Social Network For Security Executives: Help Make Right Cyber Security Decisions
The evolution of malware is garnering attention from security researchers and law enforcement, as the off-the-shelf banking Trojans known as Dyre and Dridex have now been linked to the theft of massive amounts of corporate and personal data.
DRIDEX or DYRE had become one of the leading banking Trojans, targeting over 240 financial institutions. DRIDEX/DYRE malware is descended from the ZEUS Banking Trojan, developed by…Continue
Added by T.D.Virwani on October 6, 2015 at 5:30pm — No Comments
Threat Intelligence Workshop by Bikash Barai:
( Read More:…Continue
Added by Gireesh Kumar on October 5, 2015 at 6:00pm — No Comments
In the third part of the PeopleSoft Security series,we will describe on how to log-in any account and gain full access to the PeopleSoft system.
Like many other enterprise business applications, PeopleSoft supports various Single Sign-On technologies. SSO enables authentication into several systems by a single action: a user logs into one system manually and into others automatically.
PeopleSoft supports its own…Continue
Added by Alexander Polyakov on October 1, 2015 at 8:30pm — No Comments
Now that we have covered PeopleSoft Architecture, it is time to continue with PeopleSoft security and describe some attack vectors against PeopleSoft system discovered by ERPScan researchers. The first one is an attack on back-end systems.
First, we should clarify some essential terms:
Added by Alexander Polyakov on October 1, 2015 at 8:00pm — No Comments
The quickly evolving Internet of Things or call it Internet of Everything will leave us more vulnerable to the cyber criminals. Government agencies are not prepared to combat the upcoming threat of “Online Murder”. Sounds Strange!!.. but we are heading towards this.
The upcoming IoT is an open source for the cyber criminals to exploit internet technology to target victims, the forensic techniques needs to address the danger posed by the cyber criminals.
"Internet of Everything"…Continue
Added by Anubhav Bathla on October 1, 2015 at 7:31pm — No Comments
Webinar on "Defusing Cyber Threats Using Malware Intelligence" Video by Arun Lakhotia.
( Read more: …Continue
Added by Gireesh Kumar on September 29, 2015 at 2:30pm — No Comments
CASB Workshop Part 1 by Bikash Barai:
Added by Gireesh Kumar on September 28, 2015 at 5:30pm — No Comments
Webinar on "Front Door Access to Pwning Millions of Android Devices" Video by Avi Bashan.
Added by Gireesh Kumar on September 22, 2015 at 3:30pm — No Comments
Wargame : Dashboard & Metrics For The Management Video by Renu Rajani,Sridhar Govardhan,Raghu Kumar Paruchuri,Tamaghna Basu.
Added by Gireesh Kumar on September 11, 2015 at 7:00pm — No Comments
Application Security Workshop Part 2 by Nilanjan De:
Added by Gireesh Kumar on September 11, 2015 at 6:30pm — No Comments
Application Security Workshop Part 1 by Jitendra Chauhan:
Application Security Workshop Part 1 Video by Jitendra Chauhan:…Continue
Added by Gireesh Kumar on September 9, 2015 at 7:30pm — No Comments
Network Forensic Tools & Techniques Workshop by Tamaghna Basu:
Added by Gireesh Kumar on September 9, 2015 at 7:00pm — No Comments
IBM Managed Security Services continuously monitors billions of events per year, as reported by more than 8,000 client devices in over 100 countries. This report is based on data IBM collected between 1 January 2014 and 31 December 2014 in the course of monitoring client security devices as well as data derived from responding to and performing analysis on cyber attack incidents. Because our client profiles can differ significantly across industries and company…Continue
Added by CISO Platform on September 9, 2015 at 4:30pm — No Comments
Today’s post is the last in the series of articles about XSS vulnerabilities in SAP systems. The previous parts describe how to prevent XSS in SAP NetWeaver ABAP and SAP NetWeaver J2EE.
XSS is one of the most popular vulnerabilities and its effect can range from a petty nuisance to a significant security risk, depending on the sensitivity of the data. In SAP products, 628 XSS vulnerabilities were discovered that is almost 22%…Continue
Added by Alexander Polyakov on August 25, 2015 at 5:48pm — No Comments
Added by Alexander Polyakov on August 25, 2015 at 5:47pm — No Comments
We continue our series of posts giving a review of one of the most frequent vulnerability which affects a lot of SAP modules: cross-site scripting, or XSS. Today's post describes how to protect SAP NetWeaver ABAP from XSS.
For all generic Web applications where you accept input parameters, you must use encoding methods provided by the ICF handler. The implementation of the encoding is…Continue
Added by Alexander Polyakov on August 25, 2015 at 5:46pm — No Comments
Oracle PeopleSoft applications are quite complex and consist of many components, so does their security. While there is almost no research on PS security, successful attacks against such systems happen from time to time. That’s why we decided to start a series of articles about some aspects of PS security.
These applications are designed to address the most complex business requirements. They…Continue
Added by Alexander Polyakov on August 24, 2015 at 6:44pm — No Comments
Hello, dear readers! Today I would like to talk about Oracle Security.
On August 11, Mary Ann – Oracle's CSO - published an incredibly shocking post about security researchers which was promptly deleted (either by herself or somebody else). The post was discussed by multiple resources such as…Continue
Added by Alexander Polyakov on August 24, 2015 at 6:38pm — No Comments
This year’s study examines the costs incurred by 36 Indian companies in 12 industry sectors after those companies experienced the loss or theft of protected personal data and then had to notify breach victims and/or regulators as required by laws and business…Continue
Added by CISO Platform on August 20, 2015 at 10:30pm — No Comments
Governance, Risk and Compliance is sometimes a managerial step or a mandatory step to adhere with regulations & maintain compliant systems. It widely helps in Risk Management.
Some of the major components of IT GRC are:
Added by pritha on August 18, 2015 at 4:30pm — No Comments