Privitar expands executive leadership team with new appointments

Privitar announced the expansion of its executive leadership team with the appointments of Victoria Normark as Chief Technology Officer, Pat Walsh as Chief Marketing Officer, and Bill Ziske as Senior Vice President of Sales, North America. The addition… Continue reading Privitar expands executive leadership team with new appointments

HelpSystems acquires Beyond Security to expand cyber protection portfolio

Beyond Security’s cloud-based products enable hundreds of organizations to easily scan their growing, complex environments for network or application vulnerabilities. The team and solutions from Beyond Security will fit into HelpSystems’ popular infras… Continue reading HelpSystems acquires Beyond Security to expand cyber protection portfolio

Webinar – Getting Inside the Mind of an Attacker: TLS Attacks and Pitfalls

Transport Layer Security (TLS) is a common cybersecurity protocol that is frequently seen in email, web browsers, messaging, and other communication methods that take place over networks. TLS is relied upon to ensure secrecy using different techniques … Continue reading Webinar – Getting Inside the Mind of an Attacker: TLS Attacks and Pitfalls

Russian hackers found the ‘ultimate’ hacking tool buried in the supply chain of laptops

When Vitaly Kamluk, a security researcher with Kaspersky Lab, discovered a mysterious program named “Computrace” deeply burrowed into his colleagues’ computers, he expected to find an elite hacking group at the other end — something the Moscow-based cybersecurity firm is keenly familiar with. Instead, Kamluk had uncovered a flawed but legitimate tracking software program developed by a Canadian company, named Absolute Software, which had been apparently installed at the manufacturer level. Computrace — now known as LoJack For Laptops via a licensing agreement with the famous vehicle-tracking company — has been publicly documented as having security problems, based on multiple reports, which worried Kamluk because he knew someone could leverage the underlying program in an attack to gain remote access. “It was very alarming to find unauthorized instances of Computrace,” Kamluk told CyberScoop. “There was no explanation how those new private computers had Computrace activated … We contacted Absolute technical support and provided hardware serial numbers, as […]

The post Russian hackers found the ‘ultimate’ hacking tool buried in the supply chain of laptops appeared first on Cyberscoop.

Continue reading Russian hackers found the ‘ultimate’ hacking tool buried in the supply chain of laptops

New infosec products of the week​: March 23, 2018

Gemalto unveils enhanced security features for ID documents These security features are available as additional options in the Gemalto Color Laser Shield secure identity solutions range. The new enhancements are simple to adopt by the government agents… Continue reading New infosec products of the week​: March 23, 2018

Identity management firm SecureAuth acquired for $225 million, will merge with Core Security

California-based identity management company SecureAuth was acquired for $225 million by K1 Investment Management, the company announced Wednesday. The acquisition was followed by a merger with the Georgia-based cybersecurity firm Core Security, resulting in a company with 360 employees, 1,500 customers and a name that won’t be announced until 2018. Jeff Kukowski, currently the CEO at SecureAuth, will serve as the CEO of the new company, which will also be headquartered in California. SecureAuth offers two lines of products. SecureAuth IdP is an access product that addresses a variety of authentication requirements. SecureAuth Cloud Access is a security manager of cloud services addressing authentication, visibility, compliance, administration and various other security tools. Core Security does attack intelligence, network security and vulnerability management for enterprises. With over 200 employees, the majority of the new company’s workforce will be coming from Core. Kukowski pitched his new company as able to manage and visualize the “full attack […]

The post Identity management firm SecureAuth acquired for $225 million, will merge with Core Security appeared first on Cyberscoop.

Continue reading Identity management firm SecureAuth acquired for $225 million, will merge with Core Security

New infosec products of the week​: September 8, 2017

Vectra introduces attack campaign detection and prediction Vectra is advancing automated threat hunting with the introduction of Attack Campaigns. The Vectra Cognito platform now further automates threat hunting by exposing the relationships between threat detections on separate workloads and devices to understand the activity and scope of attack campaigns. Open source secrets management solution for DevOps With increased DevOps adoption comes an expanding attack surface with an exponential set of secrets that insiders and malicious … More Continue reading New infosec products of the week​: September 8, 2017

New infosec products of the week​: March 31, 2017

Waterfall Security, CNA Hardy and THB partner to create global industrial cyber proposition THB, CNA Hardy and leading cybersecurity specialist Waterfall Security Solutions have entered into a partnership to provide a new cyber security protection package for industrial businesses globally. “This new cyber insurance partnership is a global precedent on many levels. First, it documents enough concern around increasing cyberattacks on industrial facilities, a clear sign for potential high profits from financial institutions. Secondly, it … More Continue reading New infosec products of the week​: March 31, 2017

Second Try at Windows LSASS Patch Addresses Vulnerability

Microsoft on Tuesday patched a vulnerability in LSASS, the second attempt it has taken at fixing a remote denial-of-service issue in the critical Windows process. Continue reading Second Try at Windows LSASS Patch Addresses Vulnerability

New infosec products of the week​: December 2, 2016

Trend Micro offers Deep Security as a Service on AWS Marketplace Trend Micro announced the availability of Trend Micro Deep Security as a Service on AWS Marketplace. This new Trend Micro offering enables organizations to combine the benefits of security SaaS with the convenience of consolidated payments through their Amazon AWS bill. With per-hour pricing for added protection of Amazon EC2 instances, Deep Security as a Service provides customers a hosted security management experience with … More Continue reading New infosec products of the week​: December 2, 2016