We have posted a webinar by infosecurity magazine on our Film Festival page.  Look near the bottom of the page. The security experts discuss how easy it is to deceive people.  They make the point that given a choice between infiltration by technical means  and attacking people, attacking people with social engineering is the attack of choice because it is fast, easy and has a high probability of success. The attackers are targeting users to infiltrate systems. Users need tools that assist them in identifying cleverly constructed spearphishing emails. That is the function of SP Guard.

It is being widely reported in the press that the US State Department has been compromised in a cyberattack.   US State Department USA Today  reports that although no classified information was  compromised, the attack has forced the State Department to take down its unclassified email system. USA Today reports: To learn that additional government agencies beyond the White House were attacked, "is not at all surprising," said Rick Holland, a principal analyst and cybersecurity expert at Forrester Research. "What is surprising is that we are two weeks into it and it's just now coming out. Likely, the attacker is [...]

On October 5, 2014, FBI Director James Comey discussed cyber espionage with Scott Pelley of CBS 60 Minutes. At 8:50 Director Comey discusses cyber security. Scott Pelley: What countries are attacking the United States as we sit here in cyberspace? James Comey: Well, I don't want to give you a complete list. But I can tell you the top of the list is the Chinese. As we have demonstrated with the charges we brought earlier this year against five members of the People's Liberation Army. They are extremely aggressive and widespread in their efforts to break into American systems to [...]

Seculert is reporting on a simple technique that defeats sandbox protection. Seculert has identified Sazoora.B, a new version of the Sazoora.A Trojan. Among other things, what makes Sazoora.B new is that it waits 15 minutes before becoming active. The significance of this simple idea is that during this dormant phase the Trojan is undetectable.  TechTarget SearchSecurity elaborates on this delay feature: Many times, systems will delay delivering an email or connecting to a webpage until a file has successfully passed the sandbox. By delaying execution by, say, 15 minutes, the target's malware analysis potentially could time out and the malware [...]

We have posted our third video on our YouTube channel. In this video, we discuss using SP Guard to help your cyber sentries tell good guys from bad guys.  Cyber sentries?  Yes.  APT attackers use email to infiltrate systems -- turning every email user into a cyber sentry. Of course, please check out our YouTube channel.

We have posted our second video on our new YouTube channel. In this video, we discuss using SP Guard to identify attacks before systems are compromised.  You see us discuss time fairly often.  This is because APT is a race -- it is a race between the spies trying to exfiltrate information and the defenders seeking to stop the spies before the exfiltration.  As the United States Senate told us earlier this week, the spies are winning this race. Of course, please check out our YouTube channel.

On September 17, 2014, the Senate Armed Services Committee released a declassified version of its report Inquiry into Cyber Intrusions Affecting U.S. Transportation Command Contractors. In the report the Committee detailed intrusions into key US defense transportation assets. This passage from page viii is representative of the Committee's findings. What is the sophisticated cyber method used by these APT actors? Spearphishing. The classic cyber-intrusion method in which the attacker sends the intended victim a deceptive email. Taking the action called for in the deceptive email initiates a chain of events which compromises systems. After this chain of events is initiated, cyber defenders [...]