Security is more important than ever. Cybersecurity has been a problem from the start of IT and it will be till the end. It all started with endpoint and network security, but today, we are also facing with cloudsecurity and managing employees to incorporate good security practices.
All these new technologies that help us innovate also helps cybercriminals and state sponsored hackers to get new tools they can use to get access to our systems, and in a worst case scenario, access to our most valuable data and business secrets. Also, with new legislation in place like GDPR, you need to make sure everything is secure, otherwise you just don’t lose your reputation, but you can also be fined by the government. Protecting IT-environments is more important than ever.
Your first line of defense is usually endpoint protection. The devices your employees work with need to be protected against ransomware and other malware which can bring lots and lots of trouble. This nowadays the most basic form of protection and many of the bigger vendors and suites can help you achieve this.
Network security is a bit more advanced, where you can manage which traffic goes across your network. You can also connect different networks together with e.g. SD-WAN. So, you can run protection software and share data between multiple locations. The trend we see in network protection on the datacenter side is to lock down the traffic by only allowing known, benevolent traffic sources. Regarding office networking, we see new initiatives like ZScaler coming up, where you tunnel all your staff over the network of ZScaler so they can analyse the traffic and block patterns that they marked as malicious. Especially for companies with employees that travel a lot, this is a smart solution.
Many thought that bringing workloads to the cloud would reduce their responsibility of doing security. It is now clear that this is not the case. Most cloud vendors practice the “shared responsibility” approach. This means that big hyperscalers can offer a first line of defense against well known threats and port scanners. For the more sophisticated attacks that are directly pointed at your servers, you need to have your protection in place.
Google blocked over thirty malicious domains connected to cybercriminal groups in Russia, UAE and India. The domains actively targeted AWS, Gmail and many other personal accounts to perform corporate espionage against organizations and human activists. According to the threat analysis group a... Read more
2 days ago
Kaspersky researchers discovered a new malware variant that attacks Microsoft Exchange servers. 'SessionManager' installs a backdoor on affected systems. According to the researchers, mitigation is a difficult process. Kaspersky notes that SessionManager has been active for 15 months. Some 34 s... Read more
2 days ago
Alert Center will inform administrators of sensitive and critical changes to configurations of Google Workspace. Previously known as G Suite, Google Workspace has been upgraded to inform administrator of sensitive alterations to accounts. The new alerts are accessible to all Google Workspace use... Read more
3 days ago
Microsoft patched a serious vulnerability in Service Fabric. The threat was discovered by security specialists from Unit42 of Palo Alto Networks. The vulnerability ('FabricScape') allows attacks on all services and applications that Service Fabric supports. These include Azure Service Fabric, Az... Read more
3 days ago
In light of recent attacks against cloud-based users, Google added new capabilities to Cloud Armor. In a recent blog post, Google stated that modern cyberattacks use increasingly comprehensive techniques like volumetric floods, bot-based attacks, API abuse and DDoS attacks. Google Cloud Armor... Read more
4 days ago
An "unusually advanced hacking group" has spent almost two years infecting a wide range of routers in North America and Europe, according to a report in Ars Technica. The group is using malware that takes full control of connected devices running Windows, macOS, and Linux. So far, researchers fr... Read more
4 days ago
Research by security specialist Cyble indicates that more than 900,000 Kubernetes clusters are vulnerable to malicious scans and data theft. The researchers urge organizations to increase their focus on cluster security. Cyble's researchers came across more than 900,000 vulnerable Kubernetes cl... Read more
4 days ago
RansomHouse claims to have captured data from AMD. In a statement, the chip manufacturer says it's investigating the possibility of a breach. According to RansomHouse, 450GB of AMD data was stolen. The cybercriminals claim that the data is for sale. Stolen data reportedly includes research and f... Read more
4 days ago
A jury of venture capitalists elected Vaultree and Angoka as two of the most promising companies in the European security industry. Both companies develop encryption technology. The companies participated in the Cyber Investor Days, a pitch event for European startups and scaleups. The European ... Read more
4 days ago
Nutanix launched Files 4.1. The update provides new ransomware protection capabilities. The features primarily target customers using Nutanix's Unified Storage solution. Nutanix announced that Files 4.1 will primarily be deployed to Unified Storage and Files customers. In doing so, Nutanix aims ... Read more
6 days ago
