Blog

Defensys has announced the new major release of the Defensys TDP 3.1, the technology for digital simulation of IT infrastructure. The release includes an updated mechanism of lures placement and open API.

With the new version of the Defensys TDP 3.1 users can configure lures placement policy by collecting basic information about machines: OS version, its language, and installed software. New approach of lures placement allows users to make them more reliable and realistic even in large networks. The full range of tools already deployed in the system for lures placement on clients’ hosts (incl. Microsoft SCCM, Ansible, Puppet) is available for CS specialists in the updated Defensys TDP version.

The developer has expanded the product’s integration capabilities with informational systems concerning restrictions, that often exist in large companies’ networks. For example, if records in DNS servers are prohibited in customer’s network, the Defensys TDP can transfer lists of non-existent DNS hostnames through API. This feature allows customers to add them autonomously. Moreover, it’s possible to provide the list of simulated login accounts for monitoring through a customer’s SIEM system.

The Defensys TDP 3.1 has a very user-friendly interface with the simplified interactions through the public API with Swagger (Open API) support.

More

Cybersecurity News

• Cybersecurity experts have discovered a new Android banking trojan named Brokewell. It can capture every event on the device, from touches and information displayed to text input and the applications the user launches.
• Experts have uncovered a number of vulnerabilities in Chinese cloud-based pinyin keyboard apps. These flaws could be exploited to reveal users’ keystrokes to nefarious actors.
• Japan’s CERT warned that the WordPress plugin Forminator, developed by WPMU DEV, is affected by multiple vulnerabilities. One of the plugin’s flaws allows unrestricted file uploads to the server.
• Users of the CrushFTP enterprise file transfer software have been urged to update to the latest version of the app. This notice follows the discovery of a security flaw that has come under targeted exploitation in the wild.
• LastPass password manager users have been targeted in a convincing phishing campaign. During the attacks, the hackers used a combination of calls, email and SMS to obtain master passwords from accounts.
• The financially motivated threat actor FIN7 targeted a large U.S. car maker with spear-phishing emails.

More

Challenge

The Credit bureau with millions of loan and credit records was looking for automation tools to quickly respond on incidents, manage IT infrastructure and meet cyber security standards. Defensys solutions attracted Bureau’s attention, because they’re flexible, customizable and easy to work with. The Defensys SOAR and SGRC were chosen to meet the Company’s needs.

Implementation

As for the major part of our customers, Defensys’ team has integrated the SOAR and SGRC with an antivirus and AD. Furthermore, an integration with a data base was implemented to receive information regarding networks and equipment.

A challenging part for Defensys’s engineers was the integration with the platform, which is used as incident repository in the company. This platform also acts as the first line of the company’s SOC. Accordingly the Defensys SOAR has become the second SOC line. Due to this reason, the SOAR should constantly receive a lot of information, classify it, and save in its register. Limited integration functions of the Customer’s platform didn’t allow the Defensys team to implement a pre-installed connector, that’s why Defensys engineers managed to develop a customized integration to connect with the platform and transfer incident data to the SOAR.

More

Dear colleagues,

We are excited to announce that Defensys has released a new update of the Defensys SGRC Platform v. 5.4. Besides all the other features that will be highlighted soon, there is an update of the content base of the SGRC for our KSA customers and partners.

Beginning this month, Defensys SGRC includes the full set of 7 NCA controls, as well as the Guide to Essential Cybersecurity Controls implementation and Cybersecurity Toolkit, all readily available in the SGRC Documents library.

Furthermore, we are pleased to inform you that Defensys SGRC now supports SDAIA PDPL, which allows to launch compliance campaigns and assess how organization aligns with personal data protection requirements.

For more information on these enhancements, please do not hesitate to reach out to us.

Thank you for your continued support.

More

Cybersecurity News

• Apple has sent a new batch of threat notifications to users in 92 countries who may have been targeted by mercenary spyware attacks.
• Cybersecurity researchers have disclosed the first native Spectre v2 exploit against the Linux kernel on Intel systems. It could be used to read sensitive data from the memory.
• Researchers have found multiple vulnerabilities in LG webOS running on smart TVs that could allow attackers to gain root access to the devices.
• Google has introduced a new feature for its Chrome browser, which should eliminate, or at least minimize, memory corruption vulnerabilities.
• The U.S. HHS Department has warned that hackers can be using social engineering tactics to target IT help desks across the Healthcare and Public Health sector.
• An almost 6-year-old vulnerability in the Lighttpd web server used in Baseboard Management Controllers has been detected. The security issue could lead to the exfiltration of process memory addresses.
• Experts have discovered HTTP/2 protocol vulnerabilities, which can lead to DoS attacks. The flaws can be used to crash web servers with a single TCP connection in some implementations.

More