Category: Security

Security is more important than ever. Cybersecurity has been a problem from the start of IT and it will be till the end. It all started with endpoint and network security, but today, we are also facing with cloudsecurity and managing employees to incorporate good security practices.

All these new technologies that help us innovate also helps cybercriminals and state sponsored hackers to get new tools they can use to get access to our systems, and in a worst case scenario, access to our most valuable data and business secrets. Also, with new legislation in place like GDPR, you need to make sure everything is secure, otherwise you just don’t lose your reputation, but you can also be fined by the government. Protecting IT-environments is more important than ever.

Endpoint Security

Your first line of defense is usually endpoint protection. The devices your employees work with need to be protected against ransomware and other malware which can bring lots and lots of trouble. This nowadays the most basic form of protection and many of the bigger vendors and suites can help you achieve this.

Network security

Network security is a bit more advanced, where you can manage which traffic goes across your network. You can also connect different networks together with e.g. SD-WAN. So, you can run protection software and share data between multiple locations. The trend we see in network protection on the datacenter side is to lock down the traffic by only allowing known, benevolent traffic sources. Regarding office networking, we see new initiatives like ZScaler coming up, where you tunnel all your staff over the network of ZScaler so they can analyse the traffic and block patterns that they marked as malicious. Especially for companies with employees that travel a lot, this is a smart solution.

Cloud security

Many thought that bringing workloads to the cloud would reduce their responsibility of doing security. It is now clear that this is not the case. Most cloud vendors practice the “shared responsibility” approach. This means that big hyperscalers can offer a first line of defense against well known threats and port scanners. For the more sophisticated attacks that are directly pointed at your servers, you need to have your protection in place.

Update: Schneider Electric hit by Cactus ransomware

Update: Schneider Electric hit by Cactus ransomware

Update 20/02/2024 - The Cactus hackers claim to have stolen 1.5TB of data. As proof, they leaked 25MB of the data on the dark web. They also published snapshots of US citizens' passports and scans of documents with a non-disclosure agreement. Original - French multinational Schneider Electric ha... Read more

date8 days ago
28,500 Microsoft Exchange servers vulnerable

28,500 Microsoft Exchange servers vulnerable

Update 20/02/2024 - 28,500 Microsoft Exchange servers have now been confirmed to be vulnerable to elevation of privilege. This puts affected organisations worldwide at significant risk, as many users are connected to Exchange for their work. The attack surface may be even larger. Indeed, threat ... Read more

date8 days ago
Netherlands extradites suspect behind Raccoon Infostealer to the US

Netherlands extradites suspect behind Raccoon Infostealer to the US

The suspect arrested in the Netherlands behind the Raccoon Infostealer malware was recently extradited to the United States. The court in The Hague already ordered that the request could be granted last year. The extradition by the Netherlands is important for the U.S. intelligence community to ... Read more

date9 days ago
Google enhances Chrome security for remote workers

Google enhances Chrome security for remote workers

Google will soon begin testing adding Private Network Access (PNA) technology on the Google Chrome Enterprise and Education versions of the browser Chrome. The addition will provide enhanced security aimed primarily at remote workers. According to the tech giant, the new feature in its Chrome b... Read more

date9 days ago
State hackers actively misuse AI for debugging and malware creation

State hackers actively misuse AI for debugging and malware creation

State-sponsored hackers from several countries actively use AI and LLMs to support their attack campaigns. Microsoft and OpenAI share how they are leveraging their research results to improve the security of AI tools. According to Microsoft and OpenAI, state-sponsored hackers increasingly use AI... Read more

date13 days ago
Infoblox SOC Insights brings DNS insights to security teams

Infoblox SOC Insights brings DNS insights to security teams

DNS and network data contain much information about potential emerging and existing cyber threats. With the introduction of SOC Insights, Infoblox is bringing this data to the Security Operations Center. Infoblox comes originally from the networking world, focusing on the Domain Name System comb... Read more

date14 days ago
Hackers exploit Windows Defender zero-day for DarkMe malware

Hackers exploit Windows Defender zero-day for DarkMe malware

A zero-day vulnerability in Windows Defender SmartScreen was recently exploited to spread the DarkMe malware. Microsoft has since released a patch to fix this exploit. The zero-day, designated CVE-2024-21412, enabled the Water Hydra and DarkCasino hacker gang to spread the DarkMe remote access t... Read more

date14 days ago
1 2 3 4 267