Malware RSS Feed

Passwords: Be creative

SANS Tip-of-the-Day - Mon, 08/26/2013 - 00:21

Use common sense when reviewing your email

SANS Tip-of-the-Day - Sat, 08/24/2013 - 23:33

Don't use unauthorized software

SANS Tip-of-the-Day - Fri, 08/23/2013 - 22:49

New Blog Entry: Seven Ways Insider Threat Products Can Protect Your Organization

CERT Announcements - Fri, 08/23/2013 - 14:55

In this post, George Silowash describes the results of research exploring how organizations can know if an insider threat product will meet their needs.

Beware of Shoulder Surfing

SANS Tip-of-the-Day - Thu, 08/22/2013 - 22:10

Analysis: Spam in July 2013

Malware Alerts - Thu, 08/22/2013 - 08:00

The percentage of spam in email traffic in July was up only 0.1 percentage points and averaged 71.2%

Don't make that call!

SANS Tip-of-the-Day - Thu, 08/22/2013 - 00:53

People Forget, Computers Don't

SANS Tip-of-the-Day - Tue, 08/20/2013 - 21:55

New Blog Entry: A Multi-Dimensional Approach to Insider Threat

CERT Announcements - Tue, 08/20/2013 - 07:52

In this post, the third installment in a series, David Mundie describes efforts to organize a pattern language for insider threat in a way that makes it as usable as possible.

Change your password on a schedule.

SANS Tip-of-the-Day - Mon, 08/19/2013 - 21:24

Blog: Anti-decompiling techniques in malicious Java Applets

Malware Alerts - Mon, 08/19/2013 - 11:44

Analysis: Anti-decompiling techniques in malicious Java Applets

Malware Alerts - Mon, 08/19/2013 - 06:14

Step 1: How this started While I was investigating the Trojan.JS.Iframe.aeq case one of the files dropped by the Exploit Kit was an Applet exploiting a vulnerability:

Some Tips to Protect against Identity Theft

SANS Tip-of-the-Day - Sun, 08/18/2013 - 23:49

Protect Your Social Security Number

SANS Tip-of-the-Day - Sat, 08/17/2013 - 23:21

Blog: Android 4.3 and SELinux

Malware Alerts - Sat, 08/17/2013 - 14:20

Not many weeks ago Google released a new revision of its flagship mobile operating system, Android 4.3. Although some say that this time updates have been quite scarce, from a security perspective there have been some undeniable improvements (among others, the "MasterKey" vulnerability has been finally patched). One of the most prominent is SELinux. Many cheered the event as a long-awaited move, while others criticized its implementation. Personally, I think that the impact is not that easy to assess, especially if we were to question the benefits for end-users. In order to shed some light we can't help but analyze a bit more what SELinux is, and what is its threat model.

RIT Information Security

Main menu