Category: Security

Security is more important than ever. Cybersecurity has been a problem from the start of IT and it will be till the end. It all started with endpoint and network security, but today, we are also facing with cloudsecurity and managing employees to incorporate good security practices.

All these new technologies that help us innovate also helps cybercriminals and state sponsored hackers to get new tools they can use to get access to our systems, and in a worst case scenario, access to our most valuable data and business secrets. Also, with new legislation in place like GDPR, you need to make sure everything is secure, otherwise you just don’t lose your reputation, but you can also be fined by the government. Protecting IT-environments is more important than ever.

Endpoint Security

Your first line of defense is usually endpoint protection. The devices your employees work with need to be protected against ransomware and other malware which can bring lots and lots of trouble. This nowadays the most basic form of protection and many of the bigger vendors and suites can help you achieve this.

Network security

Network security is a bit more advanced, where you can manage which traffic goes across your network. You can also connect different networks together with e.g. SD-WAN. So, you can run protection software and share data between multiple locations. The trend we see in network protection on the datacenter side is to lock down the traffic by only allowing known, benevolent traffic sources. Regarding office networking, we see new initiatives like ZScaler coming up, where you tunnel all your staff over the network of ZScaler so they can analyse the traffic and block patterns that they marked as malicious. Especially for companies with employees that travel a lot, this is a smart solution.

Cloud security

Many thought that bringing workloads to the cloud would reduce their responsibility of doing security. It is now clear that this is not the case. Most cloud vendors practice the “shared responsibility” approach. This means that big hyperscalers can offer a first line of defense against well known threats and port scanners. For the more sophisticated attacks that are directly pointed at your servers, you need to have your protection in place.

New Google Chrome attack can cause your Windows 10 device to crash

New Google Chrome attack can cause your Windows 10 device to crash

A new exploit has been discovered within Google Chrome, which has the potential to completely freeze Windows 10 devices. The exploit is part of a tech support scam, in which the user is told that there is a virus on his or her device. This can be read on the site BGR. There we read about a new explo... Read more

date5 years ago
Chrome OS now blocks hacks via USB devices

Chrome OS now blocks hacks via USB devices

Chrome OS will soon block all attempts to access a device via a USB device, or to change settings when the screen is locked. It is one of the new steps taken by Google to protect Chromebooks from certain types of physical access attacks. The new function is called USBGuard and blocks all access to t... Read more

date5 years ago
Hide N Seek botnet infects IoT devices with standard passwords

Hide N Seek botnet infects IoT devices with standard passwords

The Hide 'N Seek botnet continues to grow by infecting vulnerable Internet or Things (IoT) devices that still use their default passwords. That's what Avast security analysts say, SecurityIntelligence reports. According to Avast, the botnet comes with two important functionalities. The first uses a... Read more

date5 years ago
Hackers find simple method to bypass two-stage verification

Hackers find simple method to bypass two-stage verification

Hackers have found a new way to bypass two-stage verification. The hackers have succeeded in automating this process and can thus relatively easily break into accounts of Google and Yahoo, among others. Secure e-mail accounts do not seem as secure as expected. At least that's what Amnesty Internatio... Read more

date5 years ago
“China hacked into HPE, IBM and their customers’ networks.

“China hacked into HPE, IBM and their customers’ networks.

Sources from the Reuters news agency claim that hackers working for the Chinese Ministry of State Security have cracked the networks of HPE and IBM. Subsequently, the hackers would have misused this access to hack into the networks of customers of the tech companies. Reuters reports this on the basi... Read more

date5 years ago
FBI and Dutch police take 15 DDoS providers offline

FBI and Dutch police take 15 DDoS providers offline

Together with the Dutch police, among others, the American intelligence service FBI has taken a total of fifteen websites offline. The sites allowed malicious parties to order DDoS attacks. To put an end to this, the domains have been taken offline. The FBI reported that yesterday. The U.S. intellig... Read more

date5 years ago
Qualys launches Container Security solution for AWS Marketplace

Qualys launches Container Security solution for AWS Marketplace

Qualys has launched a new solution for container security. This is Container Security for the AWS Marketplace. This gives users insight into container applications that run on AWS and enables them to realise the security for these applications. Qualys Container Security can be used by DevOps and Sec... Read more

date5 years ago
Hackers distribute trojans via Google Cloud storage

Hackers distribute trojans via Google Cloud storage

A new corporate email campaign spreads malware in the Google Cloud Storage service. The campaign focuses mainly on financial companies, according to ZDNet. The attack was discovered by investigators from Menlo Labs. The researchers state that they have been studying the so-called BEC-scam for some t... Read more

date5 years ago
D66 calls for stricter rules for hacks government via zero days

D66 calls for stricter rules for hacks government via zero days

D66 Member of Parliament Kees Verhoeven wants stricter rules for the use of certain weapons for hacking by the police, secret services and the army. This specifically concerns tools that can abuse zero days - vulnerabilities in software that are not yet known. That's what the NOS says. Zero day err... Read more

date5 years ago
1 248 249 250 251 252 267