Palo Alto Networks News of the Week

Here’s a brief recap on all the happenings at Palo Alto Networks from the past week.

We added to our 2016 Cybersecurity Predictions series:

Prediction 1: Joerg Sieber predicts how changes in marketing trends could impact web-based attacks in 2016.
Prediction 2: Brian Tokuyoshi predicts that the “what” will matter more than the “who” in mobile security.
Prediction 3: Matt Keil predicts public cloud security will move into the spotlight.
Prediction 4: Michael Moshiri predicts that growth in exploit-based attacks will require increased emphasis on prevention.
Prediction 5: Jonathan Lewis predicts the major trends that will gain prominence for service providers next year.
Prediction 6: Del Rodillas predicts the rise of mobility in the Industrial Internet of Things (IIoT), and how attackers will also start to use it to compromise the automation environment.

Ignite 2016 is only a few months away! Want to attend? Register before December 31 for $400 off your conference pass. Want to take the stage? The Call for Papers is open! Submit today.

In Part 3 of the Adversaries and Their Motivations blog series, Unit 42 explored the top-level actor motivations: Cyber Warfare, Cyber Terrorism, and Cyber Mischief.

Catch up on Part 1: The underlying concepts and the value proposition for exploring who is attacking a network and why; and Part 2: Cyber Espionage, Cyber Crime, and Cyber Hacktivism.

Unit 42 analyzed the Rootnik android trojan that abuses commercial rooting tool and steals private information.

Del Rodillas detailed the Security Lifecycle Report, a free assessment Palo Alto Networks offers as a way to provide users a detailed view of what applications and risks may be running in their industrial control systems (ICS) environment.

In Part 1 of Exploitation Demystified, Yiftach Keshet laid the foundation of memory corruption exploitation, and presented the basic exploitation framework. In Part 2, he covered the implementation of Overwrite and Redirect in the context of stack based buffer overflow vulnerabilities. Stay tuned for Part 3, where Yiftach will go over implementation of the exploitation framework on heap-based vulnerabilities.