From security conferences to post-breach remediation documents, network segmentation is the most highly mentioned security topic since next-generation anti-virus software. That’s for good reason. Many recent high-profile security breaches might have been prevented had the victim employed network segmentation to limit the reach of attackers once they established an initial foothold on the network. However, many organizations…

In September 2018, a new high-visibility remote code execution (RCE) flaw in the Apache Struts 2 framework was released. Apache Struts 2 is an open-source web application framework used by many developers and vendors when creating Java EE web applications. This is a critical flaw and should be patched by upgrading to at least v.2.3.35…

Cisco recently released a new major update to its Software-Defined Access solution; the release notes detail what’s new. In this post, I assume you are already familiar with the SD-Access solution and instead focus on a few of the enhancements I think are most exciting. Distributed Campus One of the major missing pieces from SD-Access…

On average, it takes 170 days to detect an advanced attack, 39 days to contain it and 43 days to remediate it, according to a Ponemon study. Security threats are pervasive and constantly evolving. Today’s cybercriminals are smarter, bolder and more ambitious than in years past. The IT landscape is changing to accommodate mobility, cloud…

In Part 1 and Part 2 of my blog series, I shared some insights into how attackers continue to exploit the weaknesses of WPA and the tools and techniques they are using to gain access to poorly secured networks. In the last post of the series, I will offer some suggestions for how organizations can…

In my first blog post on securing against Wi-Fi Protected Access vulnerabilities, I talked about the fact that attacks are still being developed to take advantage of weaknesses found in WPA/WPA2, which are known and have been around for a while. This post continues that discussion, getting into how exactly most attacks are carried out…