Security is more important than ever. Cybersecurity has been a problem from the start of IT and it will be till the end. It all started with endpoint and network security, but today, we are also facing with cloudsecurity and managing employees to incorporate good security practices.
All these new technologies that help us innovate also helps cybercriminals and state sponsored hackers to get new tools they can use to get access to our systems, and in a worst case scenario, access to our most valuable data and business secrets. Also, with new legislation in place like GDPR, you need to make sure everything is secure, otherwise you just don’t lose your reputation, but you can also be fined by the government. Protecting IT-environments is more important than ever.
Your first line of defense is usually endpoint protection. The devices your employees work with need to be protected against ransomware and other malware which can bring lots and lots of trouble. This nowadays the most basic form of protection and many of the bigger vendors and suites can help you achieve this.
Network security is a bit more advanced, where you can manage which traffic goes across your network. You can also connect different networks together with e.g. SD-WAN. So, you can run protection software and share data between multiple locations. The trend we see in network protection on the datacenter side is to lock down the traffic by only allowing known, benevolent traffic sources. Regarding office networking, we see new initiatives like ZScaler coming up, where you tunnel all your staff over the network of ZScaler so they can analyse the traffic and block patterns that they marked as malicious. Especially for companies with employees that travel a lot, this is a smart solution.
Many thought that bringing workloads to the cloud would reduce their responsibility of doing security. It is now clear that this is not the case. Most cloud vendors practice the “shared responsibility” approach. This means that big hyperscalers can offer a first line of defense against well known threats and port scanners. For the more sophisticated attacks that are directly pointed at your servers, you need to have your protection in place.
In an update for iOS, Apple fixes three zero-day vulnerabilities that were being actively exploited. The leaks were found by Google's Project Zero research group. In addition to iOS, the vulnerabilities were also present in iPadOS, which is largely the same operating system. The new update fixes... Read more
3 years ago
Emotet attacks have been on the rise, leading to more machines getting compromised. This has prompted cybercriminals to launch more malware infections and ransomware campaigns on compromised devices. The HP-Bromium Threat Insights Report released in October shows a 1200% increase in Emotet attac... Read more
3 years ago
A collection of more than 23,000 hacked databases has temporarily appeared on a forum. The collection came from the hacker website Cit0day, which recently went offline. Cit0day was a website where cybercriminals could buy access to the hacked databases and then abuse the stolen personal data. Th... Read more
3 years ago
Fortinet has announced a new firewall. The FortiGate 2600F is built for security-driven networking and, according to the company, is many times faster than competitors' offerings. Fortinet has equipped the FortiGate 2600F with an NP7 processor and a CP9 coprocessor. According to Fortinet, the NP... Read more
3 years ago
Google has patched two zero-day vulnerabilities in the Chrome browser. This is the third time in two weeks that the company has had to fix a Chrome flaw under active exploit. A tweet on Monday from Ben Hawkes, the head of Google’s Project Zero’s vulnerability and exploit research section, confi... Read more
3 years ago
Attackers can remotely access any TCP/UDP service bound to a victim machine just by the victim visiting a website. Research over the weekend has demonstrated a new NAT-based hacking technique. This technique allows an attacker to bypass firewall protection and remotely access any TCP/UDP servi... Read more
3 years ago
Citrix has announced two new products to help companies secure their cloud-based applications. Secure Internet Access and Secure Workspace Access offer different methods to secure the connection between the employee and the cloud. Secure Internet Access With Secure Internet Access, Citrix pro... Read more
3 years ago
Researches have found the key that Intel uses to secure microcode updates in a number of their processors. The keys can be used to analyze updates or install custom patches. The technique can't be used to hack all Intel processors. The key can only be found in chips based on the Goldmont archite... Read more
3 years ago
2018 and 2019 have been the worst years on record when it comes to machine identity attacks. This comes from a new report submitted by Venafi, which argues that the machine identity attacks are exploding. The number of reported machine identity attacks grew by 400% in both 2018 and 2019. In the ... Read more
3 years ago
Research shows that younger employees are more apt to take risks. Mimecast this week released new research which highlights the risky behavior of employees using company-issued devices. More than 1,000 respondents worldwide were asked how aware they are of today’s cyber risks. The results ... Read more
3 years ago
