IT decision makers look to AI to prioritize operational alerts
Faced with an abundance of alerts related to system status IT decision makers are looking to AIOps solutions -- combining big data and machine learning -- to differentiate between legitimate signals and inconsequential noise, according to a new report.
The survey from hybrid IT management platform OpsRamp finds 68 percent have experimented with AIOps tools, and nearly three-quarters (73 percent) are taking advantage of AIOps capabilities to gain more meaningful insights into system alerts.
Three-quarters of corporate network breaches are via web applications
According to a new report from Kaspersky Lab, 73 percent of successful perimeter breaches on corporate networks in 2017 were achieved using vulnerable web applications.
In addition to web applications, another common vector for penetrating the network perimeter was attacks on publicly available management interfaces with weak or default credentials.
Telecoms industry sees a higher percentage of advanced attacks
Threat intelligence specialist Lastline produces regular reports on the global cyberthreat landscape.
Its latest study looks at the telecoms industry and how the threats it faces differ from those in the wider world. Among the findings are that the industry sees a higher percentage of attacks (one in 10) exhibiting advanced threat capabilities, which is greater than the global standard of one in 12.
Money, power and ego, the factors that drive people to cybercrime
We reported last week on a report highlighting how many security professionals are turning to a life of cybercrime.
In a follow up research piece, Wendy Zamora at Malwarebytes, has been looking at the psychology, motivations and other underlying factors that drive people to take part in cybercrime.
Trojans increase as cryptomining declines
The second quarter of 2018 has seen a significant increase in Trojan activity, seeing them become the leading type of malware, according to the latest report from Comodo Cybersecurity.
At the same time there has been a slight decrease in cryptomining software. However, this has gone hand-in-hand with a sharp increase in their harmful capabilities, including better concealment and stronger persistence.
Organizations still struggle with basic firewall management
Firewalls remain an important element of security architecture, but many organizations are still struggling with the basics, according to a new study.
Security policy management company FireMon has released its 2018 State of the Firewall report which reveals that 94 percent of respondents believe firewalls are as or more critical than ever.
SnapLogic integrates with GitHub to speed up DevOps capabilities
Self-service application specialist SnapLogic is announcing new integration with GitHub to automate critical elements of continuous integration and continuous delivery (CI/CD).
The integration enables system administrators to host different versions of their work, including tasks, pipelines, and projects from SnapLogic, with visibility into changes with each update.
Finance remains top target for phishing attacks as scammers exploit GDPR
New figures from Kaspersky Lab show that more than a third (35.7 percent) of phishing attempts in the second quarter of 2018 attempts were related to financial services via fraudulent banking or payment pages.
The IT sector was second hardest hit, with 13.83 percent of attacks targeting technology companies, a 12.28 percent increase compared to Q1.
New application helps developers avoid vulnerable GitHub code
We reported last week on a new tool to help spot vulnerabilities present in active open source systems.
To prevent problems from being introduced into new systems, open source governance specialist Sonatype is launching a tool to enable developers to identify and avoid using open source components that have known vulnerabilities.
How you can be hacked via your fax machine
Unless you are in regular touch with the 1980s it's probably a while since you gave much thought to using fax machines.
Even then you might think your biggest worry would be a paper jam. But new research from Check Point released at Def Con in Las Vegas reveals organizations and individuals could be hacked via their fax machines, using newly discovered vulnerabilities in the communication protocols used in tens of millions of fax devices globally.
Over 10,000 vulnerabilities disclosed this year so far
2018 looks like it's on track to be another record year for vulnerabilities, with over 10,000 disclosed in the half year to June.
The newly released 2018 mid-year VulnDB QuickView report from Risk Based Security shows that 16.6 percent of the reported vulnerabilities received CVSSv2 (Common Vulnerability Scoring System) scores of between 9.0 and 10.0, which is a drop from previous years. However, the severity of the vulnerabilities disclosed still remains significant.
Hijack attack aims to grab bank details via routers
Researchers at DDoS protection specialist Radware have uncovered an attack aimed at Brazilian bank customers that seeks to steal credentials via a compromised router.
It employs malware that targets DLink DSL modem routers using exploits dating back to 2015. A malicious agent attempts to modify the DNS server settings in the routers of Brazilian residents, redirecting all their DNS requests through a malicious server.
The most malware infected cities in the US
A new report from EnigmaSoft -- makers of the SpyHunter anti-malware product -- reveals the US cities with the highest rates of malware infection.
Systems in Atlanta, Orlando, and Denver are most likely to be infected, with Louisville, Wichita, and Anchorage having the lowest infection rates.
Free tool checks for critical open source vulnerabilities
Every month details emerge of dozens of new security vulnerabilities, and open source software is not immune from these.
In order to help companies stay up to date and ensure vulnerabilities are patched quickly, open source security specialist WhiteSource is launching a free tool that provides companies with immediate, real-time alerts on the 50 most critical vulnerabilities published in the open source community.
Organizations struggle with 'cyber hygiene’ basics
Almost two-thirds of organizations are failing to use established benchmarks to set security baselines and are struggling to maintain visibility into their networks, according to a new report.
The study, carried out for security and compliance specialist Tripwire by Dimensional Research, looks at how organizations are implementing security controls that the Center for Internet Security (CIS) refers to as 'cyber hygiene.'
Ian's Bio
Ian spent almost 20 years working with computers before he discovered that writing about them was easier than fixing them. Since then he's written for a number of computer magazines and is a former editor of PC Utilities. Follow him on Mastodon
© 1998-2026 BetaNews, Inc. All Rights Reserved. Privacy Policy - Cookie Policy.