Cisco Blogs


Cisco Blog > Security

Protect Your Entire Digital Self

How much time do you spend at work?

For some the answer is too much! No matter how much time you spend, I’m willing to guess that it’s an important part of your week. Your work is part of who you are, where you go, and what you do.

That is why Cisco is proud to join the National Cybersecurity Alliance in its support of White House efforts to improve online security. Today’s announcement will educate and raise awareness about the importance of cybersecurity topics at home, and at work.

Our businesses help create the jobs, innovation, and economy that will underpin our future. Our homes help us foster the relationships that are the foundation of our society. As technology pushes both forward, it is clear that cybersecurity in one, without the other, is impossible.

Every day, our home and work lives get closer together. Smartphones and online collaboration services, like Cisco WebEx and Spark, increasingly allow us to work and play from anywhere. And with this added flexibility comes a shared responsibility to protect yourself and your colleagues.

Cybersecurity techniques, like Two Factor Authentication, may look a little different in the business world. At home you will receive a code in an email or SMS to access an online service or social media account. These same techniques are used by our OpenDNS and Meraki services. But at work you might supplement your network password with a security token or a smartcard.

Multifactor authentication can also be directly integrated into work tools. Cisco’s collaboration products are a great example, as they support standards-based identity authentication and authorization exchange techniques. These allow our customers to quickly and securely integrate these services into their existing identity-proofing methods.

Because our home and work lives get closer every day, we support the President’s focus on increasing general cybersecurity awareness. Stop. Think. Connect. is the common thread, and describes the basic steps needed to ensure our entire digital selves can remain safe and secure.

Tags: , , , , , , , ,

Live #Ciscochat Feb 23rd: Cyber attacks ahead. Are you ready?

As Mike Riegel pointed out in his recent blog, ‘Financial services is the prime example of an IT-intensive industry.’ Financial institutions rely on consistent technology and innovation to compete and to ensure compliance with regulatory requirements. Customers put a lot of trust in their financial services provider to secure their data and privacy.

On the other hand, cyber criminals put financial institutions in their sights in efforts that, when successful, can damage customer trust and an institution’s reputation. Financial institutions around the world are targets for malware, phishing, ransomware, and ATM skimming. The most serious losses come from targeted attacks. According to the Cisco 2016 Annual Security Report, malware is becoming increasingly sophisticated and cyber criminals are launching attacks through a variety of attack vectors, including tools that users trust or view as benign. Furthermore, targeted attacks are on the rise and the cyber criminals are unrelenting in the execution their mission.

AS89975

Read More »

Tags: , , , , , , , , , , ,

Linux Kernel Zero-Day Privilege Escalation Vulnerability CVE-2016-0728

On January 20, 2016, a new Linux Kernel zero-day vulnerability (CVE-2016-0728) was disclosed by Perception Point. The vulnerability has the potential to allow attackers to gain root on affected devices by running a malicious Android or Linux application.

Our investigation is ongoing; however, at this time we have not identified any Cisco products as exploitable. Should this change, we will publish a Security Advisory on the Cisco Security Portal.

Read More »

Tags: , ,

#CiscoChampion Radio, S3|Ep. 3. 2016 Cisco Annual Security Report

#CiscoChampion Radio is a podcast series by Cisco Champions as technologists. Today we’re discussing the 2016 Cisco Annual Security Report with Cisco Subject Matter Expert Tim Gurganus.

CiscoChampionbadge_announcementGet the Podcast

  • Listen to this episode
  • Download this episode (right-click on the episode’s download button)
  • View this episode in iTunes

Cisco Guest

Tim Gurganus (@hotzoner), Security Incident Manager at Cisco

Tim is a Security Incident Manager with Cisco Active Threat Analytics. He monitors security of Cisco’s largest customers, including Hospitals, financial service companies, and others. He helps to make sure a method exists to detect and mitigate attacks across Cisco’s customers. Tim contributed to the threat intelligence section of the Annual Security Report.

Cisco Champion Hosts

  • Brandon Carroll (@brandoncarroll), Network Security Solutions Engineer
  • Jake Gillen  (@jakegillen), Senior Security Engineer
  • Chris Brown (@ChrisKnowsIT), Senior Network Operations Manager

Moderator

Read More »

Tags: , , ,

Link Arms Against the Attackers: Observations from the 2016 Cisco ASR

Remember 2007, when the underground economy began to flourish, using simple protocols and static subnet ranges to control their infrastructure? That was the same year Cisco published the first Annual Security Report (ASR). Nine years later, the drumbeat of cyberthreats grow louder, but the actors and threats are familiar, just as John reminded us when this year’s report was released.

Cyber-crime stats

Read More »

Tags: , , , , , , ,