Security is more important than ever. Cybersecurity has been a problem from the start of IT and it will be till the end. It all started with endpoint and network security, but today, we are also facing with cloudsecurity and managing employees to incorporate good security practices.
All these new technologies that help us innovate also helps cybercriminals and state sponsored hackers to get new tools they can use to get access to our systems, and in a worst case scenario, access to our most valuable data and business secrets. Also, with new legislation in place like GDPR, you need to make sure everything is secure, otherwise you just don’t lose your reputation, but you can also be fined by the government. Protecting IT-environments is more important than ever.
Your first line of defense is usually endpoint protection. The devices your employees work with need to be protected against ransomware and other malware which can bring lots and lots of trouble. This nowadays the most basic form of protection and many of the bigger vendors and suites can help you achieve this.
Network security is a bit more advanced, where you can manage which traffic goes across your network. You can also connect different networks together with e.g. SD-WAN. So, you can run protection software and share data between multiple locations. The trend we see in network protection on the datacenter side is to lock down the traffic by only allowing known, benevolent traffic sources. Regarding office networking, we see new initiatives like ZScaler coming up, where you tunnel all your staff over the network of ZScaler so they can analyse the traffic and block patterns that they marked as malicious. Especially for companies with employees that travel a lot, this is a smart solution.
Many thought that bringing workloads to the cloud would reduce their responsibility of doing security. It is now clear that this is not the case. Most cloud vendors practice the “shared responsibility” approach. This means that big hyperscalers can offer a first line of defense against well known threats and port scanners. For the more sophisticated attacks that are directly pointed at your servers, you need to have your protection in place.
Juniper Networks patched a large number of critical vulnerabilities in various networking and controller solutions. The most important patches apply to Junos Space, Contrail Networking and NorthStar Controller solutions. These have been labelled as critical by US security supervisor CISA. Some ... Read more
2 years ago
An exploit in macOS could allow hackers to bypass sandbox securities and execute code. Microsoft urges users to patch as soon as possible. Microsoft researchers identified a flaw in macOS. The flaw allows hackers to bypass macOS' Sandbox App and execute code on targeted systems. According to Ap... Read more
2 years ago
Security provider CyberArk unveiled a new security solution for AWS and several improvements to its current product line. The new solution, CyberArk Secrets Hub, allows developers to access AWS secrets with a straightforward method using AWS Secrets Manager. Using existing procedures and infrast... Read more
2 years ago
A new survey on edge computing says remote working is leading to increased vulnerability. A survey released this week says that nearly half of the endpoint devices corporations manage are at risk. The endpoints in question are unmonitored or outdated. Endpoint management firm Adaptiva issued... Read more
2 years ago
Older Intel and AMD processors are vulnerable to Rettbleed, a new Spectre variant. The vulnerability was discovered by a research team from the Technical University of Zurich. Meanwhile, the first security patches for Linux have been announced. The Spectre variant was discovered by Swiss researc... Read more
2 years ago
Microsoft's latest Patch Tuesday produced no less than 84 fixes, including four critical vulnerabilities and one that's actively abused in the wild. One of the fixes tackles a vulnerability that's actively abused by cybercriminals (CVE-2022-22047). Attackers are exploiting a privilege vulnerabi... Read more
2 years ago
Microsoft launches the first public release of Defender for IoT. The software secures IoT and OT devices like smart cameras and sensors. The solution is agentless. Protection starts with an overview of all IoT and OT devices in an environment. Next, the solution points out misconfigurations and ... Read more
2 years ago
Ransomware groups ALPHV/BlackCat, LockBit and Karakurt adopted a new way of extorting victims. The data of breached companies are searchable on leak websites. Ransomware groups frequently implement new blackmailing methods. ALPHV/BlackCat, LockBit and Karakurt recently started allowing website ... Read more
2 years ago
Paladin Cloud is now available. The platform recognizes and secures all data sources in a cloud environment, including repositories, API gateways and Kubernetes clusters. Cloud security is challenging. APIs and integrations are used at scale, which can reduce visibility into individual systems. ... Read more
2 years ago
Microsoft's decision to unblock VBA macros in Office 365 has not been to everyone's liking. Security experts consider the move to be a big mistake. Microsoft recently decided to enable Visual Basic Application (VBA) macros in Office 365 by default. VBA macros allow end users of Office 365 to add... Read more
2 years ago
