Security Community Blog

Brandon Noble | 30 Aug 2012 | 7 comments

Greetings everyone.

We are still getting a lot of questions about Symantec's coverage of the most recent Java 0-Day. I thought I would take a moment to jot down a list of our current coverage for this event, and hopefully save everyone some time and hassle.

Current Coverage:

24063 - Web Attack: Malicious Java Download 3
Created prior to the advent of the 0day being used in the wild. This was detecting the Metasploit Exploit Module released for the exploit.

25826 - Web Attack: Blackhole Toolkit Website 30
Also created prior to the 0 Day. This detects BlackHole Toolkits trying to make use of the new vuln as well.

Learn How to Protect Your Hardest-to-Find IP with Intelligent DLP

Jhildy11 Xcend Group | 14 Aug 2012 | 0 comments

In case you missed it, see the archived version from last weeks webinar " Learn How to Protect Even Your Hardest-to-Find IP with Intelligent Data Loss Prevention"

With the average cost of a breach now topping an incomprehensible $7 million, more and more organizations are looking to Data Loss Prevention solutions to protect their highest value data. Join XCEND, a Platinum Symantec partner and DLP Master Specialist, to learn how you can accurately detect and protect all types of confidential data wherever it is stored or used. (54 min)

Here's the Link to see the Archived Version: https://www2.gotomeeting.com/register/430279362 or go to our website at www.xcendgroup.com to see all of...

Flamer - The Most Complex Malware Threat Since Stuxnet

BJT | 04 Jun 2012 | 0 comments

At this time, Flamer seems to have targeted only a few hundred organizations and individuals located in a small segment of the globe. But make no mistake; Flamer is important worldwide. The complexity of the code within Flamer is on par with that seen in Stuxnet; arguably the most complex piece of malware Symantec has analyzed to date. However the mission of Flamer is much different from that of Stuxnet, which was designed to deliver a payload that disrupted the systems it was targeted toward. Symantec and others’ research indicates that Flamer, as of this moment; is purely focused on capture and exfiltration of sensitive information.

The good news for our public sector customers is that Symantec has protections in place to detect this threat (W32.Flamer). Specifically, we have:

AntiVirus, AntiSpyware, IPS component, Symantec Insight, and Heuristics detection and conviction measures in Symantec Protection Suite...

Send us your cloud security experiences from the field!

Beverly van de Velde | 29 Mar 2012 | 0 comments

Education Enablement Services is developing a Symantec Cloud Security Essentials course that combines the CSA training in order to achieve the CCSK credential & a Symantec Certified Professional (SCP) in Cloud Security credential.

This is an open call for your experiences with reviewing, designing, or implementing security solutions in a cloud environment. These could come from situations unique to the cloud (ex. compliance issues for systems in a public cloud) - OR - general security solutions addressed in cloud environments (ex. how existing encryption policies were applied to a cloud architecture).

We need your:
• Specific examples of security solutions in cloud environments
• Example cloud architectures – good or bad – implemented by customers
• Key questions, challenges, and concerns from customers migrating their infrastructure to cloud
...

Domo Arigato Mr. Morto.....or........Helllooo? Morto?

Brandon Noble | 01 Sep 2011 | 0 comments

Over the weekend, Microsoft and F-secure issued warnings about a new global threat called “Morto”, and The Internet Storm Center has been seeing a large spike in traffic on Port 3389.

The spike looks to have been caused by the RDP (Remote Desktop) portion of the worm calling around looking for RDP connections. Once it finds one, it uses a small list of weak passwords and ..pwnage ensues.

Symantec detects this threat as W32.Morto and Security Response and will continue to perform deeper analysis throughout the next several days. So far, they have uncovered several dozen different MD5s that are all part of this same threat family.

Signs of Morto in your environment

As we learned with W32.Downadup:
Brute force attacks + Small list of passwords = Account lockouts....

Bit9’s Adaptive Application Whitelisting Technology Now Integrated with Symantec Protection Center (SPC)

KatieBurton | 29 Aug 2011 | 0 comments

Bit9, the market leader in adaptive application whitelisting, has announced their integration with Symantec Protection Center, Symantec’s centralized security management console.

"To effectively mitigate security risks in their environment, our customers need visibility into proven third-party solutions like Bit9 Parity Suite. By providing single sign-on and data integration between our technologies, we are able to expand our customers' view into local security events and enable them to more quickly mitigate endpoint security risks," said Matthew Steele, Senior Director of Product Management at Symantec.

About Bit9 Parity Suite

Bit9's Parity Suite's adaptive application whitelisting solution protects organizations from modern cyber security threats. It accomplishes this through...

Protection Center 2.0 Has Hit The Streets- See What Our Beta Customers Are Saying

KatieBurton | 23 Aug 2011 | 9 comments

Friday July 29th Symantec Protection Center 2.0 was released for General Availability. This release focused on extending the integrations found in our 1.0 release, third party products and the Symantec Global Intelligence Network to provide existing Symantec customers with relevant, actionable security intelligence. See below for an overview of the release and what our beta customers are saying! Protection Center is a free product, available at no additional charge for existing Symantec customers.

Response from Beta Customers

“One stop shop.. In my book it will empower my team.” – Fortune 500 financial services organization
“Install was easy, simply brilliant!” – European IT Value Added Reseller (VAR)
“Already plugging this to my clients, big time” – Enterprise IT Value Added Reseller (VAR)
“Will absolutely recommend to customers with integrated products” – Government IT...

SEP 12 Technical Certification & Accreditation Exams - Available Aug 29th!

Beverly van de Velde | 08 Jul 2011 | 0 comments

The SCS and STS SEP 12 exams become available at Prometric on August 29th.

Now that SEP 12 is available, be sure to get experience and training in order to prepare to become a Symantec Certified Specialist (SCS; available to all end users including customers) or a Symantec Technical Specialist (STS; available only for partners and employees).

Customers: Check out http://go.symantec.com/certification to learn more about the Symantec Certified Specialist (SCS) program and available exams.

Partners: Visit PartnerNet to learn more about the Symantec Technical Specialist (STS) program and available exams.

Symantec Protection Suite Enterprise Edition for Endpoints 4.0

florence | 02 Jul 2011 | 0 comments

Symantec Protection Suite Enterprise Edition for Endpoints 4.0
General Availability: July 05, 2011

What does this product do?

Symantec Protection Suite Enterprise Edition for Endpoints enables you to effectively manage the business risk of IT by reducing the risk profile of your most frequently targeted and attacked assets.
It helps drive out the costs security incidents create – such as lost productivity, revenue, and customer trust – by integrating protection solutions that increase the operational efficiency of your IT organization.

Key Product Features (What’s new from last version)

Symantec Protection Suite Enterprise Edition for Endpoints 4.0 (SPS EE for Endpoints 4.0) adds the following new capabilities:

•Symantec Endpoint Protection, featuring advanced protection capabilities
•Symantec Protection Center integrated, centralized security...

Symantec Protection Suite Enterprise Edition 4.0

florence | 02 Jul 2011 | 1 comment

Symantec Protection Suite Enterprise Edition 4.0
General Availability: July 05, 2011

What does this product do?

Symantec Protection Suite Enterprise Edition is powered with Symantec Insight and protects with the industry’s fastest, most-effective endpoint security, combined with industry-leading messaging protection and innovative Web security.

Powerful, centralized visibility and control are achieved with Symantec™ Protection Center enabling policy enforcement, consolidated reporting, and real-time intelligence to increase security posture while reducing upfront and on-going costs.

Key Product Features (What’s new from last version)

Symantec Protection Suite Enterprise Edition 4.0 (SPS EE 4.0) adds the following new capabilities:

o Symantec Endpoint Protection, includes Symantec Insight Technology for the fastest, most effective security

o Symantec System...

Security Community Blog

Response from Beta Customers

Links

About Security Community Blog

Filter by:

Blog Tags