Security is more important than ever. Cybersecurity has been a problem from the start of IT and it will be till the end. It all started with endpoint and network security, but today, we are also facing with cloudsecurity and managing employees to incorporate good security practices.
All these new technologies that help us innovate also helps cybercriminals and state sponsored hackers to get new tools they can use to get access to our systems, and in a worst case scenario, access to our most valuable data and business secrets. Also, with new legislation in place like GDPR, you need to make sure everything is secure, otherwise you just don’t lose your reputation, but you can also be fined by the government. Protecting IT-environments is more important than ever.
Your first line of defense is usually endpoint protection. The devices your employees work with need to be protected against ransomware and other malware which can bring lots and lots of trouble. This nowadays the most basic form of protection and many of the bigger vendors and suites can help you achieve this.
Network security is a bit more advanced, where you can manage which traffic goes across your network. You can also connect different networks together with e.g. SD-WAN. So, you can run protection software and share data between multiple locations. The trend we see in network protection on the datacenter side is to lock down the traffic by only allowing known, benevolent traffic sources. Regarding office networking, we see new initiatives like ZScaler coming up, where you tunnel all your staff over the network of ZScaler so they can analyse the traffic and block patterns that they marked as malicious. Especially for companies with employees that travel a lot, this is a smart solution.
Many thought that bringing workloads to the cloud would reduce their responsibility of doing security. It is now clear that this is not the case. Most cloud vendors practice the “shared responsibility” approach. This means that big hyperscalers can offer a first line of defense against well known threats and port scanners. For the more sophisticated attacks that are directly pointed at your servers, you need to have your protection in place.
IBM has unveiled a new enterprise-level Secure Access Service Edge (SASE) solution designed to encourage adopting the zero-trust security approach. The tech giant said that the new service is named IBM Security Services for SASE. It will utilize technology availed through partnering with Zscaler... Read more
3 years ago
The Microsoft Azure Cosmos DB could have been exposed for years, experts say. Microsoft has warned thousands of its cloud computing customers that intruders could have the ability to read, change or even delete their main databases, according to reporting in Reuters. Microsoft issued the warning... Read more
3 years ago
A "dedicated pod of security experts" will operate as an extension of customer teams to solve complex security problems. Rackspace Technology this week announced the launch of Rackspace Elastic Engineering for Security. The security offering transforms cloud security operations by offering custo... Read more
3 years ago
Following a meeting at the White House, Google, Amazon, Apple, Microsoft, and IBM promise to increase cyber security capabilities. This week US President Biden met with private sector and education leaders to discuss what they call a "whole-of-nation effort" needed to address cybersecurity threa... Read more
3 years ago
Less than a year after it raised $6 million on seed funding, build.security is being acquired by Elastic. The Tel-Aviv and Sunnyvale-based startup did not disclose the financial terms of the deal. The deal will close in Elastic's second quarter (FY22), ending October 31, 2021. Ash Kulkarni, chie... Read more
3 years ago
Poly Network, the cross-chain decentralized finance platform provider, had about $600 million cryptocurrency stolen from it earlier this August. In a strange turn of events, the funds have all been returned. The hack was first reported on August 10 and involved the theft of Ethereum, Polygon, an... Read more
3 years ago
A critical flaw in older Cisco Systems routers will not be patched after the company advised users that they have reached their end-of-life status. The vulnerability is present in the Universal Plug-and-Play services in Cisco Small Business RV214W, RV130W, RV130, and RV110W routers. Cisco rated ... Read more
3 years ago
GitHub users are urged by the platform to enable two-factor authentication, as it seeks to change how accounts are protected from attacks. GitHub’s Mike Hanley posted a blog this week saying that beginning August 13, GitHub stopped accepting account passwords when authenticating Git operations... Read more
3 years ago
A flaw in internet-connected security cameras can allow attackers to remotely watch what is recorded and breach networks while at it. The vulnerability was discovered and detailed by researchers at FireEye Mandiant, who say it relates to the Kalay network offered by ThroughTek. Kalay is the hub ... Read more
3 years ago
Human beings are the weakest link in the chain of cybersecurity, you often hear. Roel van Rijsewijk from Thales is very annoyed about this approach. The reason for this is that the responsibility in this area lies not with the people who deal with it, but with the end users. That must and can be do... Read more
3 years ago
