Security Response WeblogSecurity ResponseAll Your (Data)base Are Belong to Trojan.Eskiuel- September 17, 2008 Modern SQL databases are flexible, efficient, and can run commands at an OS level easily-a perfect target from a malicious code perspective! Our honeypot servers are full of plenty of worms that spread by email, IM, file-sharing, or network vulnerabilities, so finding a Trojan that targets SQL databases is always an unusual surprise for a virus researcher.https://forums.symantec.com/syment/blog/article?blog.id=malicious_code&message.id=213#... Recent Microsoft Vulnerability Exploited in the Wild- September 15, 2008 Not surprisingly, attackers are again targeting vulnerabilities from the latest set of Microsoft Security Bulletins. This time around, it is the Microsoft Media Encoder ActiveX overflow patched in MS08-053. This attack chronology is another example of the rapid adoption of public exploits into widely deployed exploit toolkits.https://forums.symantec.com/syment/blog/article?blog.id=vulnerabilities_exploits&messa... Top Data Protection Myths - Myth 6- September 12, 2008 Just in time for VMworld this week, I'd like to debunk one last myth around data protection-the myth that virtual machines automatically require an additional set of tools to properly protect them. The move to virtual environments and all of the benefits they afford has been widely addressed.https://forums.symantec.com/syment/blog/article?blog.id=data_loss_prevention&message.i... Top Data Protection Myths - Myth 5- September 11, 2008 As we make our way through common data protection myths, we have talked quite a bit about how innovation has advanced data protection technologies over the last few years. In fact, until fairly recently data protection was all about backup. How fast can we backup our data What is the success rate of backups These were the primary concerns for IT administrators.https://forums.symantec.com/syment/blog/article?blog.id=data_loss_prevention&message.i... Top Data Protection Myths - Myth 4- September 10, 2008 In Myth 2 we talked about granular recovery as a main driver for implementing disk into the backup infrastructure - and a good way to help IT meet today's RPOs and RTOs. As I mentioned, granular level recovery is one technology that enables IT meet those RTOs and RPOs. However, I didn't talk about some of the perceived challenges of granular level recovery, so I'd like to debunk the myth that it takes too long to restore data at this level.https://forums.symantec.com/syment/blog/article?blog.id=data_loss_prevention&message.i... Warning: Portuguese Spam Masquerading as Official Symantec Email- September 10, 2008 We have observed a fraudulent spam attack masquerading as an email from Symantec. This email is in Portuguese and contains the Symantec logo and coloring, which make it appear as a legitimate email from Symantec. The "From" line is forged to add further credibility.https://forums.symantec.com/syment/blog/article?blog.id=spam&message.id=116#M116 Top Data Protection Myths - Myth 3- September 9, 2008 Upgrading your data protection software is generally perceived as a painful process among the IT crowd. At the same time, that crowd is seeing the need to upgrade. Gartner research from July 2008 proved this. In a survey of 70 IT managers, 66% of respondents said they were planninghttps://forums.symantec.com/syment/blog/article?blog.id=data_loss_prevention&message.i... Microsoft Patch Tuesday for September 2008- September 9, 2008 All of the vulnerabilities this month are client-side issues rated "critical." Five of the issues affect the GDI+ graphics library; the rest affect Media Player, Microsoft Office, and Media Encoder. All of the issues have the potential to see active exploits, but the GDI+ vulnerabilities have the most avenues of attack and affect the most systems. The OneNote protocol handler vulnerability is fairly trivial to exploit.https://forums.symantec.com/syment/blog/article?blog.id=vulnerabilities_exploits&messa... Mealtime in South America Makes Me Think About Backing Up VMware- September 9, 2008 I've spent the last couple weeks travelling through Latin America (Mexico, Brazil, and Argentina) and the one commonality between my experiences in each of these three countries is that I don't speak the local language in any of them. In high school, I studied French, not Spanish, and Portuguese wasn't even taught.https://forums.symantec.com/syment/blog/article?blog.id=data_loss_prevention&message.i... Top Data Protection Myths - Myth 2- September 8, 2008 Technological advancement with hard disks has been a tremendous driver for data protection technologies, yet some users think disk-based technologies are too complicated. We don't advocate that users replace tape entirely; in fact, there is a place for tape backups in most IT environments.https://forums.symantec.com/syment/blog/article?blog.id=data_loss_prevention&message.i... |