RSA: Theme Endpoint Security

I had the chance to walk around a bit on the second day of RSA. One thing that really stood out was this year’s buzzterm: endpoint security.

So what does it actually mean? Well, this document defines it as applying a security solution to “an individual computer system or device that acts as a network client and serves as a workstation or personal computing device. Endpoints are often mobile and intermittently connected”. It’s mostly used to refer to a PC desktop, laptop, PDA and, most commonly, a smartphone.

For anybody who’s labouring under the happy delusion that we’ve reached the pinnacle of (security-solution) hardware engineering and creativity, the truth is we’ve only just started to develop devices to further increase our mobility. For example, if you’re in the medical field, “endpoint” could refer to a dedicated data-recording device.

Where does this all lead? To use an analogy that many of us will understand, while our schooldays may well be behind us, we should never stop striving to learn more. To learn about what? Yes, about the great advantages that increased mobility offers us, but also about the sheer variety of risks and threats that currently exist, and which will continue to evolve in the future. In other words, if you are one of the millions of people who take your work on the road (or home) with you, plan to hit the books! As we never tire of saying – wherever there are new opportunities, the bad guys are always on the lookout for new methods of attack.

RSA: Theme Endpoint Security

Your email address will not be published. Required fields are marked *



APT trends report Q2 2021

This is our latest summary of advanced persistent threat (APT) activity, focusing on significant events that we observed during Q2 2021: attacks against Microsoft Exchange servers, APT29 and APT31 activities, targeting campaigns, etc.

LuminousMoth APT: Sweeping attacks for the chosen few

We recently came across unusual APT activity that was detected in high volumes, albeit most likely aimed at a few targets of interest. Further analysis revealed that the actor, which we dubbed LuminousMoth, shows an affinity to the HoneyMyte group, otherwise known as Mustang Panda.

WildPressure targets the macOS platform

We found new malware samples used in WildPressure campaigns: newer version of the C++ Milum Trojan, a corresponding VBScript variant with the same version number, and a Python script working on both Windows and macOS.

Ferocious Kitten: 6 years of covert surveillance in Iran

Ferocious Kitten is an APT group that has been targeting Persian-speaking individuals in Iran. Some of the TTPs used by this threat actor are reminiscent of other groups, such as Domestic Kitten and Rampant Kitten. In this report we aim to provide more details on these findings.

Subscribe to our weekly e-mails

The hottest research right in your inbox