Blog Elements

Half Sized Blog Element (Single Author Style)

Half Sized Blog Element (Multi Author Style)

CISO Summit – The Platform to Congregate, Connect and Interact

2011-11-04/0 Comments/in Conference/by SecurityOrb_Staff

s Your Organization Ready for the Threats & Challenges Ahead?

Stay ahead of attackers. Arrive with questions and concerns and leave armed with innovative ideas, out of the box solutions and a group of new industry colleagues.

The EC-Council CISO Executive Summit provides a much-needed platform for IS leaders to discuss the challenges the industry is facing and develop guidance for information security executive leaders to develop a new way of thinking to ensure your success in protecting organizations.

Security News: US report blasts China, Russia for cybercrime; Duqu Malware: Still No Patch; MIT server hijacked in drive-by download campaign

2011-11-03/0 Comments/in General Security/by SecurityOrb_Staff

Cyberattacks by Chinese and Russian intelligence services, as well corporate hackers in those countries, have swallowed up large amounts of high-tech American research and development data, and that stolen information has helped build their economies, U.S. intelligence agencies have concluded. The recently discovered Duqu malware can exploit a zero-day Windows kernel vulnerability, which would help it to infect PCs and spread without being detected. A server belonging to the Massachusetts Institute of Technology was commandeered by hackers who used it to launch attacks against other websites as part of a larger drive-by download campaign, according to antivirus vendor BitDefender.

CISO Summit – The Platform to Congregate, Connect and Interact

2011-11-04/0 Comments/in Conference/by SecurityOrb_Staff

s Your Organization Ready for the Threats & Challenges Ahead?

Stay ahead of attackers. Arrive with questions and concerns and leave armed with innovative ideas, out of the box solutions and a group of new industry colleagues.

Security News: US report blasts China, Russia for cybercrime; Duqu Malware: Still No Patch; MIT server hijacked in drive-by download campaign

2011-11-03/0 Comments/in General Security/by SecurityOrb_Staff

Full Sized Blog Element (Big Preview Pic)

CISO Summit – The Platform to Congregate, Connect and Interact

2011-11-04/0 Comments/in Conference/by SecurityOrb_Staff

Event Details

Dates

Dec 5 – 6, 2011

Venue

The M Resort Spa Casino Las Vegas

*Special Offer: CISO Summit attendees enjoy a special room rate of just $110 per night (excl taxes)

About EC-Council
CISO SummitThe CISO Executive Summit is a place to network with top security executives and develop the support that CISOs need to design, develop and manage the most effective information security strategy for their organization. The CISO Executive Summit will also give you the opportunity to gather insight and advice on how to solidify your place as an indispensible member of the organization’s executive team. The CISO Summit is a panel discussion based event (16 panels), and due to the nature of the discussions that will take place, it is a closed-door event open only to senior information security executives (C-levels, VPs, Senior Directors, etc.).

Connect with us

For more information about the EC-Council CISO Summit, please visit http://www.eccouncil.org/cisosummit

or email
leonard@eccouncil.org

Is Your Organization Ready for the Threats & Challenges Ahead?
Stay ahead of attackers. Arrive with questions and concerns and leave armed with innovative ideas, out of the box solutions and a group of new industry colleagues.The EC-Council CISO Executive Summit provides a much-needed platform for IS leaders to discuss the challenges the industry is facing and develop guidance for information security executive leaders to develop a new way of thinking to ensure your success in protecting organizations.The goal of the CISO Executive Summit is to provide CISOs the opportunity to share best practices and knowledge to overcome the challenges that our industry presents today so that you are prepared to defend tomorrow.CONGREGATE | CONNECT | INTERACTThis inaugural event is designed to be wholly panel discussions based, so as to allow for more interactivity, and enhanced networking opportunities among like minded professionals – something senior executives like you will definitely find value.“Knowledge has to be improved, challenged, and increased constantly, or it vanishes.” – Peter Drucker

The CISO Executive Summit will be your forum to explore IT security, privacy and risk and compliance issues such as:

Embracing the Cloud & Mitigating Surrounding Threats
Structuring and Managing your Infosec Workforce
Achieving PCI DSS Compliance in the Cloud
Implementing a High-Performing Information Security Program
Best Practices of Information Security Operations and Maintenance
>Monitoring and Evaluating of your IT security policies
Dealing with New and Emerging Technologies and Processes
Managing Insider Threats
Preparing for Future Challenges
Factors with Greatest Impact on the Information Security Profession
Key performance index of a Information Security Program

Due to the nature of the discussions that will take place, this will be a closed door event and only senior information security executives are invited to participate in this exclusive event. Upon registration, and if you qualify, we will be sending you a separate mailer containing more information and registration instructions.*Registration Fee (UP: $999) will be waived for all qualified attendees.

EC-Council CISO Summit 2011 | EC-Council | 6330 Riverside Plaza Ln NW Suite 210, Albuquerque, NM, USA 8712Copyright © 2011 EC-Council
Privacy Statement

Security News: US report blasts China, Russia for cybercrime; Duqu Malware: Still No Patch; MIT server hijacked in drive-by download campaign

2011-11-03/0 Comments/in General Security/by SecurityOrb_Staff

US report blasts China, Russia for cybercrime

By LOLITA C. BALDOR, Associated Press – 4 hours ago

WASHINGTON (AP) — Cyberattacks by Chinese and Russian intelligence services, as well corporate hackers in those countries, have swallowed up large amounts of high-tech American research and development data, and that stolen information has helped build their economies, U.S. intelligence agencies have concluded.

Source: USAToday

Duqu Malware: Still No Patch

Malware exploits Microsoft Windows kernel zero-day vulnerability. Installer file is a Word document.
By Mathew J. Schwartz InformationWeek
November 02, 2011 11:30 AM

The recently discovered Duqu malware can exploit a zero-day Windows kernel vulnerability, which would help it to infect PCs and spread without being detected.

That revelation came after researchers at CrySyS Lab at the Budapest University of Technology and Economics managed to recover a dropper file, aka installer, for Duqu. Droppers are typically the first malicious files to infect a computer, and then they download and install further malicious files onto the computer.

Source: InformationWeek.com

MIT server hijacked in drive-by download campaign

Hackers used the MIT server to compromise other websites

A server belonging to the Massachusetts Institute of Technology was commandeered by hackers who used it to launch attacks against other websites as part of a larger drive-by download campaign, according to antivirus vendor BitDefender.

“One MIT server (CSH-2.MIT.EDU) hosts a malicious script actively used by cyber-crooks to scan the web for vulnerable websites,” the BitDefender researchers who spotted the attack said in a blog.

Source: InfoWorld.com