Video Screencast Help
Search Video Help Close Back
to help

khaley

Member Profile

khaley Symantec Employee

Status: -
Contact: Send this user an email
Job Title: Director PM, Security Technology And Response
Member for: 6 years 3 weeks
Contribution Stats
1
Solution
0
Forum Threads
11
Comments
7
Blog Entries
0
Ideas
0
Articles
0
Videos
0
Downloads
0
Events
1
Group Joined

khaley's Activity

Show:
New blog entry 11 Jul 2012
khaley posted: I come to praise APT, not bury it.
  The furious discussion about the appropriateness of the term Advanced Persistent Threats (APTs) has finally died down and many people are now gun shy about using it. I’m okay with that.  I completely agree that the phrase was overused and over applied. But that ...
New blog entry 08 May 2012
khaley posted: Cybergeddon
I live in a city whose motto is “Culver City, The Heart of Screenland.” “Gone with the Wind,” “Citizen Kane” and “Raging Bull” were filmed here. It’s estimated that 1 in 8 residents of Culver City work in the ...
discussion comment 19 Aug 2010
khaley commented on: EndPoint consistently allows fake AV malware
Symantec does miss malware.  We are not alone in that, but it is cold comfort to someone with an infected system.  I understand why people get upset. I disagree that MalwareBytes is a better desktop security product than SEP.  ...
New blog entry 25 Mar 2010
khaley posted: Living with Passwords
I recently ran a survey on password management.  You can see my original blog and even take the survey yourself here.   At best, I thought 20 or so of you would take the time to ...
discussion comment 18 Feb 2010
khaley commented on: Kneber Botnet
 Kneber is one group of machines infected with Zeus.  Kneber is Zeus.  We've had protection for this for some time.  We have protection from Zeus with both AV and IPS signatures.  So using both technologies in SEP will ...
discussion comment 18 Feb 2010
khaley commented on: Kneber Botnet
There has been some recent high profile coverage of an online threat being referred to as “Kneber.” Some news coverage Symantec has observed has put forth that this is a new type of malware, which is simply not the case. Kneber, in ...
discussion comment 29 Sep 2009
khaley commented on: New Botnet Does Symantec Dectect it
Mariposa is the name that one particular vendor uses for this threat.  It does not appear to be a name that any other vendor is using. If it becomes a name in common usage we will look to change the name of our signatures. It is not a ...
New blog entry 09 Jun 2009
khaley posted: Wireless Keyboard Vulnerability
 If you get the right kind of satellite dish you can grab signals that float through the air and see live network broadcast feeds. Cell phones send data through the air and with the right equipment you can snag it as well. Our voices travel through the air on their own and you can buy ...
New blog entry 02 May 2009
khaley posted: Moving from Fame to Fortune
What changed everything was when the hackers, miscreants and ne'er-do-wells moved from fame to fortune. Once these guys figured out you could make money, malware became crimeware and nobody writes malware for bragging rights anymore. It’s for the moola. So it’s been hard ...
blog entry comment 30 Apr 2009
khaley commented on: The Last Laugh
 What's your secret?  Most people I talk to begin to tear there hair out when I talk about Security Awareness training.  The problem seems to be twofold, it's hard to get the chance to do the training.  And when they ...
New blog entry 27 Apr 2009
khaley posted: The Last Laugh
 It’s happened to all of us, hasn’t it? You’re being driven to an important meeting. You prepare for the meeting by reading a top secret document, something related to national security. The chauffeur pulls up to the building and in a hurry to get to the meeting your ...
discussion comment 02 Apr 2009
khaley commented on: New threat? Suspicious.MH690
A couple comments on some of the things raised in this thread. Corrupted submission: A email template is an email template.  Hard to build too many smarts into it.  But it awkwardly speaks the truth.  If the file Symantec ...
discussion comment 02 Apr 2009
khaley commented on: How often Symantec updates the NetworkThreat Protection component in SEP 11
We post information on the signatures here: http://www.symantec.com/business/security_response/securityupdates/list.jsp?fid=sep  You can see what security updates have been released and when. At the beginning of this week we rolled out a ...
New blog entry 01 Apr 2009
khaley posted: Conficker/Downadup: An Update
Conficker; there has probably never been a virus or worms with so much written about it.  And now that’s it’s April 1st and the world has not come to an end, many people are no doubt questioning whether Conficker was a bust and nothing we didn’t needed to worry about, ...
blog entry comment 01 Apr 2009
khaley commented on: Is Symantec Ready for Conficker (Downadup)? Yes!
Sorry to hear about your infection.  There is a good summary of Downadup in the KB article at this link: http://service1.symantec.com/SUPPORT/ent-security.nsf/docid/2009033012483648 But more importantly, it has a link to the Symantec ...
blog entry comment 31 Mar 2009
khaley commented on: Is Symantec Ready for Conficker (Downadup)? Yes!
Any possible updates to W32.Downadup.C will only start to take place once it is the 1st of April 2009 in the GMT time zone. So we have a little more time before we find out what happens.
blog entry comment 31 Mar 2009
khaley commented on: Is Symantec Ready for Conficker (Downadup)? Yes!
I can't predict the future, but the most likely scenario is that no major incident happens tomorrow.  Infected machines are updated to a more efficient communication method on the 1st.  But that doesn't mean whoever is behind Conficker ...
blog entry comment 31 Mar 2009
khaley commented on: Is Symantec Ready for Conficker (Downadup)? Yes!
Here's the three AV signatures for Downadup and date of release. W32.Downadup  (Released: Nov 21, 2008) W32.Downadup.B (Released: Feb 20, 2009) W32.Downadup.C  (Released: Mar 6, 2009)