Spyget > In-House Malware Analysis: Why You Need It, How To Do It - Dark ...

[Dark Reading - All Stories] While most companies have a vulnerability management program in place, there’s a strong case to be made for an in-house malware analysis initiative as well. The two programs are complementary: Malware analysis combined with vulnerability management helps enterprises evaluate which systems are vulnerable, the scope of the threat and how to determine where it has or will spread, so you can respond quickly to contain it.

Previous [Previous] Latest Mac Malware Masks as PDF Doc...

Next [Next] Apple Updates Anti-Malware Tools to Address New Trojan Threat ...

Some related posts from Technorati and Google.

[Simply Security] Mobile malware skyrockets in early 2011, study finds | Simply Security: Just as the rise of smartphones and tablets was unprecedented, so was the rise of malware targeting such devices. According to G Data, mobile malware increased by more than 270 percent between the first half of 2011 and the first half of 2010.

[Dark Reading - All Stories] Security Researcher Wins Prestigious MacArthur "Genius" Grant ...: Network-based vulnerability scanners and Web application scanning tools can be invaluable in identifying exploitable flaws in network devices and Internet-facing software, but they may have weaknesses as well. In this Dark Reading Vulnerability Management Tech Center report, we discuss three critical areas in which scanners fall short -- and how to pick up your security program where they leave off.

[InfoHQ.com Tech News] Report Reveals Mobile Security Exploits to Double in 2011 | InfoHQ ...: IBM X-Force has documented a steady rise in the disclosure of security vulnerabilities affecting these devices.  X-Force research recommends that IT teams consistently employ anti-malware and patch management software for phones in enterprise environments.

[Totally Integrated Automation - Resources for the Automation and Engineering Professional] Whitelisting vs. Blacklisting: A more Secure Approach for Preventing ...: Often a not-so-good guy (a “black hat”) will publish information about a security vulnerability before Microsoft has developed a patch for it. Those are called “zero-day vulnerabilities,” because they occur before any patches have been developed for them.

[The News World™ || Your One Stop Social Network News Station™] US: Cyber attacks on utilities, industries rise (AP) | The News World ...: The Homeland Security Department’s control system program includes the emergency response team, a Cyber Analysis Center where systems are tested for vulnerabilities, a malware laboratory for analyzing cyber threats and a classified “watch and warning center” where data about threats are assessed and shared with other cyber security and intelligence offices.

[Home Improvement and Business] Instructions for removing Conficker | Home Improvement and Business: Blocking DNS lookup and automatic updates can help to prevent blocking your PC against Conficker B and C but not D Conficker patch in memory research Dnsapi.dll to block the website of each anti-malware Conficker A appears on November 21, 2009 and there is no remedy against Conficker A since. Imagine if the major networks such as the armed forces and decomposition Britain, France and others are not against attacks Conficker how can you keep your PC protected somewhat against such threats?

[US Cyber Labs - Blog] Major Cyber Attacks in 2011 -so far | US Cyber Labs - Blog: Defensive strategies can be dramatically improved by understanding how targeted malware attacks work as well as trends in the tools, tactics and procedures of the threat actors behind such attacks. By effectively using threat intelligence derived from external and internal sources combined with security tools that empower human analysts, organizations are better positioned to detect and mitigate such targeted attacks.Therefore, defenses against targeted malware attacks need to focus on detection and mitigation and not simply on prevention.as the challenges that targeted malware attacks pose for traditional defenses.

[Fuel Fix] Fuel Fix » Cyber attacks on U.S. utilities, industries rise: The Homeland Security Department’s control system program includes the emergency response team, a Cyber Analysis Center where systems are tested for vulnerabilities, a malware laboratory for analyzing cyber threats and a classified “watch and warning center” where data about threats are assessed and shared with other cyber security and intelligence offices.

[Social Barrel] Social Barrel » Sophos Alerts Mac OS X Users of New Trojan in PDF ...: The Trojan, identified as the OSX/Revir-B Trojan, disguises itself as a PDF, or portable document file, and taps on Mac OS X vulnerabilities. In a post on its blog, Sophos said that it performed an in-house test of the malware but failed to run the Trojan as intended by the author;

[TechNet Blogs] A tale of grannies, Chinese herbs, Tom Cruise, Alureon and ...: I turned my attention to trying to determine the purpose of the URLs hosted on the free blogging sites "LiveJournal" and "WordPress". The content of each page appeared to be benign, containing numerous and varied JPGs hosted on the free image provider "imageshack.us".

Reflected tags on Technorati: Blog, ,