Adopting best practice approaches for hybrid working [Q&A]
More and more businesses are moving to a hybrid work model. But while this approach can offer improved value along with the tools to drive the business forward, it can also present a number of challenges.
So what does it take to succeed with a hybrid approach? We spoke to Cisco Webex's Lorrissa Horton to find out.
Best-selling router ships with vulnerable firmware
Researchers at CyberNews have uncovered security flaws within the default firmware and the web interface app of the TP-Link AC1200 Archer C50 (v6) router.
The router -- an 'Amazon's Choice' product -- is shipped with outdated firmware that is vulnerable to dozens of known security flaws and could put users at risk of man-in-the-middle and Denial of Service attacks.
New device counters USB drive threats
Even in the age of the cloud, USB drives are still commonly used to exchange information between office and home computers, but they're used by hackers as a way to infiltrate systems too.
Researchers at the UK's Liverpool Hope University have developed a new scanning device that can counter the threat posed by USB devices.
Fake pirated software hides dropper-as-a-service
Researchers at SophosLabs have uncovered malware being distributed by a network of websites acting as a 'dropper as a service', serving up a variety of other nasty packages.
These droppers for hire are delivering bundles of malicious and unwanted content to targets looking for cracked versions of popular business and consumer applications.
Businesses struggle to fight insider threats
A new survey of over 1,200 IT and IT security practitioners shows that 53 percent of companies find it impossible or very difficult to prevent an insider attack when data is being aggregated, a key indicator of intent for attacks.
Released in conjunction with the start of National Insider Threat Awareness Month, the report, conducted by the Ponemon Institute with sponsorship from DTEX Systems finds almost half of companies find it impossible or very difficult to prevent an insider attack at the earliest stages.
91 percent of industrial companies at risk of cyberattacks
Industrial businesses were the second most targeted sector in 2020 and new research from Positive Technologies shows that an external attacker could penetrate the corporate network at 91 percent of them.
In addition, Positive Technologies penetration testers gained access to the industrial control system (ICS) networks at 75 percent of these companies. Once criminals have obtained access to ICS components, they can shutdown entire production lines, cause equipment to fail, or incidents that could cause serious harm.
Digital forensics in modern cloud environments [Q&A]
Increasingly applications and infrastructure are moving to the cloud and containers. But although this offers convenience and cost savings it introduces challenges when security incidents occur.
We spoke to James Campbell, CEO and co-founder of Cado Security to find out about the importance of digital forensics when dealing with cloud system breaches.
Move to the cloud opens opportunities for cybercriminals
The rapid shift of applications and infrastructure to the cloud creates gaps in security according to a new threat report from security platform Lacework.
This increases the opportunities for cybercriminals to steal data, take advantage of an organization's assets, and to gain illicit network access.
Businesses turn to low-code as demand for developers soars
The global pandemic along with a surge in demand for developers has boosted the interest in and use of enterprise low-code, according to a new report.
The study from low-code development specialist Mendix shows that 77 percent of enterprises in six countries have already adopted low-code, and 72 percent of IT leaders say it's a trend they can't afford to miss.
New platform offers secure cloud data integration
As enterprises continue to migrate data to the cloud they need to ensure that sensitive information is properly protected.
Automated data integration specialist Fivetran is launching a platform that offers a set of key security-related features, allowing companies to create a more secure modern data stack that meets internal and regulatory requirements.
Hybrid working is here to stay but security remains a challenge
A majority of companies are moving to a long-term hybrid workplace approach according to a new study from Entrust.
The survey of 1,500 business leaders and 1,500 general employees across 10 countries shows 80 percent of leaders and 75 percent of employees say their company is currently using a hybrid model, or is fully remote and considering a hybrid work approach.
How technical debt is harming API security [Q&A]
APIs allow the easy exchange of information between apps, microservices and containers. They've become an essential part of the way our digital infrastructure operates.
But the very ubiquity of APIs means developers are under pressure to produce them quickly and that can lead to 'technical debt' because corners are cut. We spoke to Tom Hudson, security research tech lead at app vulnerability scanner Detectify to find out more about why APIs are vulnerable in this way and how they can be secured.
How technology can cut the rise of voice fraud
Coverage of fraud tends to focus on the online methods such as phishing, credential stuffing, opening fake accounts and so on.
But there's another side to the problem in the form of voice fraud via 'vishing' and the use of social engineering techniques, this is made simpler by the ease with which numbers can be spoofed so a call can appear to come from a legitimate number such as your bank.
SMEs make a rapid shift to hybrid working
According to new research 42 percent of SMEs have moved, or are planning to move, offices to facilitate hybrid working, with those downsizing reducing their office space requirements by an average of 38 percent.
The study from UK data center specialists ServerChoice shows that these office moves are causing SME business leaders to rethink their IT strategies and shift their server infrastructure away from on-premises to either co-location facilities or public/private cloud.
Why supply chain security blind spots put enterprises at risk [Q&A]
Many recent cyberattacks have focused on the software supply chain, with SolarWinds being perhaps the most high profile example.
Businesses can often have a blind spot when it comes to the supply chain and this can have catastrophic consequences. We spoke to Todd Carroll, CISO of CybelAngel to learn more about the problem and what companies can do to keep themselves safe.
Ian's Bio
Ian spent almost 20 years working with computers before he discovered that writing about them was easier than fixing them. Since then he's written for a number of computer magazines and is a former editor of PC Utilities. Follow him on Mastodon
© 1998-2025 BetaNews, Inc. All Rights Reserved. Privacy Policy - Cookie Policy.