<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>Cisco Blog &#187; Mary Landesman</title>
	<atom:link href="http://blogs.cisco.com/author/MaryLandesman/feed/" rel="self" type="application/rss+xml" />
	<link>http://blogs.cisco.com</link>
	<description></description>
	<lastBuildDate>Tue, 21 May 2013 23:14:56 +0000</lastBuildDate>
	<language>en-US</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	
		<item>
		<title>Linux/CDorked FAQs</title>
		<link>http://blogs.cisco.com/security/linuxcdorked-faqs/</link>
		<comments>http://blogs.cisco.com/security/linuxcdorked-faqs/#comments</comments>
		<pubDate>Wed, 01 May 2013 13:01:53 +0000</pubDate>
		<dc:creator>Mary Landesman</dc:creator>
				<category><![CDATA[Security]]></category>
		<category><![CDATA[apache]]></category>
		<category><![CDATA[apache darkleech compromise]]></category>
		<category><![CDATA[apache module injection attacks]]></category>
		<category><![CDATA[Cisco Security]]></category>
		<category><![CDATA[cisco sio]]></category>
		<category><![CDATA[SSHD backdoor]]></category>
		<category><![CDATA[TRAC]]></category>

		<guid isPermaLink="false">http://blogs.cisco.com/?p=111834</guid>
		<description><![CDATA[Last Friday (April 26),  <a href="http://www.welivesecurity.com/2013/04/26/linuxcdorked-new-apache-backdoor-in-the-wild-serves-blackhole/">ESET</a>  and  <a href="http://blog.sucuri.net/2013/04/apache-binary-backdoors-on-cpanel-based-servers.html">Sucuri</a>  simultaneously blogged about the discovery of  <a href="http://tools.cisco.com/security/center/viewAlert.x?alertId=29133">Linux/CDorked</a> , a backdoor impacting Apache servers running cPanel. Since [...]]]></description>
		<wfw:commentRss>http://blogs.cisco.com/security/linuxcdorked-faqs/feed/</wfw:commentRss>
		<slash:comments>3</slash:comments>
		</item>
		<item>
		<title>Customized WordPress, Joomla Brute Force Login Attempts</title>
		<link>http://blogs.cisco.com/security/customized-wordpress-joomla-brute-force-login-attempts/</link>
		<comments>http://blogs.cisco.com/security/customized-wordpress-joomla-brute-force-login-attempts/#comments</comments>
		<pubDate>Mon, 22 Apr 2013 16:57:49 +0000</pubDate>
		<dc:creator>Mary Landesman</dc:creator>
				<category><![CDATA[Security]]></category>
		<category><![CDATA[brute force login]]></category>
		<category><![CDATA[Cisco Security]]></category>
		<category><![CDATA[Joomla Brute Force]]></category>
		<category><![CDATA[TRAC]]></category>
		<category><![CDATA[WordPress]]></category>

		<guid isPermaLink="false">http://blogs.cisco.com/?p=110809</guid>
		<description><![CDATA[In recent weeks, the occurrence of brute force login attempts targeting WordPress and Joomla installations have significantly increased in volume, [...]]]></description>
		<wfw:commentRss>http://blogs.cisco.com/security/customized-wordpress-joomla-brute-force-login-attempts/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Apache Darkleech Compromises</title>
		<link>http://blogs.cisco.com/security/apache-darkleech-compromises/</link>
		<comments>http://blogs.cisco.com/security/apache-darkleech-compromises/#comments</comments>
		<pubDate>Tue, 02 Apr 2013 18:40:56 +0000</pubDate>
		<dc:creator>Mary Landesman</dc:creator>
				<category><![CDATA[Security]]></category>
		<category><![CDATA[apache]]></category>
		<category><![CDATA[apache darkleech compromise]]></category>
		<category><![CDATA[apache module injection attacks]]></category>
		<category><![CDATA[Cisco Security]]></category>
		<category><![CDATA[cisco sio]]></category>
		<category><![CDATA[SSHD backdoor]]></category>
		<category><![CDATA[TRAC]]></category>

		<guid isPermaLink="false">http://blogs.cisco.com/?p=108358</guid>
		<description><![CDATA[Dan Goodin, editor at Ars Technica, has been  <a href="http://arstechnica.com/security/2013/04/exclusive-ongoing-malware-attack-targeting-apache-hijacks-20000-sites/">tracking and compiling info on an elusive series of website compromises</a>  that could be impacting tens of thousands of otherwise perfectly legitimate sites. [...]]]></description>
		<wfw:commentRss>http://blogs.cisco.com/security/apache-darkleech-compromises/feed/</wfw:commentRss>
		<slash:comments>17</slash:comments>
		</item>
		<item>
		<title>Cisco 4Q11 Global Threat Report</title>
		<link>http://blogs.cisco.com/security/cisco-4q11-global-threat-report/</link>
		<comments>http://blogs.cisco.com/security/cisco-4q11-global-threat-report/#comments</comments>
		<pubDate>Mon, 23 Jan 2012 22:09:42 +0000</pubDate>
		<dc:creator>Mary Landesman</dc:creator>
				<category><![CDATA[Security]]></category>
		<category><![CDATA[quarterly threat report]]></category>
		<category><![CDATA[security]]></category>

		<guid isPermaLink="false">http://blogs.cisco.com/?p=58096</guid>
		<description><![CDATA[The Cisco 4Q11 Global Threat Report has been released. The report covers the period from 1 October 2011 through 31 December 2011 and features data from across Cisco Security Intelligence Operations. This quarter’s contributors were Cisco Intrusion Prevention System (IPS), Cisco IronPort, Cisco Security Research and Operations (SR&#38;O), and Cisco ScanSafe.]]></description>
		<wfw:commentRss>http://blogs.cisco.com/security/cisco-4q11-global-threat-report/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Duqu: The Next Stuxnet?</title>
		<link>http://blogs.cisco.com/security/duqu-the-next-stuxnet/</link>
		<comments>http://blogs.cisco.com/security/duqu-the-next-stuxnet/#comments</comments>
		<pubDate>Sat, 22 Oct 2011 13:37:52 +0000</pubDate>
		<dc:creator>Mary Landesman</dc:creator>
				<category><![CDATA[Security]]></category>
		<category><![CDATA[duqu]]></category>
		<category><![CDATA[malware]]></category>
		<category><![CDATA[security]]></category>
		<category><![CDATA[stuxnet]]></category>
		<category><![CDATA[trojan]]></category>

		<guid isPermaLink="false">http://blogs.cisco.com/?p=47921</guid>
		<description><![CDATA[Reports of the recently discovered Duqu trojan have spawned much speculation and even resulted in the trojan being dubbed "the son of Stuxnet" or "Stuxnet 2.0."]]></description>
		<wfw:commentRss>http://blogs.cisco.com/security/duqu-the-next-stuxnet/feed/</wfw:commentRss>
		<slash:comments>1</slash:comments>
		</item>
		<item>
		<title>Cisco 2Q11 Global Threat Report</title>
		<link>http://blogs.cisco.com/security/cisco-2q11-global-threat-report/</link>
		<comments>http://blogs.cisco.com/security/cisco-2q11-global-threat-report/#comments</comments>
		<pubDate>Mon, 01 Aug 2011 23:45:51 +0000</pubDate>
		<dc:creator>Mary Landesman</dc:creator>
				<category><![CDATA[Security]]></category>
		<category><![CDATA[APT]]></category>
		<category><![CDATA[quarterly threat report]]></category>
		<category><![CDATA[security]]></category>

		<guid isPermaLink="false">http://blogs.cisco.com/?p=38675</guid>
		<description><![CDATA[Data breaches dominated security news during the first half of 2011 and companies across all industry sectors were equally impacted. Many of these breaches resulted from advanced persistent threats; others resulted from SQL injection and other brute force intrusions. In all cases, customer data and corporate intellectual property were at risk.

In the Cisco 2Q11 Global Threat Report, Cisco CSIRT Manager Gavin Reid discusses the unique challenges of APTs and network intrusions. Gavin offers real world practical advice from a frontline perspective, offering valuable pointers for tweaking and using the tools you probably already have in place.
]]></description>
		<wfw:commentRss>http://blogs.cisco.com/security/cisco-2q11-global-threat-report/feed/</wfw:commentRss>
		<slash:comments>1</slash:comments>
		</item>
		<item>
		<title>Cisco 1Q11 Global Threat Report</title>
		<link>http://blogs.cisco.com/security/cisco-1q11-global-threat-report/</link>
		<comments>http://blogs.cisco.com/security/cisco-1q11-global-threat-report/#comments</comments>
		<pubDate>Wed, 11 May 2011 17:48:23 +0000</pubDate>
		<dc:creator>Mary Landesman</dc:creator>
				<category><![CDATA[Security]]></category>
		<category><![CDATA[quarterly threat report]]></category>
		<category><![CDATA[security]]></category>

		<guid isPermaLink="false">http://blogs.cisco.com/?p=30239</guid>
		<description><![CDATA[The Cisco 1Q11 Global Threat Reporthas been released. The report covers the period from 1 January 2011 through 31 March 2011 and features data from Cisco Security Intelligence Operations. This quarter's contributors includes Cisco Intrusion Prevention System (IPS), IronPort, Remote Management Services (RMS), Security Research and Operations (SR&#038;O), and ScanSafe.]]></description>
		<wfw:commentRss>http://blogs.cisco.com/security/cisco-1q11-global-threat-report/feed/</wfw:commentRss>
		<slash:comments>1</slash:comments>
		</item>
		<item>
		<title>Lizamoon &#8211; Much Ado About Very Little?</title>
		<link>http://blogs.cisco.com/security/lizamoon-much-ado-about-very-little/</link>
		<comments>http://blogs.cisco.com/security/lizamoon-much-ado-about-very-little/#comments</comments>
		<pubDate>Mon, 04 Apr 2011 22:20:44 +0000</pubDate>
		<dc:creator>Mary Landesman</dc:creator>
				<category><![CDATA[Security]]></category>
		<category><![CDATA[lizamoon]]></category>
		<category><![CDATA[security]]></category>
		<category><![CDATA[sql injection]]></category>

		<guid isPermaLink="false">http://blogs.cisco.com/?p=26400</guid>
		<description><![CDATA[Recent media reports have focused on a mass <a href="http://www.cisco.com/web/about/security/intelligence/sql_injection.html" target="_blank">SQL injection</a> attack involving a malware domain named lizamoon.com. While the lizamoon.com domain is new, this particular series of SQL injection compromises is actually several months old. Cisco ScanSafe logs record the first instance on 20-sep-10 21:58:08 GMT. Since then, various malware domains have been used for a total of 42 domains signifying 42 separate occurrences of these compromises since September 2010. Lizamoon.com was the 41st of these.]]></description>
		<wfw:commentRss>http://blogs.cisco.com/security/lizamoon-much-ado-about-very-little/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Cisco 4Q10 Global Threat Report</title>
		<link>http://blogs.cisco.com/security/cisco-4q10-global-threat-report/</link>
		<comments>http://blogs.cisco.com/security/cisco-4q10-global-threat-report/#comments</comments>
		<pubDate>Tue, 08 Feb 2011 05:00:28 +0000</pubDate>
		<dc:creator>Mary Landesman</dc:creator>
				<category><![CDATA[Security]]></category>
		<category><![CDATA[quarterly threat report]]></category>
		<category><![CDATA[security]]></category>

		<guid isPermaLink="false">http://blogs.cisco.com/?p=19677</guid>
		<description><![CDATA[The Cisco 4Q10 Global Threat Report is now available for download. The report showcases data from the 4th calendar quarter (October 1, 2010 - December 31, 2010). The report also provides a snapshot of Rustock activity for the second half of 2010, as well as the year over year Web malware encounter rates from 2007 - 2010.]]></description>
		<wfw:commentRss>http://blogs.cisco.com/security/cisco-4q10-global-threat-report/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Cisco 3Q10 Global Threat Report</title>
		<link>http://blogs.cisco.com/security/cisco-3q10-global-threat-report/</link>
		<comments>http://blogs.cisco.com/security/cisco-3q10-global-threat-report/#comments</comments>
		<pubDate>Wed, 17 Nov 2010 05:00:36 +0000</pubDate>
		<dc:creator>Mary Landesman</dc:creator>
				<category><![CDATA[Security]]></category>
		<category><![CDATA[Cisco]]></category>
		<category><![CDATA[emerging threats]]></category>
		<category><![CDATA[security]]></category>

		<guid isPermaLink="false">http://blogs.cisco.com/?p=13404</guid>
		<description><![CDATA[We've just posted the second installment of our <a title="Cisco 3Q10 Global Threat Report" href="http://www.cisco.com/en/US/prod/collateral/vpndevc/3q10_cisco_threat.pdf" target="_blank">Cisco quarterly threat report</a> covering the third quarter (July 1 - September 30, 2010).  Where most threat reports focus on a specific vector (i.e. email, Web, desktop detections, etc.), our goal is to provide threat data across a wider segment to more holistically capture high profile events impacting the enterprise.]]></description>
		<wfw:commentRss>http://blogs.cisco.com/security/cisco-3q10-global-threat-report/feed/</wfw:commentRss>
		<slash:comments>1</slash:comments>
		</item>
	</channel>
</rss>
