Security is more important than ever. Cybersecurity has been a problem from the start of IT and it will be till the end. It all started with endpoint and network security, but today, we are also facing with cloudsecurity and managing employees to incorporate good security practices.
All these new technologies that help us innovate also helps cybercriminals and state sponsored hackers to get new tools they can use to get access to our systems, and in a worst case scenario, access to our most valuable data and business secrets. Also, with new legislation in place like GDPR, you need to make sure everything is secure, otherwise you just don’t lose your reputation, but you can also be fined by the government. Protecting IT-environments is more important than ever.
Your first line of defense is usually endpoint protection. The devices your employees work with need to be protected against ransomware and other malware which can bring lots and lots of trouble. This nowadays the most basic form of protection and many of the bigger vendors and suites can help you achieve this.
Network security is a bit more advanced, where you can manage which traffic goes across your network. You can also connect different networks together with e.g. SD-WAN. So, you can run protection software and share data between multiple locations. The trend we see in network protection on the datacenter side is to lock down the traffic by only allowing known, benevolent traffic sources. Regarding office networking, we see new initiatives like ZScaler coming up, where you tunnel all your staff over the network of ZScaler so they can analyse the traffic and block patterns that they marked as malicious. Especially for companies with employees that travel a lot, this is a smart solution.
Many thought that bringing workloads to the cloud would reduce their responsibility of doing security. It is now clear that this is not the case. Most cloud vendors practice the “shared responsibility” approach. This means that big hyperscalers can offer a first line of defense against well known threats and port scanners. For the more sophisticated attacks that are directly pointed at your servers, you need to have your protection in place.
The U.S. Department of Defense, the Pentagon, is going to deploy a new generation of weapon systems. These systems appear to be very easy to hack. The systems have moderate passwords, employees communicate without using encryption and there are many unresolved bugs. This is stated in a report by the... Read more
4 years ago
Bloomberg once again brings out a story about Chinese espionage chips in server hardware of American companies. This time it would be a manipulated Ethernet port that was discovered on a server of an American telecom player. Bloomberg does not let go of the story of the secret Chinese espionage chi... Read more
4 years ago
Sophos adds Endpoint Detection and Response (EDR) to its Intercept X portfolio for endpoint protection. This democratises tools such as threat tracking and ISOC. EDR tools are tools for monitoring endpoint and network events, and gathering all that information into a central database for further ana... Read more
4 years ago
Heathrow Airport Limited has been fined £120,000 (€140,000). The company behind the airport in London has not paid enough attention to data protection. A USB stick with personnel data was lost. The fine was imposed by the Information Commissioners Office (ICO) for a serious violation of the... Read more
4 years ago
Gazorp, a free malware-maker found on the dark web, lets cyber criminals make their own AZORult attacks. AZORult is a trojan that collects data from a system. It searches for stored passwords, files and login details of the computer itself. The malware-maker was discovered by Check Point Research o... Read more
4 years ago
Cybercriminals focus on small businesses. Today, research by Alert Online shows that more than half (53 percent) of small businesses have experienced cyber-attacks aimed at money or data. The fact that more and more companies are working digitally means that there is a need for better security. That... Read more
4 years ago
Earlier this week, press agency Bloomberg stated that China had secretly placed small chips on Supermicro's motherboards. This would spy on various American tech companies, including Amazon and Apple. The companies denied the news and now the American secret service, Homeland Security, is putting it... Read more
4 years ago
Amazon and Apple are said to be targets of Chinese espionage. It is said that chips have been placed on the motherboard of certain servers in the data centres of the companies. The claims are denied by the companies, as well as by the manufacturer of the motherboards, Supermicro Computer. The story ... Read more
4 years ago
Palo Alto Networks announces that it has reached an acquisition agreement with RedLock. The cloud security specialist is recruited by Palo Alto for $173 million. RedLock specializes in security for customers who work with a public cloud, such as Amazon Web Services or Microsoft Azure. The company ha... Read more
4 years ago
Splunk has announced new innovations to its security portfolio to help security teams detect and investigate cyber-attacks more easily and quickly. The solutions have new functions such as security automation, orchestration and response (SOAR), the Use Case Library and Event Sequencing. The company'... Read more
4 years ago
