Security is more important than ever. Cybersecurity has been a problem from the start of IT and it will be till the end. It all started with endpoint and network security, but today, we are also facing with cloudsecurity and managing employees to incorporate good security practices.
All these new technologies that help us innovate also helps cybercriminals and state sponsored hackers to get new tools they can use to get access to our systems, and in a worst case scenario, access to our most valuable data and business secrets. Also, with new legislation in place like GDPR, you need to make sure everything is secure, otherwise you just don’t lose your reputation, but you can also be fined by the government. Protecting IT-environments is more important than ever.
Your first line of defense is usually endpoint protection. The devices your employees work with need to be protected against ransomware and other malware which can bring lots and lots of trouble. This nowadays the most basic form of protection and many of the bigger vendors and suites can help you achieve this.
Network security is a bit more advanced, where you can manage which traffic goes across your network. You can also connect different networks together with e.g. SD-WAN. So, you can run protection software and share data between multiple locations. The trend we see in network protection on the datacenter side is to lock down the traffic by only allowing known, benevolent traffic sources. Regarding office networking, we see new initiatives like ZScaler coming up, where you tunnel all your staff over the network of ZScaler so they can analyse the traffic and block patterns that they marked as malicious. Especially for companies with employees that travel a lot, this is a smart solution.
Many thought that bringing workloads to the cloud would reduce their responsibility of doing security. It is now clear that this is not the case. Most cloud vendors practice the “shared responsibility” approach. This means that big hyperscalers can offer a first line of defense against well known threats and port scanners. For the more sophisticated attacks that are directly pointed at your servers, you need to have your protection in place.
Expert talks
Advanced Threat Protection (ATP) consistently provides solutions to prevent critical business-sensitive data from cyber threats before they reach their employees and react promptly when things go wrong. ATP also provides, detects, and notifies you of advanced threats via email, mobile, social, and ... Read more
2 years ago
HP warns of critical vulnerabilities in hundreds of HP printer models, including the LaserJet Pro, OfficeJet and DeskJet series. The first vulnerability allows a buffer overflow. The vulnerability affects dozens of models (see: Affected Products). The buffer overflow creates the risk of Remote C... Read more
2 years ago
The average ransomware variant takes 43 minutes to encrypt 100,000 files. SURGe, the study's author, says that reactive measures are no match for ransomware speeds. Tempo SURGe is a research arm of Splunk. Recently, SURGe investigated the speed of encryption. The team unleashed ten common ... Read more
2 years ago
Lapsus$ caused a data breach at authentication specialist Okta. The data of 366 customers is at stake. Okta confirmed the incident today. On Monday, Lapsus$ shared screenshots of an internal Okta admin account. The crime group claimed to have access to customer accounts. Today, the claim appears... Read more
2 years ago
GTT introduces Secure Connect, a SASE-based networking solution. GTT Secure Connect secures the Internet connection of corporate networks and provides access for any employee, regardless of location and device. The service combines a SASE security model with the GTT's managed SD-WAN solution... Read more
2 years ago
The European Commission said that EU nations should establish a framework to manage cybersecurity threats at EU institutions amid fears about growing cyberattacks that might interrupt essential activities and gain unauthorized access to sensitive data. The idea is part of a package of proposed E... Read more
2 years ago
Microsoft confirmed a cyberattack by criminal group Lapsus$. Source code was captured. In a post on its security blog, Microsoft explains the extent of Lapsus$'s access to its systems. A single account was compromised. In its own words, Microsoft's quick discovery limited the attack's damage. ... Read more
2 years ago
F-Secure announces the new brand name WithSecure. It's the new name for the branch of F-Secure that focuses on enterprise security solutions. This will separate the products with a business focus from the consumer-oriented solutions. In February, F-Secure announced it was splitting into two sepa... Read more
2 years ago
API Security company Noname Security is going to collaborate with Dutch company iSOC24. With this collaboration, the American company wants to make its cloud-based platform more broadly available in the Benelux region. The collaboration between both parties should enable companies to assess API ... Read more
2 years ago
HubSpot has been hit by a hacking attack. Hackers managed to steal data from about 30 customers. Especially crypto companies were affected. According to the supplier of CRM solutions, hackers managed to penetrate the systems via a compromised account of an employee. This gave them access to cust... Read more
2 years ago
