Security is more important than ever. Cybersecurity has been a problem from the start of IT and it will be till the end. It all started with endpoint and network security, but today, we are also facing with cloudsecurity and managing employees to incorporate good security practices.
All these new technologies that help us innovate also helps cybercriminals and state sponsored hackers to get new tools they can use to get access to our systems, and in a worst case scenario, access to our most valuable data and business secrets. Also, with new legislation in place like GDPR, you need to make sure everything is secure, otherwise you just don’t lose your reputation, but you can also be fined by the government. Protecting IT-environments is more important than ever.
Your first line of defense is usually endpoint protection. The devices your employees work with need to be protected against ransomware and other malware which can bring lots and lots of trouble. This nowadays the most basic form of protection and many of the bigger vendors and suites can help you achieve this.
Network security is a bit more advanced, where you can manage which traffic goes across your network. You can also connect different networks together with e.g. SD-WAN. So, you can run protection software and share data between multiple locations. The trend we see in network protection on the datacenter side is to lock down the traffic by only allowing known, benevolent traffic sources. Regarding office networking, we see new initiatives like ZScaler coming up, where you tunnel all your staff over the network of ZScaler so they can analyse the traffic and block patterns that they marked as malicious. Especially for companies with employees that travel a lot, this is a smart solution.
Many thought that bringing workloads to the cloud would reduce their responsibility of doing security. It is now clear that this is not the case. Most cloud vendors practice the “shared responsibility” approach. This means that big hyperscalers can offer a first line of defense against well known threats and port scanners. For the more sophisticated attacks that are directly pointed at your servers, you need to have your protection in place.
Several GitHub users were hit by a phishing campaign over the past few days. “While GitHub itself was not affected, the campaign has impacted many victims", the organization warned. The attackers send emails in the style of CircleCI, a popular DevOps platform. The cybercriminals claim that the... Read more
2 years ago
SentinelOne launched S-Ventures, an investment fund for promising startups in security and data. The initial fund features $100 million (€101 million) for investments in solutions that help companies solve important challenges. S-Ventures is looking for startups of all stages that can bring i... Read more
2 years ago
CrowdStrike has extended XDR functionality to its Falcon Insight solution. Falcon Insight XDR gets additionally telemetry data from partners to enhance and extend its XDR functionality. The Falcon Insight solution will gain Extended Detection and Response (XDR) capabilities that make it easier ... Read more
2 years ago
American Airlines (AA) suffered a data breach in which the personal information of customers and staff may have been taken. The breach, announced by AA in a letter to victims on September 16, involved an authorized actor exposing the email accounts of AA staff members in July. When the airl... Read more
2 years ago
Commvault made Metallic ThreatWise generally available. The solution finds zero-day threats by provoking attacks. Some security solutions rely on threat intelligence. Major security vendors examine patterns in cybercriminal behaviour, after which software and hardware vendors incorporate the da... Read more
2 years ago
Vista Equity Partners made a €4.2 billion bid to acquire KnowBe4 Vista Equity Partners will pay €24 euros per KnowBe4 share, a 39 percent capital gain over KnowBe4's last listing. The company has seen its share price drop since the beginning of this year. Acquistion bid confirmed KnowB... Read more
2 years ago
Uber indicates that the recent cyberattack on the company was carried out by a member of the Lapsus$ group. The cybercriminal accessed Uber systems by misleading a remote employee. In an update on the attack, Uber states a remote employee turned out to be the attack vector. The cybercriminal li... Read more
2 years ago
The login credentials of 25 percent of the 500 largest US organizations are for sale on the dark web, according to researchers from BitSight Technologies. Single sign-on (SSO) credentials allow users to log into multiple applications and websites with a single identity. A single identity reduce... Read more
2 years ago
Security researchers at VMware urge organizations to heed the rise of ChromeLoader. The malware hijacks victims' browsers to spread malicious files and targeted ads. ChromeLoader was discovered in January. The malware is typically installed through an .iso file, after which the program manipula... Read more
2 years ago
CrowdStrike is revamping its partner program. Organizations that provide the company's security software as a service are eligible for the CrowdStrike Powered Service Provider program, a model with new license bundles, discounts and support. CrowdStrike is one of the largest security vendors to... Read more
2 years ago
