I recently posted about the new release of Cisco’s flagship access control solution Identity Services Engine (ISE) 2.0 HERE. That post lists the highlights of the new features including the highly requested TACACTS+ support. I downloaded the .ova file and performed a fresh install using the virtualized version supporting up to 6,000 devices. This post provides a first look overview of the new features as well as compares ISE 2.0 to the last release 1.4. Continue reading
Social Engineering is all about tricking somebody into acting a way you want them to act. A common tactic is having them click a link using a phishing attack such as a fake UPS delivery link around Christmas or cloning a popular website such as Facebook. Sometimes a target may question the authenticity of the source attempting to contact them. One way to fake your identity is to use listyourself.net by listing your phone or burner phone as a fake identity used in your social engineering scam. That website is http://www.listyourself.net/ Continue reading
My book has officially published and its a few weeks early! I’m touching the first one at a conference before I received my author copies. I believe the discount code still works if you are interested in purchasing it. You must go to the Ciscopress website to use it.
Security Operations Center
Pre-Order Special: Save 35% with Discount Code SOC35
Book Price: $54.99
Sale Price: $35.74*
Buy the Book
eBook Price: $43.99
Sale Price: $28.59
Cisco Talos wrote a interested post about domain research HERE.
According to the Centers for Disease Control and Prevention (CDC), “If you’re ready for a zombie apocalypse, then you’re ready for any emergency.” While events haven’t yet risen to the level of “zombie apocalypse”, computer attackers are continuing to use their voodoo to zombify Internet domains, and repurpose them for their own heinous crimes.
Take, for example, the case of the domain “gfmqatar.com”. According to whois records, this domain was created on October 16, 2014. Within a couple weeks of the date it was registered, a spear-phisher had compromised this domain; by Halloween 2014, this domain’s DNS server was serving phishing content aimed at impersonating Google. Continue reading
Theguardian.com posted about how Anonymous plans to release a bunch of KKK members. The original post can be found HERE.
The “hacktivist” collective Anonymous have vowed to release the names of “about 1,000” Ku Klux Klan members as part of an ongoing operation against the white supremacist group in the US.
The names were obtained after Anonymous gained access to a Klan twitter account, according to a tweet from the Operation KKK, as Anonymous have named the anti-Klan operation. Continue reading
McAfee just announced they will be selling off their firewall business to Raytheon / Websense. The original post from crn can be found HERE.
As part of the company’s new strategic direction, Intel Security has signed its intention to sell its McAfee Next-Generation Firewall and McAfee Firewall Enterprise businesses to Raytheon|Websense, CRN has learned.
The intent to acquire the division, which was revealed in a memo to Raytheon|Websense employees Monday that was viewed by CRN, is the first big acquisition move made by the combined company. Raytheon acquired Websense in June for $1.9 billion. Continue reading
Wow so the FBI is basically stating they believe you should just pay if your computer is compromised by Ransomware. I personally would recommended to first understand which version of Ransomware you have since many versions are not using good encryption and can be decrypted (see a post on this HERE). You should also know that most Ransomware may give back your data however you probably will still have backdoors and other bad stuff on your system. The original post about the advice from the FBI’s bad advise can be found HERE from the business insider website.
If a hacker hijacks your computer with malware and holds your data for ransom, it’s probably best to just pay up, at least that’s the latest advice the FBI is giving out concerning ransomware. Continue reading
Cisco Finally …. FINALLY announced to acquire Lancope. For those that don’t know, Lancope offers a bleeding edge NetFlow based security solution that can turn your entire network into a security sensor. The Yahoo original post can be found HERE.
SAN JOSE, CA–(Marketwired – Oct 27, 2015) – Today, Cisco (NASDAQ: CSCO) announced its intent to acquire Lancope, Inc., a privately held network security company based in Alpharetta, GA. Lancope provides network behavior analytics, threat visibility and security intelligence to help protect companies against top cyber security threats. Continue reading