Despite its hacking prowess, Russia appears to have very messy networks

Russia’s hackers may be among the best, but its computer networks are the most malware-ridden in the world, according to new data from security vendor Comodo. Russia also has a high proportion of more primitive forms of malicious software, the data show, suggesting the security of its IT networks is in a parlous state. The data, which comes from computers all over the world loaded with Comodo software, and covers the first quarter of 2017, is analyzed by the company’s Comodo Threat Research Labs. “It’s a very bad sign” said Comodo Senior Research Scientist Kenneth Geers of the Russia numbers. “It suggests the networks are poorly managed … the software is pirated or out of date.” “The networks [there] are riddled with malware that’s taking advantage of all the low-hanging fruit” in the form of poorly secured IT equipment, he added. “Probably many countries are spying on Russia pretty easily.” The 90 million […]

The post Despite its hacking prowess, Russia appears to have very messy networks appeared first on Cyberscoop.

Continue reading Despite its hacking prowess, Russia appears to have very messy networks

NATO expert: Russians have it right — it’s information security not cyber

In international discussions about cybersecurity, there’s a long-recognized disconnect on vocabulary: The U.S. and its Western allies conceive of cybersecurity as a technical issue — the protection of software against malicious code. Russian officials talk about information security, and it’s a much broader concept of ensuring the integrity of their political and social structures by controlling the […]

The post NATO expert: Russians have it right — it’s information security not cyber appeared first on Cyberscoop.

Continue reading NATO expert: Russians have it right — it’s information security not cyber

New infosec products of the week​: November 18, 2016

ThreatQuotient delivers threat intelligence platform for threat operations and management ThreatQ v2 has transformed the threat intelligence platform into a powerful foundation for cyber threat operations and management. With ThreatQ v2 customers can improve situational understanding, accelerate detection and response, and increase threat operations efficiency through greater team collaboration. Acunetix 11 integrates vulnerability management New integrated vulnerability management features allow for the review of aggregated vulnerability data across all Targets, prioritizing security risks and therefore … More Continue reading New infosec products of the week​: November 18, 2016

Comodo stands down from trademark tussle with Let’s Encrypt

Looks like Comodo has had second thoughts about entering a trademark dispute over the term “Let’s Encrypt”, as Steve Ragan at CSO Online reports:
A Comodo staffer, Robin Alden, said that the company had abandoned their let’s encrypt trademarks.
“Comodo… Continue reading Comodo stands down from trademark tussle with Let’s Encrypt

Let’s Encrypt and Comodo in trademark tussle

The non-profit Let’s Encrypt project, set up to help more websites switch on HTTPS for free, has found itself in a kerfuffle with Comodo, one of the largest commercial vendors of website certificates.

Let’s Encrypt writes:

Some months ago, it came to our attention that Comodo Group, Inc., is attempting to register at least three trademarks for the term “Let’s Encrypt,” for a variety of CA-related services. These trademark applications were filed long after the Internet Security Research Group (ISRG) started using the name Let’s Encrypt publicly in November of 2014, and despite the fact Comodo’s “intent to use” trademark filings acknowledge that it has never used “Let’s Encrypt” as a brand.

Since March of 2016 we have repeatedly asked Comodo to abandon their “Let’s Encrypt” applications, directly and through our attorneys, but they have refused to do so. We are clearly the first and senior user of “Let’s Encrypt” in relation to Internet security, including SSL/TLS certificates – both in terms of length of use and in terms of the widespread public association of that brand with our organization.

Comodo, which claims to be the world’s most widely used SSL Certificate Authority, wants to trademark “Let’s Encrypt”, “Let’s Encrypt with Comodo” and “Comodo Let’s Encrypt.”

Things are getting ugly… and I can’t see how this is going to help create a more secure internet.

Continue reading Let’s Encrypt and Comodo in trademark tussle

VU#305096: Comodo Chromodo browser with Ad Sanitizer does not enforce same origin policy and is based on an outdated version of Chromium

Comodo Chromodo browser,version 45.8.12.391,and possibly earlier,bundles the Ad Sanitizer extension,version 1.4.0.26,which disables the same origin policy,allowing for the possibility of cross-domain attacks by malicious or compromised web hosts. Chromodo is based on an outdated release of Chromium with known vulnerabilities. Continue reading VU#305096: Comodo Chromodo browser with Ad Sanitizer does not enforce same origin policy and is based on an outdated version of Chromium