DevOps and digital transformation are creating more insecure apps
For enterprises looking to build new applications as the cornerstone of their digital transformation initiatives, techniques like DevOps are undeniably attractive.
But while they speed up development they also mean that nearly 70 percent of every application is made up of reusable components like third-party libraries, open source software. This means that applications can easily inherit the vulnerabilities in those components.
Insiders cause more than half of data breaches
Most companies consider hacker attacks to be the most dangerous threat, but according to a new report, insiders cause the majority of security incidents by either malicious or accidental actions.
The study from threat detection specialist Netwrix looks at the experiences and plans over 1500 organizations have in addressing IT risks. The insider threat is underlined by the fact that 44 percent of respondents either don't know or are unsure what their employees are doing with sensitive data.
Data theft malware targets Fortnite players
It's no surprise that the release of a new season of Fortnite has led to a rise in scammers keen to exploit gamers who are eager to sample the new software.
Among a rash of supposed free passes and free Android versions of the game that hide surveys and other nuisances, researchers at Malwarebytes have uncovered a malicious program seeking to steal data and Bitcoins.
67 percent of organizations believe hackers can penetrate their network
Around two-thirds of executives and IT professionals responding to a new survey believe that hackers would be able to penetrate their networks.
The study from security and application delivery company Radware focused on global companies and reveals that at least 89 percent of respondents have experienced attacks against web applications or web servers of the past year.
One in four cyberattacks targets ordinary users
While the majority of cyberattacks are aimed at businesses and other organizations, an increasing number are targeting ordinary users, according to the latest report from Positive Technologies.
The most attractive targets were personal data (30 percent) and credentials (22 percent), especially for online banking. To steal this data, attackers compromised a wide range of websites, including web stores, ticket vendors, and hotel booking services.
Behavioral analysis used to predict cybersecurity threats
Internet of Things security specialist ZitoVault has patented a new means of predicting upcoming cybersecurity events.
While most existing approaches only address the real-time detection of threats or anomalies based on a limited set of pre-established data points, ZitoVault's latest patent uses a new approach.
Financial services breaches triple since 2016
2018 has seen nearly three times as many breaches at financial services organizations as there were in 2016, according to a new report.
The study by cloud access security broker Bitglass finds there have been 103 breaches in this year’s report compared to just 37 two years ago.
Bigger isn't better when it comes to password security
A new study by LogMeIn, the company behind the LastPass password manager shows that size matters in password security, but not in the way that you might think.
Looking at anonymized data from over 43,000 companies, the study produced a security score and a password strength score for each. Businesses with fewer than 25 employees had the highest average security score of 50, but the average drops as company size increases.
ESET launches cloud-based security management solution for SMBs
Smaller businesses are not immune to cyber security threats, but they often don't have the budgets or staffing resources to deal with them.
To address this, endpoint security specialist ESET is launching a new cloud-based remote security management solution specifically designed for the IT security challenges faced by SMBs.
Security is developers' top concern for open source components
Developers rate security as their top concern when dealing with open source components, above integration and functionality, according to a new study.
The report from open source security and license compliance management company WhiteSource reveals that an average developer invests 15 hours a month dealing with open source security vulnerabilities, but only a small fraction of that time (25 percent) is devoted to actual remediation.
Schools should offer formal information security classes
Digital threats are evolving fast and that leads to increasing demand for security professionals to tackle them. A new report from AI-driven security company Lastline looks at how existing practitioners feel about education in their field.
Among the findings are that 85.5 percent of infosec professionals believe that US schools should offer more formal classes in the field.
The changing network security landscape
The adoption of the cloud and as-a-service delivery models means that the company network, which was once a closed environment, has now expanded into a range of other areas.
Alongside this expansion comes a new range of risks and a new study from cloud-delivered security specialist ProtectWise in conjunction with Osterman Research looks at the latest network security challenges and how they are being met.
Bandwidth Alliance gets together to take on AWS data transfer fees
The fear of being locked in to a particular service is one of the key worries that companies have when moving to the cloud. This is partly because suppliers, including AWS, charge data transfer fees or bandwidth when you want to move to another host.
Now content delivery network Cloudflare is forming the Bandwidth Alliance, a coalition of cloud and infrastructure companies (including IBM, Digital Ocean, Backblaze, Dreamhost, and Packet) that are committed to waiving bandwidth fees for customers when interconnecting directly to Cloudflare's network.
Cryptomining malware surges in second quarter
Cryptocurrency mining malware has seen an increase of 86 percent in the second quarter of 2018, according to a new report from McAfee Labs.
After gaining ground the fourth quarter of 2017 to around 400,000 samples, new cryptomining malware samples grew a stunning 629 percent to more than 2.9 million in Q1 of 2018. This trend has continued in with more than 2.5 million new samples detected.
Symantec brings improved data loss prevention and rights management to Office 365
Protecting data in the cloud and ensuring compliance with rules and regulations is a complex task. The adoption off SaaS applications like Office 365 makes it even more so.
Symantec is launching an enhanced version of its Data Loss Prevention technology to protect data in Office 365 and allow users to safely share it internally as well as with partners and contractors.
Ian's Bio
Ian spent almost 20 years working with computers before he discovered that writing about them was easier than fixing them. Since then he's written for a number of computer magazines and is a former editor of PC Utilities. Follow him on Mastodon
© 1998-2026 BetaNews, Inc. All Rights Reserved. Privacy Policy - Cookie Policy.