Number of 2020 vulnerability disclosures set to overtake 2019
Despite a sharp decrease of 19.2 percent observed earlier in the year, vulnerability disclosures in 2020 are expected to exceed 2019's level according to Risk Based Security.
The company's VulnDB team aggregated 23,269 vulnerabilities disclosed during 2020. Despite the initial disruption from COVID-19, the trend of total number of vulnerabilities suggests that business operations and routines have normalized as the gap has closed to 0.98 percent.
Demand for business intelligence solutions increases by 41 percent
A survey of over 120 developers and IT leaders from Reveal shows a 41 percent increase in demand for business intelligence solutions last year and 38 percent seeing increased revenue as the tech market shifted.
But while many took advantage of opportunities, 50 percent reported having to make do with less in 2020. Of those, 23 percent saw projects canceled or postponed, with some respondents indicating lost funding (14 percent) and staff reductions (14 percent).
2020 sees ransomware increase by over 400 percent
A new study from cybersecurity company Deep Instinct, finds that last year malware increased by 358 percent overall and ransomware increased by 435 percent as compared with 2019.
The report which analyzes millions of attacks taking place across the year finds distribution of the Emotet malware skyrocketed by 4,000 percent, while malware threats attacking Android phones increased by 263 percent.
Poor SIEM configuration puts enterprises at risk
Enterprises invest billions annually on SIEM (Security Information and Event Management) software and expect this investment to result in comprehensive threat coverage.
But a new report from AI-powered threat coverage platform CardinalOps shows that on average SIEM deployment rules miss 84 percent of the techniques listed in MITRE ATT&CK.
What's wrong with software debugging? [Q&A]
We've seen a tidal wave of developer-enabling technologies over the last ten years. From DevOps, to CI/CD, to containers and microservices -- all of these best practices and technology patterns aim to speed up the process of shipping code fast from the developer into production.
But while software has become increasingly easy to package and deploy, the process of diagnosing and fixing bugs in production has become much more difficult. When services crash in the middle of the night, developers still find themselves in the world of logs, hotfixes and desperation -- but now with much greater surface area to investigate as applications span distributed systems.
Expert tips for Safer Internet Day
Today is Safer Internet Day, held annually to promote making the internet a safer and better place for all and particularly for children and younger users.
Industry experts have been keen to offer their their views and advice and we've put together a round up of some of the best.
One in four government organizations suffers accidental cloud leakage
Detecting and resolving data leakage is a top security challenge for public sector organizations with 24 percent suffering accidental leakage of cloud data.
The 2021 Cloud Data Security Report from Netwrix finds phishing (reported by 39 percent of organizations) to be the most common incident that government agencies experienced in the cloud, followed by accidental data leakage (24 percent) and targeted attacks on infrastructure (22 percent).
Developers should focus on open source cloud skills
A new survey by O'Reilly Media and IBM reveals that developers are better off building open source cloud skills rather than focusing on skills related to a specific vendor's cloud.
The survey of almost 3,500 developers and technology managers finds that open source software is rated equal to or better than proprietary software by 94 percent of respondents. In addition when choosing cloud providers 70 percent of respondents prefer one based on open source.
More automation is needed to speed up secure software development
The single most important driver of DevSecOps programs is improving the security, quality, and resilience of software, according to a new report. But insufficient automation in software development is the number one cause of delays in product releases.
The study from Security Compass shows bringing technology to market faster is the second most important driver, while cost reduction is the least important.
Microsoft, Facebook and PayPal are the most phished brands
During 2020 Microsoft maintained its position as the brand most often found in phishing emails, followed by Facebook and PayPal.
Email defense specialist Vade Secure has released its 2020 Phishers' Favorites report which also shows that cloud services overtook financial services to become the most impersonated industry, whilst cynical hackers have been quick to exploit the COVID-19 pandemic.
Privileged access is the Achilles heel of enterprise security
Failure to automate control of physical accounts is a major weak point in enterprise security according to a study released by Thycotic.
Among the findings are that a significant number of enterprises (28 percent) only audit privileged access management (PAM) on a quarterly or annual basis.
The challenges of navigating breach notification rules [Q&A]
New and updated privacy legislation is being launched around the world and a key component of these acts is breach notification requirements, which mean a business is required to notify individuals when their information falls into the hands of an attacker.
We spoke to Ralph Nickl, founder and CEO of Canopy Software to find out what what enterprises and consumers need to know about these laws and the challenges that compliance brings.
Automating routine operations tasks will address critical IT challenges
In a new study, 82 percent of respondents cite too many redundant or routine tasks as their most critical IT challenge, but 91 percent agree that automating routine manual tasks by introducing Artificial Intelligence for IT Operations (AIOps) can provide significant benefits across the enterprise.
The Autonomous Enterprise survey from Digitate shows 65 percent say lacking a proactive ability to predict, identify, and detect system issues is a major challenge.
Developers feel they should be paid for open source contributions
A new survey of over 9,500 developers, of whom 4,400 actively participate in open source, finds that 54 percent of respondents feel that individuals should be paid for their open source work.
In fact the study from developer cloud company DigitalOcean finds that only 14 percent of respondents are currently paid for their open source contributions.
Developers play a key role in digital transformation despite COVID
Developers are playing a key role in helping enterprises meet their digital transformation goals despite facing significant challenges from COVID-19 according to new research from Couchbase.
The survey of 450 European and US senior IT decision makers finds 92 percent of respondents believe that DevOps could have a revolutionary impact on their digital transformation efforts, while 63 percent say that the flexibility to change their goals when needed has been helpful in meeting their digital transformation goals.
Ian's Bio
Ian spent almost 20 years working with computers before he discovered that writing about them was easier than fixing them. Since then he's written for a number of computer magazines and is a former editor of PC Utilities. Follow him on Mastodon
© 1998-2025 BetaNews, Inc. All Rights Reserved. Privacy Policy - Cookie Policy.