This allows the attackers to achieve their goals without needing to create and deploy their own binary files on disk- operating fileless, so to speak-or to blend in with the daily work of a system administrator who uses the same dual-use tools. These include a wide range of living-off-the-land tactics with attackers taking advantage of native applications, tools and services already present on targeted systems. 14.3 RU1 offers a reliable and easy-to-use method in which administrators can now proactively block malicious non-PE files using hash, size and other parameters.Īdditionally over the past few years, Symantec has observed a shift in the threat landscape towards targeted attacks utilizing increasingly sophisticated techniques. Security Admins would have to find and delete every copy of these files or ask end users to not open the document neither of these is a reliable or scalable solution. Here are some of the highlights from our conversation:Ī: Adversaries have been using non-Portable Executable (PE) files like office documents and PDFs embedded with either malicious links or actual malicious active content as delivery vehicles to launch targeted attacks. We spoke recently with Alpesh Mote, Product Management Lead for Endpoint Security about the latest Symantec Endpoint Security release (14.3 RU1) that supports our flagship Symantec Endpoint Security products.
A unified cloud-based management system simplifies protecting, detecting and responding to all the advanced threats targeting your endpoints. As an on-premises, hybrid, or cloud-based solution, the single-agent Symantec platform protects all your traditional and mobile endpoint devices, and uses artificial intelligence (AI) to optimize security decisions. Symantec Endpoint Security, a SaaS application, delivers the most complete, integrated endpoint security platform on the planet. That is why Symantec, as a division of Broadcom, continues to be your vendor of choice on this journey with our Endpoint Security solutions. And BYOD has added billions of devices into the enterprise ecosystem. People now work from anywhere, not just from their corporate headquarters.
The world of security continues to change, sometimes faster than you want.
0 kommentar(er)
