This edition of the ISMG Security Report features an analysis of the Microsoft Exchange on-premises server hacks – from who might have leaked the vulnerability exploits to how ransomware gangs are taking advantage of the flaws. Also featured: Tackling the cybercrime business model; assessing "zero trust."
Microsoft Teams has enjoyed explosive growth over the past year, and that reinforces some key points about Office 365 and secure backup. Karinne Bessette of Veeam Software and Archana Venkatraman of IDC share new insights and strategies.
In an eBook with ISMG, Bessette and Venkatraman discuss:
We face a new digital risk reality. The pandemic accelerated digital transformation projects for organizations around
the world and also led cybercriminals to pivot their attacks. Meanwhile, IT and security teams have raced to prepare
employees for new ways of secure working under intense time and budget...
U.S. public schools faced a record number of cyber incidents in 2020, with over 400 attacks reported. This led to a spike in school cancellations, as IT staff members struggled to get systems back online while dealing with the COVID-19 pandemic, reports the K-12 Cybersecurity Resource Center.
The latest edition of the ISMG Security Report features cybercrime deterrence lessons learned from the disruption of the Emotet botnet operation. Also featured: An update on attacks tied to Microsoft Exchange flaw exploits; a discussion of the need to update business continuity plans.
Modern application design and the continued adoption of DevSecOps are expanding the
scope of the AST market. Security and risk management leaders will need to meet tighter
deadlines and test more complex applications by seamlessly integrating and automating AST
in the software delivery life cycle.
Application security testing is common, but technology changes such as containers, APIs and open source challenge existing toolsets. Security and risk management leaders must evaluate current capabilities and product roadmaps to ensure tools will contribute value in an evolving business environment.
Email is the most attacked vector. And yet many enterprises still have a broad gap between the email gateway and the security operations function. Jules Martin and Joseph Tibbetts of Mimecast discuss how sharing threats between security tools will improve the efficacy of all tools in the ecosystem.
Traditionally, software development training falls short on security. And as enterprises embrace the “shift left” movement, that gap puts them at risk. Veracode’s Dave Ferguson discusses the gap and how Veracode’s new Security Labs was developed to fill it.
It’s time to build security in from the start of the SDLC to better manage,
measure, and address risk, empower development teams, and
guarantee secure software delivery at the speed of DevOps.
While financial service organizations are under constant attack from adversaries, there
are specific steps they can...
Public sector organisations worldwide face a
daunting set of challenges as society adjusts to
the current COVID-19 environment. Whether it is
local government, healthcare, law enforcement,
or blue light responders, organisations across all
disciplines that previously depended on in-person
processes have been...
With millions of sports fans to cater to, DAZN
has secure applications high on its agenda. Security comes from the top (their
c-suite) and rolls down to their software developers who understand the value of
a secure application. Application Security Testing (AST) solutions are imperative to
DAZN, so they deliver...
Just days after Microsoft disclosed four serious flaws in Microsoft Exchange email servers, attackers are going on a wide hunt for vulnerable machines, some security experts say. The flaws could be exploited for creating backdoors for email accounts or installing ransomware and cryptominers.
Monitoring the performance and availability of applications has never been more important.
Today’s DevOps teams are responsible for ensuring high-quality, always-on digital experiences while reliably supporting increasingly frequent - often daily - code pushes.
No one understands this better than Splunk, which...
This edition of the ISMG Security Report features an analysis of key takeaways from the breaches tied to flaws in the Accellion File Transfer appliance. Also featured: Equifax CISO Jamil Farshchi on transforming supply chain security, plus an analysis of how "work from anywhere" is affecting cybersecurity.