NDYNAMICS Blog

Ordinarily, one of the best ways to protect your organization’s infrastructure is to make sure any and all patches administered to the software you use are applied as soon as possible after they’ve been released. However, patches don’t help against threats that aren’t discovered at the moment they are released. The recent spread of BCMUPnP_Hunter botnet shows that it’s not enough for people to keep patching their systems.

On Monday, June 15, LastPass officials warned that attackers have compromised servers that run the company's password management service and made off with some master passwords of users of the LastPass service. You can read more detail about the attack here:  http://arstechnica.com/security/2015/06/hack-of-cloud-based-lastpass-exposes-encrypted-master-passwords and here: https://blog.lastpass.com/2015/06/lastpass-security-notice.html/ There's lots of jargon in those article about algorithms, encryption, hashes, anomalies, multifactor authentication, vault contents, SHA's and GPU's.  Enough to make your head spin!  Here's the bottom line: the passwords you store on ...

You might recall how the Silk Road, an illegal online drug market, was recently shut down. Similar to the Silk Road, there’s another distributor of sensitive information out there; this one dealing with zero-day vulnerabilities. These types of cyber threats sell for top-dollar, and hackers are willing to pay in order to access your network.