Security

OutSystems Raises the Bar for Low-Code Platform Security with Multiple ISO and SOC Certifications

London – 19th September, 2017 – OutSystems today announced that it has bolstered its security credentials with three of the most recognised security certifications - ISO 27001, ISO 22301, and SOC 2. In addition, OutSystems has become a member of the Cloud Security Alliance as part of its commitment to security best practices in cloud computing.

“Software security is one of the most critical issues that IT leaders face, and it is often one of the most challenging,” said José Casinha, chief information security officer at OutSystems. “These new certifications help OutSystems provide an end-to-end security strategy for organisations building applications with our low-code platform.” 

76% of Subscribers are Interested in Single Sign-On Services from their Mobile Operator

When it comes to single sign-on and storing their personal data, subscribers trust mobile operators ahead of Facebook and Google

REDWOOD CITY, CA – September 12, 2017 – Independent research conducted in the US and UK on behalf of Openwave Mobility, a software innovator enabling operators to manage and monetize mobile traffic, has found that the majority of mobile subscribers (76%) welcome help from mobile operators who can offer them sign-ins for apps and services.

Ransomware - Organizations Must Disrupt Cyber Attacks Before They Become A Business Disrupter

London - 12 September 2017 – Dimension Data, the global ICT services and solutions provider, and Cisco, have joined forces and published a white paper to help organizations stay ahead of ransomware threats. Called Ransomware: The Pervasive Business Disruptor the paper looks at ransomware trends and impacts, and how to respond before a threat becomes a business disruptor.

According to a Cisco 2017 Mid-Year Cyber Security Report, ransomware is one of the main threats to digital business. Globally, around 49% of businesses experienced at least one cyber ransom attack in 2016, and of those, 39% were ransomware attacks. In the US alone, the number of attacks rose 300% from 2015 to 2016[1].

The EU GDPR: What Does it Mean for Businesses?

On May 25, 2018, the General Data Protection Regulation (GDPR) will come into force, and will be a game-changer in how organizations store, secure and manage personal data.

GDPR will affect the whole of the EU Zone, which currently spans 28 member countries and half a billion citizens. Its goal is to unify data protection across the European Union, but because GDPR applies to individuals within the EU or the European Economic Area (EEA), companies outside these zones will still have to meet the standards if they want to continue using data from customers in the EU.

Report: Growing Digital Security Management Gap

LONDON – Aug. 23, 2017 – RiskIQ, the leader in digital threat management, today announced that it has published its 2017 State of Enterprise Digital Defence Report, available for download. Independent research for the report, which offers key insights into the current landscape of digital threats and the maturity of defences to protect an organization’s digital presence, was conducted by IDG Connect. The findings quantify the security management gap and business impact of external web, social, and mobile threats.

WatchGuard’s New Fireboxes Chew Through Encrypted Traffic 94 Percent Faster Than Competitors

15 August 2017 – WatchGuard® Technologies has announced hardware upgrades to its Firebox® M Series to handle the rapid proliferation of encrypted web traffic and offer more flexibility. With the new M470, M570 and M670 appliances, users can add additional network modules to increase the number of copper or fibre ports available to support the growing use of 10G fibre in midsize enterprise data centres. The new Firebox M Series appliances also enable users to inspect encrypted traffic with industry-leading performance with all security services enabled. According to Miercom, an independent testing lab, the updated Firebox M370 performs full HTTPS inspection 94% faster than competing solutions.

In an Evil Internet Minute, £656,393 is Lost to Cybercrime, Reveals RiskIQ

London, UK, 19 July, 2017 – With cybercriminals costing the global economy £345 billion last year alone[1], Digital threat management leader RiskIQ has examined the growing volume of malicious activity on the Internet to reveal the inaugural ‘Evil Internet Minute’. In a single evil internet minute, close to £656,393 is lost to cybercrime and 1,080 people fall victim. Despite businesses’ best efforts to guard against external cyber threats, spending up to £109,942[2] in 60 seconds, bad actors continue to proliferate online.

RiskIQ Researchers Track Ecommerce Threat, Discover Network of Threat Actors Reshipping Items Purchased with Stolen Cards

In October of last year, the RiskIQ Threat Research team released "Compromised E-commerce Sites Lead to 'Magecart," a report profiling the e-commerce threat they discovered and dubbed 'Magecart,' which injects JavaScript code into e-commerce sites running outdated and unpatched versions of shopping cart software from Magento, Powerfront, and OpenCart. By logging consumer keystrokes, these attackers capture large quantities of payment card information. 

Now, by following a new strain of Magecart, the team has discovered a direct link to the outcome of the stolen credit cards for threat actors, offering rare insight into the physical world operations of actors tied to digital threats. 

New report from CREST highlights the need to improve cyber security in Industrial Control Systems

29 June 2017: There is a pressing need to improve cyber security in Industrial Control System (ICS) environments to avoid future breaches that could impact critical national infrastructure concludes CREST, the not-for-profit accreditation body representing the technical information security industry, in its latest position paper, ‘Industrial Control Systems: Technical Security Assurance’. The report highlights a number of challenges and suggests that more technical security testing has a significant role to play in ensuring higher levels of security assurance are met.