Cybersecurity Archives - ThreatsHub Cybersecurity News

Fake News and Influence: Information Warfare in the Digital Age

August 16, 2019 TH Author akamai, Cybersecurity, deep fakes, Facebook, fake news, Featured, Government, information warfare, infosec insider, tony lauro, Web Security

It’s been around forever, but in a modern digital era marked by influence campaigns and deep fakes, information warfare has become much easier to carry out. READ MORE HERE…

Microsoft Secure

How Axonius integrates with Microsoft to help customers solve the cybersecurity asset management challenge

August 13, 2019 TH Author Cybersecurity

Why is asset management—a problem that has persisted for decades—still an issue in 2019? Axonius is integrating with Microsoft to understand and solve this problem.
The post How Axonius integrates with Microsoft to help customers solve the cybersecurity asset management challenge appeared first on Microsoft Security. READ MORE HERE…

Microsoft Secure

From unstructured data to actionable intelligence: Using machine learning for threat intelligence

August 8, 2019 TH Author AI and machine learning, Automation, Cybersecurity, Endpoint security, indicators of compromise (IoC), machine learning, Microsoft Defender Advanced Threat Protection, Microsoft security intelligence, Security Intelligence, threat intelligence, TTPs, Windows Security

Machine learning and natural language processing can automate the processing of unstructured text for insightful, actionable threat intelligence.
The post From unstructured data to actionable intelligence: Using machine learning for threat intelligence appeared first on Microsoft Security. READ MORE HERE…

Microsoft Secure

A case study in industry collaboration: Poisoned RDP vulnerability disclosure and response

August 7, 2019 TH Author CVE-2019-0887, Cybersecurity, Endpoint security, Event Tracing for Windows (ETW), Exploit, Microsoft Defender Advanced Threat Protection, Microsoft security intelligence, Remote Desktop Protocol (RDP), Security Response, Vulnerability, Windows Security

Through a cross-company, cross-continent collaboration, we discovered a vulnerability, secured customers, and developed fix, all while learning important lessons that we can share with the industry.
The post A case study in industry collaboration: Poisoned RDP vulnerability disclosure and response appeared first on Microsoft Security. READ MORE HERE…

Threatpost

For $8.6M, Cisco Settles Suit Over Bug-Riddled Video Surveillance Software

August 1, 2019 TH Author $8.6 million, Cisco, court documents, Critical Infrastructure, Cybersecurity, false claims, Federal government, Government, IoT, james glenn, knowingly sold, lawsuit, security vulnerability, settlement, states, video surveillance manager, Vulnerabilities, whistleblower

The complaint claims the networking giant knowingly sold bug-riddled software to federal and state governments, that would allow complete network compromise. READ MORE HERE…

Microsoft Secure

How Windows Defender Antivirus integrates hardware-based system integrity for informed, extensive endpoint protection

July 31, 2019 TH Author assertion engine, Cybersecurity, hardware-based isolation, kernel-mode attacks, Microsoft Defender Advanced Threat Protection, Microsoft security intelligence, next generation protection, privilege escalation, runtime attestation, Security Intelligence, Threat protection, token swap, token theft, Windows Defender Antivirus, Windows Security

The deep integration of Windows Defender Antivirus with hardware-based isolation capabilities allows the detection of artifacts of attacks that tamper with kernel-mode agents at the hypervisor level.
The post How Windows Defender Antivirus integrates hardware-based system integrity for informed, extensive endpoint protection appeared first on Microsoft Security. READ MORE HERE…

Microsoft Secure

New machine learning model sifts through the good to unearth the bad in evasive malware

July 25, 2019 TH Author AI and machine learning, antivirus, Automation, Cybersecurity, detection evasion, Endpoint security, LockerGoga, machine learning, Microsoft Defender Advanced Threat Protection, Microsoft Defender ATP, Microsoft security intelligence, monotonic models, next generation protection, Windows Defender Antivirus

Most machine learning models are trained on a mix of malicious and clean features. Attackers routinely try to throw these models off balance by stuffing clean features into malware. Monotonic models are resistant against adversarial attacks because they are trained differently: they only look for malicious features. The magic is this: Attackers can’t evade a monotonic model by adding clean features. To evade a monotonic model, an attacker would have to remove malicious features.
The post New machine learning model sifts through the good to unearth the bad in evasive malware appeared first on Microsoft Security. READ MORE HERE…

Threatpost

Protecting Against Ransomware Attacks: A Checklist

July 24, 2019 TH Author Atlanta ransomware, city lake Florida ransomware, Cybersecurity, Malware, Podcasts, ransom, ransomware, riviera beach ransomware

In the second of a two part series discussing recent ransomware attacks against municipalities, Shawn Taylor with Forescout talks about how cities can protect themselves. READ MORE HERE…

Threatpost