Category: Security

Security is more important than ever. Cybersecurity has been a problem from the start of IT and it will be till the end. It all started with endpoint and network security, but today, we are also facing with cloudsecurity and managing employees to incorporate good security practices.

All these new technologies that help us innovate also helps cybercriminals and state sponsored hackers to get new tools they can use to get access to our systems, and in a worst case scenario, access to our most valuable data and business secrets. Also, with new legislation in place like GDPR, you need to make sure everything is secure, otherwise you just don’t lose your reputation, but you can also be fined by the government. Protecting IT-environments is more important than ever.

Endpoint Security

Your first line of defense is usually endpoint protection. The devices your employees work with need to be protected against ransomware and other malware which can bring lots and lots of trouble. This nowadays the most basic form of protection and many of the bigger vendors and suites can help you achieve this.

Network security

Network security is a bit more advanced, where you can manage which traffic goes across your network. You can also connect different networks together with e.g. SD-WAN. So, you can run protection software and share data between multiple locations. The trend we see in network protection on the datacenter side is to lock down the traffic by only allowing known, benevolent traffic sources. Regarding office networking, we see new initiatives like ZScaler coming up, where you tunnel all your staff over the network of ZScaler so they can analyse the traffic and block patterns that they marked as malicious. Especially for companies with employees that travel a lot, this is a smart solution.

Cloud security

Many thought that bringing workloads to the cloud would reduce their responsibility of doing security. It is now clear that this is not the case. Most cloud vendors practice the “shared responsibility” approach. This means that big hyperscalers can offer a first line of defense against well known threats and port scanners. For the more sophisticated attacks that are directly pointed at your servers, you need to have your protection in place.

Leap day causes problems in Citrix and Sophos software

Leap day causes problems in Citrix and Sophos software

Citrix virtualization products and Sophos security services ran into problems on Feb. 29. The extra day in a leap year can cause problems in computer systems if they are not programmed to count the extra day. This seems to be the case with Citrix software; users complained on the support forum t... Read more

date21 hours ago
Dutch police arrest four men for phishing and bank fraud

Dutch police arrest four men for phishing and bank fraud

The Cybercrime Team Rotterdam of the Dutch Police has arrested four men for large-scale phishing and bank fraud. This followed data from the "Operation Cookie Monster" investigation into the Genesis Marketplace. The suspects, aged 23, 26, 29 and 30, were guilty of large-scale phishing and bank h... Read more

date22 hours ago
Hashed passwords captured in Carpetright data breach

Hashed passwords captured in Carpetright data breach

In a cyber attack on Carpetright, hashed passwords may have been stolen. The flooring store has reported this to the privacy authorities in the Netherlands and Belgium. In a response to Tweakers, Carpetright says it was affected by the cyber attack. The cybercriminals gained access to the passwo... Read more

date23 hours ago
Lazarus Group strikes at kernel level via Windows AppLocker driver

Lazarus Group strikes at kernel level via Windows AppLocker driver

Lazarus Group hackers broke into systems via a zero-day vulnerability in the Windows AppLocker driver and gained access at the kernel level. An enhanced version of their rootkit allowed them to disable security tools on affected systems. According to Avast research, a zero-day vulnerability in t... Read more

date2 days ago
LockBit returns with updated encryptors and new servers

LockBit returns with updated encryptors and new servers

LockBit restarted its operations after receiving a crackdown from police forces last week. The ransomware group launched a new website over the weekend to extort the victims it makes. However, the conclusion about the international action against LockBit is positive. How does the operation impact t... Read more

date2 days ago
‘Zombie code’ leads to long-term unpatched vulnerabilities

‘Zombie code’ leads to long-term unpatched vulnerabilities

According to a recent study by Synopsys, outdated code components lurking in codebases, commonly referred to as "zombie code," pose a significant risk by harboring unpatched vulnerabilities for extended periods. In their Open Source Security and Risk Analysis study, Synopsys researchers highligh... Read more

date3 days ago
SentinelOne and NinjaOne redefine endpoint protection

SentinelOne and NinjaOne redefine endpoint protection

SentinelOne and NinjaOne announce a collaboration to merge the specializations of the companies for enhanced endpoint protection. The solution is aimed at quickly notifying cybersecurity teams of potential threats and expanding threat detection. A new collaboration between SentinelOne and Ninja... Read more

date3 days ago
Spyware found on MEPs’ phones in defense and security committee

Spyware found on MEPs’ phones in defense and security committee

Two phones of European parliamentarians have shown traces of spyware. The subcommittee focused on security and defense appears to have been targeted by state hackers, but the culprit is unknown. The discovery was reported by Politico, which warned back in December that the European Parliament's ... Read more

date8 days ago
Apple is already making iMessage encryption quantum-proof

Apple is already making iMessage encryption quantum-proof

Despite quantum computers not being in existence yet, there is an increasing demand for quantum-safe communications. Apple says iMessage will guarantee this with PQ3 in the near future. What does this look like? Apple announced this week that it will provide iMessage with PQ3 encryption. This me... Read more

date9 days ago
1 2 3 268