CVRF Version 1.2 Now Available for Public Comment
By Omar Santos A few months ago, I wrote about the new OASIS Common Security Advisory Framework (CSAF) Technical Committee (TC). The purpose of the CSAF Technical Committee is to standardize the practices for structured machine-readable security vulnerability-related advisories. And then we will further refine those standards over time. The Common Vulnerability Reporting Framework (CVRF) […]
Frischer Wind im Workstation-Portfolio
Gleich drei neue Geräte bringen frischen Wind in das Workstation-Portfolio unseres Technologie-Partners FUJITSU. Neben einer mobilen Variante, sind ab sofort auch zwei neue Desktop-Systeme verfügbar. Die mobile Workstation Celsius H770 bringt neben der aktuellsten Intel E3 CPU und aktueller Nvidia Quadro Grafik auch den von FUJITSU entwickelten und patentierten Palm Secure Handvenenscanner mit. Der Port-Replikator […]
Delphi Used To Score Against Palestine
By Talos Group Executive Summary This blog was authored by Paul Rascagneres and Warren Mercer with contributions from Emmanuel Tacheau, Vanja Svajcer and Martin Lee. Talos continuously monitors malicious emails campaigns. We identified one specific spear phishing campaign launched against targets within Palestine, and specifically against Palestinian law enforcement agencies. This campaign started in April […]
Delphi Used To Score Against Palestine
By Talos Group Executive Summary This blog was authored by Paul Rascagneres and Warren Mercer with contributions from Emmanuel Tacheau, Vanja Svajcer and Martin Lee. Talos continuously monitors malicious emails campaigns. We identified one specific spear phishing campaign launched against targets within Palestine, and specifically against Palestinian law enforcement agencies. This campaign started in April […]
Vulnerability Spotlight: Multiple Foscam C1 Vulnerabilities Come in to Focus
By Talos Group Executive Summary The Foscam C1 is a webcam that is marketed for use in a variety of applications including home security monitoring. As an indoor webcam, it is designed to be set up inside of a building and features the ability to be accessed remotely via a web interface or from within […]
Vulnerability Spotlight: Multiple Foscam C1 Vulnerabilities Come in to Focus
By Talos Group Executive Summary The Foscam C1 is a webcam that is marketed for use in a variety of applications including home security monitoring. As an indoor webcam, it is designed to be set up inside of a building and features the ability to be accessed remotely via a web interface or from within […]
Crashoverride und Industroyer gefährden Industrieanlagen
Aktuell veröffentlichten die beiden Sicherheits-Unternehmen ESET und Dragos Inc. ihre jeweilige Analyse der Schadsoftware Crashoverride, bzw. Industroyer. Trotz unterschiedlicher Bezeichnung beziehen sich beide Analysten auf den Stromausfall Ende 2016 in Kiew und Teilen der Ukraine und ordnen diesen als Cyberattacke ein. Als größte Bedrohung für Industrieanlagen seit Stuxnet (der das iranische Atomprogramm maßgeblich gelähmt hatte) bezeichnen […]