Over the past few years, enterprises have been hit by complex and advanced ransomware attacks. With a heroic entry, they came and conquered many. Enterprises have seen their most important data locked in the hands of criminals expecting a ransom for their illegal activity. When they left, they also took with them the enterprise’s money, […]

Breaches continue to occur regardless of existing tools. In Feb 2017, a hack compromised the account details of more than 2.5 million PlayStation and Xbox users. The data breach happened in 2015 but was only found out this year. Lack of visibility and endpoint security controls contributes to security breaches and financial loss. A combination […]

Weak Password: Access Granted The world saw two major hacks recently – Yahoo and LinkedIn. While LinkedIn compromised 117 million passwords, Yahoo compromised 200 million passwords. People tend to reuse their passwords. Thus, hackers are more likely to gain access to people’s email and bank accounts. Password security is one of the fundamental practices of […]

USB Scam: An Unsuspicious Attack in Action Security researchers Karsten Nohl and Jakob Lell at the Black Hat security conference demonstrated how the security of USB devices has been destroyed and how it’s possible to infect any USB device using a hidden or unknown malware. They used the malware which they created called the BadUSB […]

Ransomware continues to be popular among cyber criminals. According to a CNN report, cyber criminals collected over $209 million in the first three months of 2016. Ransomware exploits vulnerabilities, misconfigurations, and social engineering. Our most loved whitepaper Ransomware a Billion Dollars a Year Cyber Crime covers ransomware variants and how these variants exploit endpoints. The […]

The Dangers of Drive-By Download Attack Drive-by-downloads are harmful pieces of software that are downloaded to an endpoint device as a result of visiting a compromised web page or an HTML-based email that links to a website. This attack occurs without the consent or knowledge of the user. Users mainly become a victim to the […]

The Great Perils of FPhishing Every year, many organizations fall victim to phishing attacks. Tens of millions of phishing emails make it to your inbox and are clicked and opened. A recent study by the Anti-Phishing Working Group (APWG) has revealed just how much we have been victim to phishing over the years. The study […]

Understanding Saner Solution Saner Solution consists of three components namely- Ancor, Viser, and End-point Agents. Ancor is the Analytics and Correlation Engine that forms the core of the solution. Viser is the visibility portion of Saner Solution with which security administrators can monitor the security posture of an enterprise and also react/respond to security incidents […]

  What would it be like if an Endpoint and Saner communicated? Endpoint: Someone entered? Saner: Hello Endpoint! I am Saner Version 2.1, Family Supported- Linux, Mac and Windows. Endpoint: Welcome Saner. I am Endpoint (hostname), alias 192.168.1.X (IP address), A2:B1:C4:A3:B2:C1 (Mac address), Processor X, RAM 8GB and Storage 500GB Endpoint: Welcome to my world […]

SecPod Saner 2.1 provides exciting new features and bug fixes. Features include much more robust reporting, automated alerts, threat visualization and co-branding support for managed service providers. Administrators have a refurbished dashboard, which is fast and convenient. Quick links on the dashboard help search deeper into endpoint data. Remediation based on rules delineates status of […]

Today’s sophisticated and complex malware targets all industries, and healthcare industry is becoming a popular choice amongst attackers. Healthcare organizations should have another look at their cyber security structure around endpoint devices like laptops, tablets, desktops, smartphones, patient control and monitoring devices. A recent survey on healthcare security with respondents comprising healthcare organizations stated that […]

Advanced Persistent Threat (APT) is a network attack in which an attacker chooses a particular target, uses social engineering and advanced technologies to break into a network. Until the attack is successfully executed, they focus on that particular target for weeks, months, and years. Once inside a network, the objective of the attacker is to lay […]

Patch fatigue is a term that’s buzzing amongst IT managers due to the devastating number of patches enterprises need to keep their environment safe and updated. 2016 IBM Security Report covered 18 years of patches with over 100,000 known vulnerabilities. Though only a few of these vulnerabilities affect each device in a network at any […]

A new ransomware has risen. Known as Jigsaw Ransomware, it is named after the iconic character that appears in the ransomware note. Jigsaw ransomware will encrypt the files and ask victims to pay a ransom of 150 USD worth of Bitcoins or .4 BTC. If the victim takes a long time to pay the ransom, […]

PowerWare, a new ransomware has been detected, which leverages Windows PowerShell to-do the work. The ransomware targets enterprises using Microsoft Word and PowerShell. PowerShell is the scripting language intrinsic to Microsoft operating systems. This ransomware mainly targets healthcare organizations. The dubbed PowerWare ransomware is being circulated through a common attack method, phishing emails containing Word […]

Strengthening resilience to attacks is the emphasis for security professionals nowadays. Though defenders are inventing technologies and tactics that are emerging in sophistication, enemies are not behind either. Criminals are well funded and they use a mishmash of progressed technologies and strategies to dodge detection. Security professionals will always do their best to block attacks […]

According to a recent survey that included approximately 480 IT professionals, effective patch management was considered to be the easiest way of enhancing IT risk management. However, organizations are still getting it wrong. Patch weariness was considered to have only a small impact on the industry, but is in fact affecting a wide range of organizations. The […]

Partnerships and strategic alliances between technology vendors and Managed Service Providers (MSP) drive sales and bring success to technology firms and their partners. MSPs have played a significant role in taking a vendor’s product or service to the customers. Though these partnerships look like a win-win situation, not all the partnerships yield the right results. […]

Multi-tenancy refers to the mode of operation wherein a single instance of a software application attends to multiple tenants. Each client is called a tenant. They may represent enterprises that gained access to the multi-tenant application or the multiple applications competing for intrinsic resources. Tenants are permitted to customize certain parts of the application such […]

Corporate Espionage is the practice of stealing and unauthorized revealing of corporate data to other companies, government or individuals. Competitor companies, individuals tracing information for their own financial profit are mainly involved in corporate espionage. Employees fail to build a lasting and loyal rapport with their employers and thus steal information. But unsatisfied employees aren’t the […]

As a firm grows, it’s important to adopt more stringent security measures to protect its business from unwanted threats, risks, and unauthorized activities. After looking into various practical applications and procedures, businesses implement best practices for the smooth running of their operations. Employ In-depth protection strategies Draw attention to numerous, overlapping and reciprocally supportive defensive […]

The increased cost and complexity of securing the business IT infrastructure has opened the door for managed security service providers (MSSPs). In particular, small and medium businesses (SMBs) generally don’t have the security experience or resources to adequately protect their business from today’s security threats. The days of simply configuring firewalls and deploying anti-virus software […]

With all the frightening stories of hackers at Black Hat, I stepped into not-just-yet-another-conference in Singapore. Situated at the plush location of the island country, Marina Bay Sands catered to one of the best security conference of this calibre. All renowned and well-informed security enthusiasts visited from all over the world to share their thoughts […]