Security is more important than ever. Cybersecurity has been a problem from the start of IT and it will be till the end. It all started with endpoint and network security, but today, we are also facing with cloudsecurity and managing employees to incorporate good security practices.
All these new technologies that help us innovate also helps cybercriminals and state sponsored hackers to get new tools they can use to get access to our systems, and in a worst case scenario, access to our most valuable data and business secrets. Also, with new legislation in place like GDPR, you need to make sure everything is secure, otherwise you just don’t lose your reputation, but you can also be fined by the government. Protecting IT-environments is more important than ever.
Your first line of defense is usually endpoint protection. The devices your employees work with need to be protected against ransomware and other malware which can bring lots and lots of trouble. This nowadays the most basic form of protection and many of the bigger vendors and suites can help you achieve this.
Network security is a bit more advanced, where you can manage which traffic goes across your network. You can also connect different networks together with e.g. SD-WAN. So, you can run protection software and share data between multiple locations. The trend we see in network protection on the datacenter side is to lock down the traffic by only allowing known, benevolent traffic sources. Regarding office networking, we see new initiatives like ZScaler coming up, where you tunnel all your staff over the network of ZScaler so they can analyse the traffic and block patterns that they marked as malicious. Especially for companies with employees that travel a lot, this is a smart solution.
Many thought that bringing workloads to the cloud would reduce their responsibility of doing security. It is now clear that this is not the case. Most cloud vendors practice the “shared responsibility” approach. This means that big hyperscalers can offer a first line of defense against well known threats and port scanners. For the more sophisticated attacks that are directly pointed at your servers, you need to have your protection in place.
Researchers from security specialist Wiz Research penetrated the backend of Microsoft Bing through a misconfiguration in Azure App Services and Azure Functions. This allowed them to manipulate search results and add malicious code. The security specialists discovered the so-called BingBang vulne... Read more
7 hours ago
CrowdStrike recently invested an undisclosed amount in security startup Abnormal Security through its investment fund CrowdStrike Falcon Fund. In addition, the two security providers will integrate each other's technology. With the recent investment, the provider of cloud-based security solution... Read more
1 day ago
The US tech giant will round out its product offering with a "holistic solution" that provides end-to-end cloud security posture management (CSPM) across cloud-native resources. This week Cisco announced that it is acquiring Lightspin Technologies, a Tel Aviv-based start-up that helps enterprise... Read more
1 day ago
The well-known IEE 802.11 WiFi protocol has a fundamental design flaw in its security, according to researchers at Northeastern University in Boston and KU Leuven. The flaw allows access points to leak so-called "network frames" in plaintext. Cisco has since acknowledged this risk as the first prov... Read more
2 days ago
A vulnerability in IBM Aspera Faspex servers is being actively exploited by ransomware criminals, researchers warn. Hackers are exploiting a critical vulnerability in an IBM file-exchange application. According to security researchers, the criminals are using the flaw to install ransomware on se... Read more
2 days ago
Acronis has integrated Intel Threat Detection Technology into several solutions. With this, this security vendor's platform offers better protection against new and more developed forms of malware. According to Acronis, malware is becoming increasingly sophisticated. Consider the rapid rise of s... Read more
3 days ago
Microsoft is enabling a new security feature to protect users from on-premise servers that have not updated their security. Microsoft is enabling a new system for Exchange Online that will automatically start throttling and blocking emails sent from "persistently vulnerable Exchange servers" tha... Read more
3 days ago
“Frankly, I live in terror of a ransomware attack and state-sponsored intrusions.” This quote from a business professional comes from the 2023 SonicWall Cyber Threat Report. It perfectly captures what organisations are currently very concerned about. Ransomware has been keeping organisations... Read more
4 days ago
Security researchers managed to discover as many as 27 zero-days in major enterprise software during the three days of the Pwn2Own Vancouver 2023 event. Zero-days were found in Windows 11, Ubuntu and macOS, among others, as well as in Oracle and VMware products and Tesla's firmware. The various ... Read more
4 days ago
For the longest time, the technology industry has been developing a future with password-free (passwordless) authentication. That future is now, with passkeys. But what are passkeys? The FIDO Alliance was established with the goal of lessening the dependence on passwords almost ten years ago. An... Read more
4 days ago
