AlienVault's security team publishes threat research and malware analysis, and the company makes the OSSIM security monitoring platform.
HN mentions it mainly for OSSIM, its open source security tool, along with SOC guides, a Google dork cheat sheet, and job postings.
AlienVault | Product Manager | Austin, TX | ONSITE | https://www.alienvault.com
AlienVault was founded to help organizations of all shapes and sizes achieve world-class security without the headaches and huge expenses of other solutions. If you have network security experience and “BlackHat” doesn’t first make you think of noggin protection, please reach out!
In particular, we’re looking for a product manager with prior network security experience to help define our roadmap for security capabilities and threat research focus. Qualified candidates must have a bachelor’s degree in Engineering/CS, prior product management experience, fluent in network security technologies and approaches, and a passion to deliver exceptional products and user experience.
Interested in joining the Alien Nation? Please apply at https://www.alienvault.com/who-we-are/careers?p=job%2Foc185fwa
I could be wrong but I'm pretty sure the word "breach" is reserved for specific security incidents that fall above a certain threshold. Something like if X amount of users were affected it must be considered a breach, which means the company must alert the authorities and alert all users who have been affected.
If he's saying it wasn't a breach it's probably because it doesn't fit the actual criteria for considering something a breach, but doesn't mean he's trying to downplay the severity of what happened.
Edit: difference between a data breach vs. a security incident - https://www.alienvault.com/blogs/security-essentials/whats-the-difference-between-a-data-breach-and-a-security-incident
Very true. To be clear to other readers, busybox is more common in smaller embedded devices, though today's AlienVault blog post [1] showed that Mitel VoIP systems (which use Debian/ARM, if I recall) use bash and are vulnerable.
[1] http://www.alienvault.com/open-threat-exchange/blog/attackers-exploiting-shell-shock-cve-2014-6721-in-the-wild
I've had a similar experience which is why I almost always use dork search queries now. You'll get pinged by Google's anti-bot recapcha often but you'll find things much more effectively.
Heres a cheat sheet I keep bookmarked, https://www.alienvault.com/blog-content/GoogleHackingCheatSheet.pdf.
Security Onion intrigued me a couple years back when I heard about it. I think it was on the Linux Action Show.
I have been using Alien Vault OSSIM (https://www.alienvault.com) for a few years and haven't seen any reason to switch. But this does look like a great project still.
Security Operations Center
https://www.alienvault.com/resource-center/ebook/building-a-soc/soc-team
https://digitalguardian.com/blog/what-security-operations-center-soc
https://www.blackstratus.com/what-is-a-security-operations-center-and-why-is-it-important/