The post analysis of the malware Stuxnet, revealed that four unfixed Microsoft vulnerabilities were exploited by the malware, two of which no information has been disclosed so far. These vulnerabilities allowed Stuxnet to replicate itself and gain higher privileges on infected systems. Zero-day vulnerability is a software vulnerability which is exploited before it is...
Read more »
Tags: C&C, exploit, infected computer, malware, Microsoft, privileges, replicates, Stuxnet, vulnerabilities, Zero-day
Posted in Security Governance | No Comments »
Cyber criminals are now distributing malware through web browsers as opposed to the traditional email attachments and other techniques. They do it for financial gain and infect legitimate websites as to enhance the distribution of malware. The more vulnerabilities websites have, the more are the risks of getting exploited and infected with malware. In general Malware is...
Read more »
Tags: cyber, cyber criminals, drive-by, infect, keyloggers, malicious code, malware, vulnerabilities, website
Posted in Security Governance | No Comments »
No out-of-the-box system is secure, therefore, a computer system user needs to perform a set of tasks to secure his/her system. However, keep in mind that even after performing such tasks, your system is still not 100% secure but you would need to continuously monitor the system with the help of utilities and self-training....
Read more »
Tags: malicious, passwords, policies, prevention, security, threats, updates, vulnerabilities
Posted in Security Governance | No Comments »
Every organization, risk auditor or analyst, security pro or individual may come up with a different definition of IT risks. While all definitions would most probably fit in the IT risks universe, it is very important that there is a common understanding and terminology within an organization. In fact, we find structures or better...
Read more »
Tags: frameworks, infrastructure, IT risks, risks, security, vulnerabilities
Posted in Audit, Security Governance | No Comments »