network security

5 Reasons Why Network Security Training Should Be Your Next Move

Posted on by Admin
5 Reasons Why Network Security Training Should Be Your Next Move

If you’re thinking about getting into tech or are already in it and considering your next step, network security training is one of the smartest moves you can make—and we have five powerful reasons to back that up. But before we dive in, you might be wondering, What’s the difference between ‘network security’ and cybersecurity?  (Don’t worry. We hear this question all the time.) Let’s define what “network security” refers to, specifically: “Network security” is a…

Read More

Network Visibility Module and Zeek Detections in Secure Network Analytics

Posted on by Admin
Network Visibility Module and Zeek Detections in Secure Network Analytics

Secure Network Analytics version 7.5.2 has been released, offering exciting new features such as the Network Visibility Module (NVM) and Zeek detections. We are expanding our detections across existing and new sources, and our detections engine now ingests NVM telemetry and Zeek logs, introducing nine new alerts prominently displayed in Analytics. These alerts are also aligned with the widely recognized MITRE ATT&CK framework. By integrating a more diverse range of telemetry sources, Secure Network Analytics…

Read More

The Quantum Sky Is Falling! Understanding the Quantum Threat to Network Security

Posted on by Admin
The Quantum Sky Is Falling! Understanding the Quantum Threat to Network Security

Confidentiality is a fundamental pillar of information security. In sensitive deployments, such as those involving federal governments, military and defense agencies, and large financial institutions, the demand for confidentiality extends well beyond the typical 5 to 10 years, often reaching 20 years or more. The same also applies to telecom operators and enterprises providing services to any of these critical agencies. With the existing classical computers, this requirement of forward secrecy for encryption could be…

Read More

Managing risks in an evolving cybersecurity environment

Posted on by Admin
Managing risks in an evolving cybersecurity environment

In today’s digital landscape, the rise of mobile device usage has made enterprises increasingly vulnerable to fraud. Recent research indicates that 76% of enterprises lack sufficient protection against voice and messaging fraud. This gap in security has become a critical vulnerability as smishing (SMS phishing) and vishing (voice phishing) surge following the recent developments in AI technology, which allows fraudsters to target more victims with increased sophistication. With 61% of enterprises reporting significant financial losses…

Read More

Cybercriminals Use Go Resty and Node Fetch in 13 Million Password Spraying Attempts

Posted on by Admin
Cybercriminals Use Go Resty and Node Fetch in 13 Million Password Spraying Attempts

Feb 05, 2025Ravie LakshmananCybersecurity / Cloud Security Cybercriminals are increasingly leveraging legitimate HTTP client tools to facilitate account takeover (ATO) attacks on Microsoft 365 environments. Enterprise security company Proofpoint said it observed campaigns using HTTP clients Axios and Node Fetch to send HTTP requests and receive HTTP responses from web servers with the goal of conducting ATO attacks. “Originally sourced from public repositories like GitHub, these tools are increasingly used in attacks like Adversary-in-the-Middle (AitM)…

Read More

Bitter APT Targets Turkish Defense Sector with WmRAT and MiyaRAT Malware

Posted on by Admin
Bitter APT Targets Turkish Defense Sector with WmRAT and MiyaRAT Malware

Dec 17, 2024Ravie LakshmananCyber Espionage / Malware A suspected South Asian cyber espionage threat group known as Bitter targeted a Turkish defense sector organization in November 2024 to deliver two C++-malware families tracked as WmRAT and MiyaRAT. “The attack chain used alternate data streams in a RAR archive to deliver a shortcut (LNK) file that created a scheduled task on the target machine to pull down further payloads,” Proofpoint researchers Nick Attfield, Konstantin Klinger, Pim…

Read More

Leveraging Threat Intelligence in Cisco Secure Network Analytics, Part 2

Posted on by Admin
Leveraging Threat Intelligence in Cisco Secure Network Analytics, Part 2

This blog is continuation of the previous blog on using Cisco Secure Network Analytics. In this part, we cover leveraging public Cisco Talos blogs and third-party threat intelligence data with Cisco Secure Network Analytics. Be sure to read the first part as this part makes references back to Host Group and Custom Security Event instructions covered in the original blog. Cisco Talos Blogs The talented researchers at Cisco Talos regularly publish blogs on threats and…

Read More

Products Of The Year 2024: The Finalists

Posted on by Admin
Products Of The Year 2024: The Finalists

CRN staff compiled the top partner-friendly products that launched or were significantly updated over the last year. Now it’s up to solution providers to choose the winners. Application Performance and Observability As more applications run in hybrid-cloud and multi-cloud environments, maintaining application performance has becoming a more complex task. Application performance management and observability tools help IT organizations maintain the health, performance and user experience of business applications, according to market researcher Gartner. Such tools…

Read More

Exploring AAA and TACACS Configuration with Cisco Modeling Labs

Posted on by Admin
Exploring AAA and TACACS Configuration with Cisco Modeling Labs

I’ll admit to not having done a thorough verification. However, I’d still bet money that AAA/RBAC services are more frequently mentioned on Cisco certification blueprints than any other networking topic. From the CCNA to the Expert level, you’ll find AAA, TACACS+, RADIUS, and RBAC listed on the exam topics. Here is a handful of examples if you’d like to check it out yourself: 200-301 CCNA 2.8 Describe AP and WLC management access connections (Telnet, SSH,…

Read More

Enter the World of Ethical Hacking with Confidence

Posted on by Admin
Enter the World of Ethical Hacking with Confidence

TL;DR: Get lifetime access to The 2024 All-in-One Ethical Hacking Course Bundle for just $44.99 and start mastering ethical hacking techniques to protect and secure networks. The 2024 All-in-One Ethical Hacking Course Bundle is a must-have for professionals and aspiring cybersecurity experts looking to enhance their skills in a rapidly evolving field. With 18 comprehensive courses totaling 92 hours of self-paced content, this bundle provides everything you need to dive deep into ethical hacking, penetration…

Read More
1 2 3 … 11