Security is more important than ever. Cybersecurity has been a problem from the start of IT and it will be till the end. It all started with endpoint and network security, but today, we are also facing with cloudsecurity and managing employees to incorporate good security practices.
All these new technologies that help us innovate also helps cybercriminals and state sponsored hackers to get new tools they can use to get access to our systems, and in a worst case scenario, access to our most valuable data and business secrets. Also, with new legislation in place like GDPR, you need to make sure everything is secure, otherwise you just don’t lose your reputation, but you can also be fined by the government. Protecting IT-environments is more important than ever.
Your first line of defense is usually endpoint protection. The devices your employees work with need to be protected against ransomware and other malware which can bring lots and lots of trouble. This nowadays the most basic form of protection and many of the bigger vendors and suites can help you achieve this.
Network security is a bit more advanced, where you can manage which traffic goes across your network. You can also connect different networks together with e.g. SD-WAN. So, you can run protection software and share data between multiple locations. The trend we see in network protection on the datacenter side is to lock down the traffic by only allowing known, benevolent traffic sources. Regarding office networking, we see new initiatives like ZScaler coming up, where you tunnel all your staff over the network of ZScaler so they can analyse the traffic and block patterns that they marked as malicious. Especially for companies with employees that travel a lot, this is a smart solution.
Many thought that bringing workloads to the cloud would reduce their responsibility of doing security. It is now clear that this is not the case. Most cloud vendors practice the “shared responsibility” approach. This means that big hyperscalers can offer a first line of defense against well known threats and port scanners. For the more sophisticated attacks that are directly pointed at your servers, you need to have your protection in place.
A hack on British Airways put 380,000 payment cards at risk. The hack took place between 21 August and 5 September. According to the airline, the problem has now been solved. The police and affected customers have been notified. The airline is still investigating the hack, reports The Guardian. Duri... Read more
5 years ago
Fortinet has made the new FortniNAC solution available. It is a network access controller that combines network segmentation with automated countermeasures to secure IoT environments. The company believes that this is a desirable solution, as the growth of insecure IoT devices without a user interfa... Read more
5 years ago
Uniform Resource Locators (URLs), the online addresses that are a bit like one of the most important ways of surfing the Internet, have an important problem. Because they have a complex structure, malicious people can easily exploit them. Google wants to do something about that. Now it is easy for a... Read more
5 years ago
People remain the weak link in any security system. A new investigation has shown that the vast majority of security incidents can be traced back to the personnel. In the case of a self-reported data breach, the chance is seven times greater that the leak is due to human error than that a hacker was... Read more
5 years ago
According to Czech security researcher VladimÃr Smitka, almost 400,000 websites are at risk of being hacked. The reason is that the pages have an open .git folder. It concerns /.git/HEAD, which should not be publicly accessible. This is dangerous because it allows malicious parties to access cur... Read more
5 years ago
Attackers increasingly use legitimate tools or run simple scripts and shell code directly in memory. These living off the land tactics are less likely to be detected by traditional malware protection, Symantec warns. By carrying out an attack using software and processes that are already present on ... Read more
5 years ago
Next year, the IT department of companies will have a larger budget. Most of the money will be spent on cyber security measures. Tech Pro Research reports this in a new research report. According to the report, more than half of the organisations will invest more money in the IT department. By far t... Read more
5 years ago
After having grown in silence for some time, a new IoT botnet is now slowly making its presence felt. According to security researchers, the Hakai IoT botnet targets routers from D-Link, Huawei and Realtek. Slowly the network grows in size. Hakai (the Japanese word for destruction) was first discove... Read more
5 years ago
Last week, Google announced that the Titan Security Key would finally be available to everyone. The physical security key provides a two-step verification that would not be susceptible to phishing. But now it turns out that the key is produced in China and there are concerns about its safety. Mother... Read more
5 years ago
