Email Alerts
-
Static code analysis tools gain traction in India as SDL models mature
Static analysis tools are gaining popularity with Indian companies as software development models and perspectives mature. Here are some popular choices. Feature
-
Exploit writing tutorial: Part 1
In the first part of our exploit writing tutorial, we take a look at the fine art of vulnerability discovery, fuzzing and usable techniques. Tutorial
-
Snapshots from nullcon Tritiya Day 2
A quick look at what happened during nullcon 2012. Photo Feature
-
nullcon Tritiya’s infosec conference: Day 1 walkthrough
Join us, as we take a look at the third installment of annual information security conference nullcon 2012. Photo Feature
-
Backtrack 5 PDF tutorial compendium: A pen-tester’s ready reckoner
Our BackTrack 5 PDF tutorials collection will help you hone your edge, whether you are a security professional or an enthusiast. Best yet, they are free! Tutorial
-
Antispyware buying guide for Indian enterprises
As most Indian IT pros will readily attest, an antispyware strategy is not an easy task. This guide designed specifically for Indian businesses explores the key considerations in choosing a solution and offers an overview of various vendors' offering... Buyer's Guide
-
Spyware Protection and Removal Tutorial
This free spyware protection and removal tutorial is a compilation of free resources that explain what spyware is, how it attacks and most importantly what you can to do to win the war on spyware. Learning Guide
-
Virtual Honeypots: From Botnet Tracking to Intrusion Detection
In Chapter 11 of Virtual Honeypots: From Botnet Tracking to Intrusion Detection, authors Niels Provos and Thorsten Holz get inside the botnet and reveal some interesting conclusions. Book Chapter
-
Security tech market set to grow 8.7% in 2013, says Gartner
The worldwide security technology and services market will reach $67.2bn in 2013, up 8.7% from 2012, according to research firm Gartner News | 11 Jun 2013
-
Microsoft offers 'fix' for latest Internet Explorer zero day
Microsoft released a temporary fix to mitigate attacks using the most recent Internet Explorer 8 zero day vulnerability. News | 09 May 2013
-
Research highlights speed, frequency of ICS security attacks
A new Trend Micro study using honeypots for research highlights an alarming number and variety of attempted ICS security breaches. News | 20 Mar 2013
-
Patch Tuesday: Five critical bulletins, Exchange Server fix expected
In addition to Exchange Server, updates fix flaws in Internet Explorer, Microsoft Office and Microsoft Word. News | 06 Dec 2012
-
Cutwail botnet spam campaign tied to Zeus banking Trojan
The cybercriminals connected to the notorious Zeus Trojan are using the Cutwail botnet to distribute spam designed to steal account credentials. News | 05 Dec 2012
-
Study finds spear phishing at heart of most targeted attacks
Malicious file attachments are typically used as the payload, according to a report issued this week by Trend Micro. News | 29 Nov 2012
-
US-CERT warns of new Samsung, Dell printer threat
Hard-coded passwords on some Samsung and Dell printers could enable an attacker to take control of an affected device. News | 27 Nov 2012
-
Study finds most antivirus products ineffective
Slow updates to signature databases cause some antivirus products to be ineffective against known threats, according to a study by security firm Imperva. News | 27 Nov 2012
-
Phishing attack, stolen credentials sparked South Carolina breach
A phishing attack and stolen credentials gave an attacker access to the systems of the South Carolina Department of Revenue for two months. News | 21 Nov 2012
-
NASA to deploy whole-disk encryption following breach
Stolen laptop contained the sensitive data on a large number of employees and contractors. The information was not encrypted. News | 15 Nov 2012
- See more News on Viruses, worms, spyware, and other malware
-
Analysis: Windows 8 security features improve on Windows 7 security
Expert Michael Cobb says Windows 8's security features, like Windows Defender and Secure Boot, are a step forward for desktop and BYOD security. Tip
-
Mitigate phishing attacks in the cloud: A how-to
As Indian enterprises increasingly move to the cloud, so are phishing attempts. Here are some ways to mitigate the risks of phishing in the cloud. Tip
-
Combat social engineering attacks with these mantras
Of all the security threats, those involving the human angle are perhaps the deadliest. Keep social engineering at bay with these tips. Tip
-
After antimalware: Moving toward endpoint antivirus alternatives
Is it time to "cut the cord" with endpoint antimalware? Matthew Pascucci discusses possible antivirus alternatives. Tip
-
The case for using anomaly-based monitoring in zero-day detection
Expert Char Sample explains how anomaly-based monitoring may be a key step forward in uncovering zero-day vulnerabilities. Tip
-
Cloud architecture security - Part 2: Extrinsic controls
For securing cloud architecture there are some external control measures to be applied. Learn what these extrinsic controls should be and how to apply them. Tip
-
Mobile application security issues and threat vectors in enterprises
As mobile application security threats take on serious proportions, we explore the issues and risks involved for users and enterprises. Tip
-
Multiple compliance management fundas from Bank of India
Optimize the management of multiple compliance frameworks in your organization with these tips from Bank of India’s CISO Sameer Ratolikar. Tip
-
IPS/IDS technologies: Innovations and changes
Haven’t shopped for an IDS/IPS in a while? Karen Scarfone details important recent innovations to IDS/IPS technologies. Tip
-
Comparing enterprise data anonymization techniques
Compare data anonymization techniques including encryption, substitution, shuffing, number and data variance and nulling out data. Tip
- See more Tips on Viruses, worms, spyware, and other malware
-
Defending against an advanced persistent threat (APT)
In this expert response, Nick Lewis explains how organizations should -- or in some cases, shouldn't -- protect against what's known as Advanced Persistent Threat. Answer
-
How to secure a .pdf file
In this expert Q&A, Michael Cobb explains how to avoid malicious content that is embedded into .pdf documents. Ask the Expert
-
How to prevent mobile phone spying
Your cell phone conversations and wireless activity are not private, says resident threat expert Sherri Davidoff, and it's important to remember that mobile phone spying is far too easy. Ask the Expert
-
How can search results lead to malware?
Search engines aren't fundamentally designed to find trustworthy sites, just popular and relevant ones. Expert Sherri Davidoff explains how attackers are injecting malicious pages into search results. Ask the Expert
-
What are today's antivirus software trends?
Expert John Strand reveals two exciting trends in antivirus software. Ask the Expert
-
How to detect keyloggers
In this expert response, Michael Cobb explains how to detect the many rootkits available to today's attackers. Ask the Expert
-
How to quantify business risk exposure to malware
How safe is your enterprise from data-stealing malware? How can you know where your security program falls short? Find out how to gauge enterprise risk exposure to malware in this expert response. Ask the Expert
-
Does cloud-based antivirus provide better malware detection?
Expert John Strand explains some of the drawbacks of a cloud-based antivirus system. Ask the Expert
-
Is it impossible to successfully remove a rootkit?
In this expert Q&A, Michael Cobb takes a closer a look at the nature of rootkits to see why they can be so difficult to remove. Ask the Expert
-
How can an enterprise-wide network prevent denial-of-service attacks?
Denial-of-service (DoS) attacks are often associated only with one type of flood attack, but there are many to look out for. Information security threats expert John Strand weighs in. Ask the Expert
-
crimeware kit (attack kit)
A crimeware kit, also called an infection, exploit or DIY attack kit, is a programming tool that allows someone who does not have any experience writing software code to create, customize and distribute malware. Definition
-
Stuxnet
The Stuxnet worm is a rootkit exploit that targets Supervisory Control and Data Acquisition (SCADA) systems. SCADA is used in power, water and sewage plants, as well as in telecommunications and oil and gas refining. Definition
-
active man-in-the-middle attack (MitM)
Active man-in-the-middle (MitM) is an attack method that allows an intruder to access sensitive information by intercepting and altering communications between the user of a public network and a requested website. Definition
-
How to use Wireshark to detect and prevent ARP spoofing
Video: Keith Barker of CBT Nuggets demonstrates how to use Wireshark, the popular open source packet analyzer, to prevent ARP spoofing attacks. Screencast
-
DEF-CON Bangalore (DC9180) Meet Live
Get a front row view of the action-packed goings on at DEFCON Bangalore 2012 in this Live photo feature. Photo Story
-
Nine must-have OSINT tools
Open source intelligence tools aid in target discovery during the reconnaissance phase. Here are nine must-have OSINT tools for finding maximum target info. Photo Story
-
Expert Bruce Schneier's Stuxnet malware analysis
In this RSA Conference 2011 interview, security luminary Bruce Schneier, breaks down his Stuxnet malware analysis. Schneier discusses who could have benefited from creating Stuxnet, how the main stream media hype affected the Trojan, how it could hav... Video
-
Malware and email authentication for financial services
Malware and fighting phishing with email authentication are major security topics for financial services firms. In part two of this video, Paul Smocer discusses the threats and mitigation options. Video
-
Smart tactics for antivirus and antispyware
AV has become a commodity service with vendors touting value-added features and the ability to protect other parts of the network. This video addresses AV and antispyware from an architectural perspective. You'll learn the benefits of standalone prod... Video
-
PCI compliance requirement 5: Antivirus
Diana Kelley and Ed Moyle of Security Curve review PCI compliance requirement 5: "Use and regularly update antivirus software." Video
-
Johannes Ullrich: ISC, stealthy malware
SANS Chief Research Officer Johannes Ullrich discusses the Internet Storm Center (ISC), information sharing and the state of malware. Video
-
Security tech market set to grow 8.7% in 2013, says Gartner
The worldwide security technology and services market will reach $67.2bn in 2013, up 8.7% from 2012, according to research firm Gartner News
-
Microsoft offers 'fix' for latest Internet Explorer zero day
Microsoft released a temporary fix to mitigate attacks using the most recent Internet Explorer 8 zero day vulnerability. News
-
Research highlights speed, frequency of ICS security attacks
A new Trend Micro study using honeypots for research highlights an alarming number and variety of attempted ICS security breaches. News
-
Patch Tuesday: Five critical bulletins, Exchange Server fix expected
In addition to Exchange Server, updates fix flaws in Internet Explorer, Microsoft Office and Microsoft Word. News
-
Cutwail botnet spam campaign tied to Zeus banking Trojan
The cybercriminals connected to the notorious Zeus Trojan are using the Cutwail botnet to distribute spam designed to steal account credentials. News
-
Analysis: Windows 8 security features improve on Windows 7 security
Expert Michael Cobb says Windows 8's security features, like Windows Defender and Secure Boot, are a step forward for desktop and BYOD security. Tip
-
Study finds spear phishing at heart of most targeted attacks
Malicious file attachments are typically used as the payload, according to a report issued this week by Trend Micro. News
-
Mitigate phishing attacks in the cloud: A how-to
As Indian enterprises increasingly move to the cloud, so are phishing attempts. Here are some ways to mitigate the risks of phishing in the cloud. Tip
-
US-CERT warns of new Samsung, Dell printer threat
Hard-coded passwords on some Samsung and Dell printers could enable an attacker to take control of an affected device. News
-
Study finds most antivirus products ineffective
Slow updates to signature databases cause some antivirus products to be ineffective against known threats, according to a study by security firm Imperva. News
- See more All on Viruses, worms, spyware, and other malware
About Viruses, worms, spyware, and other malware
Bring viruses, worms and spyware threats under control with these resources. Keep updated with the latest virus news. Select the best antivirus and antispyware options from our reviews to select best of breed solutions. Curb malware menace with advanced tips. Manage antivirus solutions with ease across the enterprise.