Category: Security

Security is more important than ever. Cybersecurity has been a problem from the start of IT and it will be till the end. It all started with endpoint and network security, but today, we are also facing with cloudsecurity and managing employees to incorporate good security practices.

All these new technologies that help us innovate also helps cybercriminals and state sponsored hackers to get new tools they can use to get access to our systems, and in a worst case scenario, access to our most valuable data and business secrets. Also, with new legislation in place like GDPR, you need to make sure everything is secure, otherwise you just don’t lose your reputation, but you can also be fined by the government. Protecting IT-environments is more important than ever.

Endpoint Security

Your first line of defense is usually endpoint protection. The devices your employees work with need to be protected against ransomware and other malware which can bring lots and lots of trouble. This nowadays the most basic form of protection and many of the bigger vendors and suites can help you achieve this.

Network security

Network security is a bit more advanced, where you can manage which traffic goes across your network. You can also connect different networks together with e.g. SD-WAN. So, you can run protection software and share data between multiple locations. The trend we see in network protection on the datacenter side is to lock down the traffic by only allowing known, benevolent traffic sources. Regarding office networking, we see new initiatives like ZScaler coming up, where you tunnel all your staff over the network of ZScaler so they can analyse the traffic and block patterns that they marked as malicious. Especially for companies with employees that travel a lot, this is a smart solution.

Cloud security

Many thought that bringing workloads to the cloud would reduce their responsibility of doing security. It is now clear that this is not the case. Most cloud vendors practice the “shared responsibility” approach. This means that big hyperscalers can offer a first line of defense against well known threats and port scanners. For the more sophisticated attacks that are directly pointed at your servers, you need to have your protection in place.

15-year-old Python bug puts 350,000 open-source projects at risk

15-year-old Python bug puts 350,000 open-source projects at risk

Researchers at Trellix said they have patched nearly 62,000 open-source projects susceptible to a 15-year-old path traversal vulnerability in the Python ecosystem. The bug, tracked under CVE-2007-4559, was discovered by Trellix's team in Python’s tarfile module late last year. It was first rep... Read more

date2 days ago
‘FBI and Europol take down ransomware group Hive’

‘FBI and Europol take down ransomware group Hive’

Hive's infrastructure is down. Europol claims the ransomware group was tackled by a partnership of Dutch, German and US authorities. "The FBI seized this site as part of a coordinated law enforcement action", reads the banner referred to by Hive's website since Thursday. The statement is signed ... Read more

date2 days ago
ServiceNow invests $25 million in Snyk

ServiceNow invests $25 million in Snyk

ServiceNow announced a strategic investment in Snyk. The startup focuses on helping developers detect and fix code vulnerabilities. The Wall Street Journal reported that the investment is worth $25 million. ServiceNow's investment isn't just about the money. The company also built an integration... Read more

date4 days ago
Researchers warn of increase in SSRF attacks on Microsoft Exchange

Researchers warn of increase in SSRF attacks on Microsoft Exchange

Bitdefender warns of an increase in cyberattacks on on-premises deployments of Microsoft Exchange Server 2013, 2016 and 2019. The security company witnessed a recent rise in ProxyNotShell and OWASSRF, two tactics for attacks on Microsoft Exchange Server. The tactics exploit two known vulnera... Read more

date4 days ago
Lansweeper acquires security startup RankedRight

Lansweeper acquires security startup RankedRight

Lansweeper announced the acquisition of RankedRight. The startup's software prioritizes system vulnerabilities. Lansweeper, a Belgium-based provider of monitoring solutions, wants to use the acquisition to expand its offering with security features. RankedRight was founded in 2020. The startup ... Read more

date6 days ago
Cybercriminals use Microsoft OneNote attachments to spread malware

Cybercriminals use Microsoft OneNote attachments to spread malware

Security researchers warn that cybercriminals have started using OneNote attachments in phishing emails to infect victims with remote access malware, allowing attackers to steal passwords and even cryptocurrency wallets. The tactic isn't new, as attackers have been sending malware through malici... Read more

date6 days ago
Cybercriminal steals data of 37 million T-Mobile customers

Cybercriminal steals data of 37 million T-Mobile customers

The US branch of T-Mobile has been hit by a cyberattack. The personal data of 37 million customers was stolen. According to an official statement, a cybercriminal managed to break into T-Mobile's systems via an API. In August 2021, a prior incident leaked the data of 48 million customers. Th... Read more

date9 days ago
1 2 3 197