While the world still heals and reals from the torrent of an attack that is WannaCryptor (WannaCry), security experts find themselves bracing for potential new versions and copycats of the unique malware. As we covered in Wormable ransomware strain uses freshly leaked exploit to encrypt data when in a matter of less than 24 hours the WannaCry malware infected more than 230,000 systems in 150 countries. The attack impacted businesses large and small, across many vertical industries, and both the public and private sectors.
To keep up with more rapidly changing business models, the speed of enterprise digital transformation and automation today, security leadership needs to, more than ever, ensure there is a tight coupling between security teams and business leadership.
Intel is expected to soon issue patches that purport to fix an escalation of privilege vulnerability in the Intel Active Management Technology (AMT), Intel Standard Manageability (ISM), as well as the Intel Small Business Technology firmware versions 6.x, 7.x, 8.x 9.x, 10.x, 11.0, 11.5, and 11.6 that can allow a remote attacker to gain control of the admin manageability features in these chips.
While the rate of growth of ransomware may have cooled a bit, such attacks are still growing at a hot pace. According to the annual Verizon Data Breach Investigations Report (DBIR), released late last week, ransomware was involved in 71 percent of all malware related cases tracked.
We’ve been writing a lot about the software-defined data center and hyperconverged infrastructure and how the benefits of increased agility, greater system utilization, and lower total cost of ownership are well known.
As Bogdan Botezatu wrote in his post Here Come Software-Defined Data Centers - What are the Security Implications? — the software defined data center is here to stay and is expected to grow from $25.61 billion in 2016 to $83.21 billion by 2021, at nearly a growth rate of about 30% annually.
We’ve been starting to write more about the software-defined data center here at Business Insights because it’s become clear this is where enterprise networks are quickly moving. While software-defined networking gets all of the headlines — Network Functions Virtualization (NFV) is a big part of the software-defined data center.
A vital, actually a most fundamental, aspect of enterprise security is helping organizations to keep confidential information confidential. This is why security at the data and document level is something to which much more attention should be paid by enterprises.
The hits to the healthcare industry keep on coming. While the number of overall data breaches tracked by the Identity Theft Resource Center (ITRC) hit a record in 2016, with 1,093, which is a 40 percent increase over the previous record in 2015 of 780 breaches – It’s healthcare that continues to grow the most.
When it comes to the business of information security, and the big technology trends that will likely shape the year ahead, the RSA Conference is perhaps the most important event of the year. And with a record attendance of more than 43,000, this year was no exception.
When it comes to shadow IT, government can face just as much of a challenge as the typical enterprise. Last week, the Office of Inspector General (OIG) for the General Services Administration (GSA) published a report which found that GSA’s Office of 18F had “routinely disregarded and circumvented fundamental security policies and guidelines.”
Last year was a record year when it came to attendance for the RSA Conference. More than 40,000 attendees arrived at the Moscone Center to learn about and discuss the latest in cybersecurity trends ranging from cybersecurity big data analytics, application security, to forensics and incident response and everything in-between.
