Why should you use correlation rules on top of traditional signatures?
The AT&T Cybersecurity Alien Labs team is in charge of writing correlation rules and releasing threat intelligence updates on a…
Alien Labs 2019 Analysis of Threat Groups Molerats and APT-C-37
In 2019, several industry analyst reports confused the threat groups Molerats and APT-C-37 due to their similarity, and this has…
AT&T Alien Labs analysis of an active cryptomining worm
This blog post provides an overview of the AT&T Alien Labs™ technical analysis of the common malicious implants used by…
Google Cloud Platform security monitoring with USM Anywhere™
According to a 2019 Cyber Security Report published by the International Information System Security Certification Consortium, 93 percent of organizations…
The “Great Cannon” has been deployed again
Summary The Great Cannon is a distributed denial of service tool (“DDoS”) that operates by injecting malicious Javascript into pages…
Security monitoring for managed cloud Kubernetes
Photo by chuttersnap on Unsplash Kubernetes (K8s) is an open-source system for automating deployment, scaling, and management of containerized applications. It has recently…
Broken Hearts and Coffee Mugs
Overall, there are two broad types of security review: white box and black box. A white-box review is one in…
Security for the Modern Age
Giving operators a usable means of securing the methods they use to deploy and run applications is a win for…
Time Protection in Operating Systems and Speaker Legitimacy Detection
Timing-based side-channel attacks are a particularly tricky class of attacks to deal with because the very thing you’re often striving…
Reducing the Attack Surface
The best way to reduce the attack surface of a piece of software is to remove any unnecessary code. Since…