Security

New Research Shows Cybersecurity Battleground Shifting to Linux and Web Servers

27 June 2017 – WatchGuard®’s  latest quarterly Internet Security Report reveals that despite an overall drop in malware detection, Linux malware made up more than 36 percent of the top threats identified in Q1 2017. The increased presence of Linux/Exploit, Linux/Downloader and Linux/Flooder attacks highlights the need to protect Linux-based IoT devices and Linux servers from the internet with layered defences.

Other key findings from the Q1 2017 report include:

InfinityQS Upholds ISO 9001:2015 & ISO 27001:2013 Certifications

InfinityQS® International, Inc. (InfinityQS), the global authority on data-driven manufacturing quality, announced today that it has successfully sustained its certification to the International Organisation for Standardization (ISO) 9001:2015 and ISO 27001:2013 standards. In doing so, the company reaffirms its ability to achieve, maintain, and continuously improve an integrated process approach to deliver quality management systems (QMS) and meet information security standards that align with industry best practices and global standards.

WannaCry Exposed Gaping Risk Window between Identifying Vulnerability Risk and Fixing It

Maidenhead, U.K. – June 20, 2017 – When WannaCry hit, the world learned that for two months a patch had been available that would have prevented the problem. But its victims were those that hadn’t yet deployed this patch. As many companies discovered the hard way, there is an unacceptable ‘risk window’ that persists between the discovery of a software vulnerability and when the patch is successfully installed. In 2016 17,147 vulnerabilities were recorded in 2,136 products from 246 vendors. 81 percent of those vulnerabilities had patches available on the same day as disclosure. But, on average, it takes companies 186 days to completely install those patches[1].

Biggest security threats: Failures in planning, implementation and monitoring

Free presentations on Nuvias (incorporating Wick Hill) stand from leading security industry experts - including State-of-the art Protection, Ransomware, DDoS, and Phishing

June 6, 2017 - Probably the biggest security threat to companies today, claims Ian Kilpatrick, EVP Cyber Security for Nuvias Group (incorporating Wick Hill) is the failure to strategically plan, implement and monitor a cyber security strategy. This is closely followed by the failure of companies to adequately train and monitor their staff in how to keep both themselves, and then by implication their business, cyber safe. Both of these security issues represent major tactical and strategic cyber risks.

Internet of Things Security - are you failing to prepare?

By Ian Kilpatrick, Executive Vice-President Cyber Security at Nuvias Group

For several years, the IT industry has enthusiastically extolled the virtues of the Internet of Things (IoT), eager to enlighten us to the difference that living in a connected world will make to all our lives.

Now the IoT is here - in our homes and in the workplace. Its uses range widely, from domestic time-savers like switching on the heating, to surveillance systems, to “intelligent” light bulbs, to the smart office dream. 

WannaCry and the update issue

It was basically only a question of time. Sooner or later, it was clear that cyber-criminals would get their hands on a security flaw that would help them start the scale of attack we saw recently. Nevertheless, its effects still surprised everyone – there were reports practically every minute about newly-infected hospitals, car makers and transport companies. It made us see how weak our entire digital infrastructure really is. Despite quick-fix security measures, including a patch for obsolete operating systems, companies are not all protected against infection – far from it. That’s because updates and patches are not even an option for many of them. Effective protection needs to start at a completely different level. 

Quoting IT: Government Should Report Not Exploit Software Vulnerabilities

"The governments of the world should treat this attack as a wake-up call. They need to take a different approach and adhere in cyberspace to the same rules applied to weapons in the physical world. We need governments to consider the damage to civilians that comes from hoarding these vulnerabilities and the use of these exploits."

- Brad Smith, Microsoft President and Chief Legal Officer, The need for urgent collective action to keep people safe online: Lessons from last week’s cyberattack, The Official Microsoft Blog, May 14, 2017.

Flexera Issues New Warning about Future Ransomware Attacks Like WannaCry

Maidenhead, U.K. – May 15, 2017 – As the fallout from the #WannaCry ransomware attack continues to reverberate around the world, a new report by software vulnerability and patch management expert, Flexera, has an ominous warning for companies and individuals: the threat is growing – and people are getting lazier about protecting themselves.

Flexera Embeds Open Source Security Scanning into Software Development Build Process

Maidenhead, UK – May 10, 2017 – Flexera, the company that’s reimagining the way software is bought, sold, managed and secured, announced today it’s reimagining software supply chain safety. Flexera’s the first-in-industry to embed open source security into the heart of the software development build process with automatic analysis detection. It will help keep the software supply chain secure by enabling 100,000 developers around the world to sell clean products, free of open source vulnerabilities and license compliance risk.

Government Joins The Finance Sector At The Top Of The Cyber Attack List

London, UK – 8 May 2017 – New research reveals that cyberattacks on the government sector doubled in 2016, hiking to 14% from 7% of all cyber security attacks in 2015. Attacks on the finance sector also rose dramatically from just 3% in 2015 to 14% of all attacks in 2016. 

The manufacturing sector came in at third place at 13%, while the retail sector, which topped the list of all cybersecurity attacks on all sectors in 2015 moved down into fourth place (11%).