed internationally requiring backdoors that would allow service providers to fulfill court orders to decrypt private communications of their customers.To read this article in full or to leave a comment, please click here

Using Wireshark To Identify Application Signatures

Voice Over LTE Enterprise Benefits

Signature Update #2645

Update #2645 (02/14/2016) HIGH APP:CA:ARCSRV:PORTMAPPER-3 APP: Computer Associates BrightStor ARCserve Backup Portmapper (3) HIGH DHCP:SERVER:SC-DHCLIENT-BOF-3 DHCP: ISC DHCP dhclient script_write_params Stack Buffer Overflow (3) HIGH DHCP:SERVER:ISC-DHCLIENT-BOF-4 DHCP: ISC DHCP dhclient script_write_params Stack Buffer Overflow (4) HIGH SCAN:CANVAS:HELIUM-AGENT-1 SCAN: Canvas Helium Agent (1) MEDIUM HTTP:MISC:MS-IIS-DOS-1 HTTP: Microsoft IIS Denial of Service (1) HIGH APP:CA:ARCSRV:PORTMAPPER-4 APP: Computer... Read more →

ADVA Splashes Into the NFV Pool

CEO Brian Protiva says ADVA will work with anyone to become an NFV market leader.

White House Security Director Nathaniel Gleicher Joins Illumio

Illumio has the funding, it has the customers, and now it has an ex-White House employee.

ARIN Help Desk

As Nokia Closes on Alcatel-Lucent, Will the Integration Get Ugly?

If layoffs come, U.S.-based employees could be most at risk.

State Your Intentions

A man they call 'Big Tex' launches a series of no-BS posts on open networking as it relates to hardware and software.

The post State Your Intentions appeared first on Packet Pushers.

State Your Intentions

A man they call 'Big Tex' launches a series of no-BS posts on open networking as it relates to hardware and software.

The post State Your Intentions appeared first on Packet Pushers.

This is how much spear phishing costs companies

New research from messaging security provider Cloudmark and technology research company Vanson Bourne provides new insight into IT professionals' views and experiences with spear phishing attacks, as well as the security and financial impact of these attacks on their organizations."With the wealth of information about individuals and organizations now available online, cybercriminals can easily craft targeted attacks to gain access to valuable personal and financial information. Spear phishing has emerged as one of the largest threats facing enterprises today," said George Riedel, CEO of Cloudmark.Vanson Bourne surveyed 300 IT decision makers at organizations with more than 1,000 employees in the U.S. and the U.K. to assess the impact of spear phishing attacks, as well as what measures enterprises were taking to combat them.To read this article in full or to leave a comment, please click here(Insider Story)

Industry group certifies five new manufacturers of DOCSIS 3.1 modems

The DOCSIS 3.1 cable Internet standard just moved a little bit closer to American homes, with the news today that industry research group CableLabs has certified five new manufacturers of DOCSIS 3.1 modems.Askey, Castlenet, Netgear, Technicolor and Ubee Interactive were all approved by CableLabs to manufacture DOCSIS 3.1 hardware, the group said in its announcement, which was issued less than a month after Comcast successfully tested a modem using the new technology in a consumer environment. CableLabs credited “highly effective collaboration” from vendors for the quick turn-around.+ALSO ON NETWORK WORLD: Microsoft: Upgrade to IE11 even if you dump our browser + Alternative education can help close IT skills gapTo read this article in full or to leave a comment, please click here