Lenny Zeltser

JANUARY 6, 2021

Malware analysis sits at the intersection of incident response, forensics, system and network administration, security monitoring, and software engineering. Understand Where You Currently Fit Into the Malware Analysis Process. I like grouping them in 4 categories, which I detailed in the post Mastering 4 Stages of Malware Analysis.

Metadata 145

Metadata IT Access Security 145

eSecurity Planet

APRIL 15, 2022

Vulnerability assessment tools usually scan applications for known vulnerabilities. Some of the tools we’ll see in this top 10 list are bundled in Kali Linux , a super-charged security distribution that can run both pentests and vulnerability tests. Also see our guides to: Breach and attack simulation tools.

Security 116

Security Access Risk Marketing 116

eSecurity Planet

FEBRUARY 8, 2023

ChatGPT has raised alarm among cybersecurity researchers for its unnerving ability in composing everything from sophisticated malware to phishing lures – but it’s important to keep in mind that the tool can help support cybersecurity defenses as well. ChatGPT Security Tools Coming? “It will be fun, engaging, and memorable.”

Cybersecurity 114

Cybersecurity Security awareness Phishing Ransomware 114

eSecurity Planet

APRIL 13, 2023

A simple test you can practice consists of uploading the original and the packed version of a malware sample to your favorite platform — for example, VirusTotal. The packed version is usually caught significantly fewer times compared to the original version of the malware, and many antivirus tools may simply miss the packed version.

Artificial Intelligence 99

Artificial Intelligence Archiving Cybersecurity Encryption 99

Security Affairs

APRIL 17, 2023

China-linked APT41 group used the open-source red teaming tool GC2 in an attack against a Taiwanese media organization. Google Threat Analysis Group (TAG) team reported that the China-linked APT41 group used the open-source red teaming tool Google Command and Control ( GC2 ) in an attack against an unnamed Taiwanese media organization.

Phishing 97

Phishing Cloud Government Education 97

Security Affairs

SEPTEMBER 28, 2022

nuvola is the new open-source cloud security tool to address the privilege escalation in cloud environments. nuvola is the new open source security tool made by the Italian cyber security researcher Edoardo Rosa ( @_notdodo_ ), Security Engineer at Prima Assicurazioni. Entering nuvola. Entering nuvola.

Cloud 98

Cloud Security Metadata Data breaches 98

IBM Big Data Hub

AUGUST 28, 2023

Text analysis takes it a step farther by focusing on pattern identification across large datasets, producing more quantitative results. When used strategically, text-mining tools can transform raw data into real business intelligence , giving companies a competitive edge. How does text mining work? noun, verb, adjective, etc.),

Mining 57

Mining Marketing Artificial Intelligence Customer Experience 57

erwin

NOVEMBER 28, 2019

Enterprise architecture tools are becoming more important than ever. The International Enterprise Architecture Institute (IEAI) defines enterprise architecture (EA) as “the analysis and documentation of an enterprise in its current and future states from an integrated strategy, business and technology perspective.”.

Digital transformation 145

Digital transformation Metadata Government Marketing 145

erwin

JUNE 14, 2019

Digital transformation examples can be found almost anywhere, in almost any industry. Amazon began as a disruptor to brick-and-mortar bookstores, eventually becoming one of the most obvious digital transformation examples as it went on to revolutionize online shopping. Digital Transformation in Retail.

Digital transformation 111

Digital transformation Retail Government Customer Experience 111

Schneier on Security

NOVEMBER 20, 2023

Generative AI is going to be a powerful tool for data analysis and summarization. Here’s an example of it being used for sentiment analysis. My guess is that it isn’t very good yet, but that it will get better.

IT 101

IT Artificial Intelligence Privacy 101

ForAllSecure

MAY 25, 2023

There are a lot of options for software security testing tools. Some types of tools, such as SCA tools, are made to find vulnerabilities in existing code, while others, such as DAST tools, are more useful for finding vulnerabilities in your own code. How do you know which ones are right for you? is included.

Libraries 52

Libraries Marketing Security Risk 52

ForAllSecure

DECEMBER 8, 2022

First, most SAST tools return both false positives and false negatives, meaning they both miss real vulnerabilities and provide false positives. Additionally, they lack a bug report with an example that would allow developers to reproduce errors. Fundamentally, your SAST tool returns either "vulnerable"—oh no, stop production!—or

Security 52

Security Risk IT 52

eSecurity Planet

FEBRUARY 24, 2022

Pen tests are often performed by third parties, but as these outside tests can be expensive and become dated quickly, many organizations perform their own tests with pen testing tools, using their own IT personnel for their red teams (attackers). Others include vulnerability scanning tools and vulnerability management solutions.

Passwords 104

Passwords Systems administration Security IT 104

Security Affairs

JUNE 15, 2021

The MASQ tool could be used by attackers to emulate device fingerprints thus allowing them to bypass fraud protection controls. Such activity is not limited to just payments – bad actors are also abusing social media and e-mail accounts using such tools. The tool is available for $130 and each new device fingerprint starts from $1.

Authentication 119

Authentication Risk Retail Analytics 119

IBM Big Data Hub

JULY 10, 2023

Vibration analysis (or vibration monitoring) is a powerful diagnostic tool for identifying, monitoring and preventing mechanical failures in rotating and reciprocating machinery. At its core, vibration analysis is the study of the oscillatory motions of machines and their components around an established equilibrium point.

Energy and Utilities 59

Energy and Utilities IT Manufacturing Risk 59

Security Affairs

MARCH 18, 2021

Wintriage is a live response tool that extracts Windows artifacts, it allows to extract the most artifacts as possible, but in a selective way. With them, I acquired Windows artifacts on dozens of incidents for further analysis in laboratory machines. Those tools are great, but the extracted info is not always enough.

Encryption 114

Encryption IT Cybersecurity Security 114

eSecurity Planet

MAY 25, 2022

Intrusion detection system (IDS) and intrusion prevention system (IPS) technologies – often combined as intrusion detection and prevention (IDPS) – have been in use for decades, yet they remain important cybersecurity tools even in the face of today’s rapidly changing cyber threats and complex IT environments. IDS vs. IPS.

Cloud 91

Cloud Encryption Security Artificial Intelligence 91

Lenny Zeltser

MARCH 2, 2019

You’ll want snapshots when examining malware, so you can revert the VM’s state to start a new investigation or backtrack an analysis step. For example, for VMware you’d extract the files into a dedicated folder, then launch the file named “MSEdge – Win10.vmx” Next, install malware analysis tools.

File names 112

File names Access Archiving Passwords 112

IBM Big Data Hub

SEPTEMBER 1, 2022

Extended Planning and Analysis (xP&A), is not a new concept for IBM clients who use IBM Planning Analytics with Watson , formerly known as Cognos TM1. For the past several years, clients have embraced the need to tie operational decisions to the financial impact from both planning and analysis perspectives.

Analytics 52

Analytics Manufacturing Access 52

Preservica

SEPTEMBER 7, 2022

Recharacterizing files at scale to align with the latest tools and best practice. It involves running tools against a set of files to uncover information about them, commonly in the form of technical metadata. Preservica uses the tool DROID. Digital Preservation is a continuous and dynamic set of activities.

Digital preservation 94

Digital preservation Archiving Metadata IT 94

IT Governance

JUNE 19, 2019

The Regulation doesn’t define what ‘high risk’ is, so this blog provides examples of processing activities that require a DPIA. Before we crack on with our examples, we should explain how you can identify high-risk data processing activities. Face and iris recognition and fingerprint scans are the most common examples.

GDPR 73

GDPR Personal data Risk Data breaches 73

ForAllSecure

JUNE 14, 2021

Static Analysis. Static application security testing, also known as static code analysis is perhaps the most popular tool. To provide more specificity, we'll focus for the moment on the software composition analysis or SCA. For example CVE 2014 0160, aka Heartbleed was a new class of vulnerability.

Risk 52

Risk Paper Security IT 52

ForAllSecure

JUNE 22, 2021

Best practices, industry experts, and even independent DoD tests have stressed that the key to adding security into DevOps pipelines is focusing on the “test” phase and making sure your security tools are actionable. Static Analysis? Putting the “Sec” in DevSecOps. This approach perpetuates an apathetic morale.

Security 52

Security Compliance IT 52

Security Affairs

FEBRUARY 14, 2024

“While command-not-found serves as a convenient tool for suggesting installations for uninstalled commands, it can be inadvertently manipulated by attackers through the snap repository, leading to deceptive recommendations of malicious packages.” ” reads the analysis published by Aqua.

Cloud 120

Cloud Cybersecurity IT Security 120

The Last Watchdog

FEBRUARY 20, 2024

These tools saved 2.5 Examples of AI chatbot platforms include: •Dialogflow: Developed by Google, Dialogflow is renowned for its comprehension capabilities. Microsoft Bot Framework: Microsoft’s offering is a robust platform providing bot development, deployment and management tools. per interaction.

Cybersecurity 218

Cybersecurity Authentication Communications Privacy 218

Security Affairs

MARCH 21, 2019

WikiLeaks obtained thousands of files allegedly originating from a CIA high-security network that details CIA hacking techniques, tools, and capabilities. Digging in the huge trove of files, it is possible to find also information about the GHIDRA , a Java-based engineering tool. ” continues the analysis. Open the project.

Authentication 111

Authentication Archiving Security IT 111

eSecurity Planet

APRIL 12, 2024

12 Data Loss Prevention Best Practices 3 Real Examples of DLP Best Practices in Action How to Implement a Data Loss Prevention Strategy in 5 Steps Bottom Line: Secure Your Operations with Data Loss Prevention Best Practices When Should You Incorporate a DLP Strategy? Conduct content analysis to improve safety measures.

Encryption 117

Encryption Risk Data breaches Access 117

erwin

NOVEMBER 21, 2019

As enterprise architectures become more complex, enterprise architecture tools are becoming more important than ever. White Paper – Data-Driven Business Transformation: Using data as a strategic asset and transformational tool to succeed in the digital age. In the era of data-driven business, such perspective is critical.

Digital transformation 77

Digital transformation Government Paper Cloud 77

erwin

NOVEMBER 21, 2019

As enterprise architectures become more complex, enterprise architecture tools are becoming more important than ever. Data-Driven Business Transformation: Using data as a transformational tool to succeed in the digital age. For example, cases have been made for enterprise architects taking a seat at the security table.

Digital transformation 72

Digital transformation Government Cloud IT 72

The Last Watchdog

MAY 2, 2023

Every automation tool is like an added employee , strengthening SOCs and empowering individual analysts to find more valuable ways to employ their expertise or receive additional training on more complex topics. Cybersecurity staff can incorporate automation tools into every risk management process step.

Cybersecurity 167

Cybersecurity Risk Phishing Authentication 167

Krebs on Security

AUGUST 13, 2021

. “Cryptoassets have become an important tool for cybercriminals,” Robinson wrote. ” Cryptocurrency exchanges make use of blockchain analytics tools, he said, to check customer deposits for links to illicit activity. However, laundering and cashing-out these proceeds is a major challenge.”

Blockchain 290

Blockchain Analytics Marketing Ransomware 290

The Last Watchdog

NOVEMBER 6, 2023

Scans slip through These attacks are so successful because many traditional email security tools focus only on text-scanning, allowing image-based attacks to slip through. As a few examples: •Secure email gateways pick up the first URL a QR code sends them to, but not the malicious redirect.

Phishing 167

Phishing Education Marketing Cloud 167

Collibra

MARCH 12, 2024

The term “advanced analytics” gained widespread recognition in the fields of data analysis and business intelligence (BI) during the early 2000s. This enables business users to make better-informed decisions based on more sophisticated analysis that goes beyond purely historical data reporting. What is advanced analytics?

Analytics 52

Analytics Mining Metadata Big data 52

Security Affairs

MARCH 14, 2024

ChatGPT plugins are additional tools or extensions that can be integrated with ChatGPT to extend its functionalities or enhance specific aspects of the user experience. These plugins may include new natural language processing features, search capabilities, integrations with other services or platforms, text analysis tools, and more.

Access 125

Access Authentication Passwords Security 125

IBM Big Data Hub

APRIL 23, 2024

A good example of change that an organization might implement is a new technology, like generative AI (Gen AI). Throughout this blog, we use this example to better explain each step of implementing change management. Think back to the example of gen AI as the change implemented in the organization. Then, analyze the data.

Communications 57

Communications Digital transformation IT 57

Reltio

JULY 2, 2019

Things are becoming more flexible and the challenge now is probably that there is lots of technology tools around and they have over-lapping functionality. Don’t get distracted by the tools and shiny new technology toys. One example is a project I did at Boots who are famous for 3-for-2 promotions. Keep learning.

Analytics 58

Analytics Insurance Artificial Intelligence Data science 58

IT Governance

MARCH 28, 2018

Below is an example of a customisable business continuity plan template from the bestselling ISO22301 BCMS Documentation Toolkit. Example of the business continuity plan template included in the ISO22301 BCMS Documentation Toolkit, with author comments providing instructions on how to complete the template.

Communications 58

Communications Compliance IT 58