Security is more important than ever. Cybersecurity has been a problem from the start of IT and it will be till the end. It all started with endpoint and network security, but today, we are also facing with cloudsecurity and managing employees to incorporate good security practices.
All these new technologies that help us innovate also helps cybercriminals and state sponsored hackers to get new tools they can use to get access to our systems, and in a worst case scenario, access to our most valuable data and business secrets. Also, with new legislation in place like GDPR, you need to make sure everything is secure, otherwise you just don’t lose your reputation, but you can also be fined by the government. Protecting IT-environments is more important than ever.
Your first line of defense is usually endpoint protection. The devices your employees work with need to be protected against ransomware and other malware which can bring lots and lots of trouble. This nowadays the most basic form of protection and many of the bigger vendors and suites can help you achieve this.
Network security is a bit more advanced, where you can manage which traffic goes across your network. You can also connect different networks together with e.g. SD-WAN. So, you can run protection software and share data between multiple locations. The trend we see in network protection on the datacenter side is to lock down the traffic by only allowing known, benevolent traffic sources. Regarding office networking, we see new initiatives like ZScaler coming up, where you tunnel all your staff over the network of ZScaler so they can analyse the traffic and block patterns that they marked as malicious. Especially for companies with employees that travel a lot, this is a smart solution.
Many thought that bringing workloads to the cloud would reduce their responsibility of doing security. It is now clear that this is not the case. Most cloud vendors practice the “shared responsibility” approach. This means that big hyperscalers can offer a first line of defense against well known threats and port scanners. For the more sophisticated attacks that are directly pointed at your servers, you need to have your protection in place.
A security researcher has found a new way to crash and restart iPhones. For that, he only needed a few lines of code. The code also works for iPads and MacBooks. In the latter case, Safari crashes when a user opens the link. Security researcher Sabri Haddouche discovered the error in the Apple softw... Read more
5 years ago
Zscaler Private Access (ZPA) is the first zero trust architecture to be awarded the AWS Security Competency status. The architecture safely connects authorized users and devices to specified, internally managed applications without exposing the Amazon Virtual Private Cloud (VPC) to the Internet. Wit... Read more
5 years ago
ESET states that its analysts have discovered that add-ons for the open-source media player Kodi are infected with malware and are targeted at Windows and Linux users. This is apparent from a report that has yet to be published. ZDNet states that today on the basis of notification from the firm. At ... Read more
5 years ago
Personal mobile devices are the biggest threat to a business network. Although employees work from home, or like the BYOD principle, both pose a great risk to IT and security teams. That's what a new investigation by Duo Security shows. The company interviewed one hundred British IT professionals an... Read more
5 years ago
Lenovo today unveiled ThinkShield. This security solution must protect the company's devices throughout their entire lifecycle. Users are also protected online and identities and credentials are kept safe. ThinkShield is a process that keeps Lenovo products as safe as possible from start to finish. ... Read more
5 years ago
The European Union has proposed that large Internet platforms should be fined if they fail to filter out extremist content within one hour. These services include Facebook, Google and Twitter. This is still a proposal, not a policy. Last March, the European Union asked Internet companies to indicate... Read more
5 years ago
Researchers from British Airways have discovered that the group that recently performed a large hack is the same one that attacked Ticketmaster. The Magecard Group has been active since 2015, when it was first discovered by researchers from RisqIQ and ClearSky. The group regularly attacks webshops a... Read more
5 years ago
Hackers are increasingly abusing public cloud services to carry out DDoS attacks. More than a quarter of DDoS attacks take advantage of this. The most abused public cloud service is Microsoft Azure. The public cloud is increasingly being used by hackers to carry out DDoS attacks. A quarter of the cr... Read more
5 years ago
Researchers from Sucuri have come across a new phishing campaign that focuses on WordPress sites. This involves sending fake messages about database upgrades in order to eventually cause major problems for website owners and operators. The attack campaign distinguishes itself from previous phishing ... Read more
5 years ago
Microsoft has released two documents detailing how the company deals with security issues. The documents were prepared by the Microsoft Security Response Center (MSRC) within a year. This department receives and handles security-related reports on bugs. The two documents consist of a website and a ... Read more
5 years ago
