Eseye claimed that just 1% of businesses are able to achieve ubiquitous connectivity for IoT in the latest State of IoT Adoption report. Bugcrowd reported significant customer growth for its crowdsourced cybersecurity platform in the last year.
Check Point Software Technologies Ltd announced the immediate availability of Quantum SASE, integrating technologies from newly acquired Perimeter 81. This integrated offering addresses organizations’ needs for a unified user experience.
Check Point claims that it is delivering simplified Secure Access Service Edge (SASE) management and a fast, secure browsing experience. It also says that it has enhanced the company’s Infinity architecture. That is due to a unified SASE solution offering 2x faster internet security, full mesh Zero Trust Access, and Secured SD-WAN with industry-leading threat prevention.
Amit Bareket, VP of Security Service Edge at Check Point Software Technologies, commented, “As the lines between digital and physical realms become increasingly blurred, businesses need a comprehensive, consolidated, and collaborative security strategy.
“With Quantum SASE, Check Point stands as the pioneer security partner, offering a Hybrid SASE solution comprised of three pivotal components: on-device network protection, cloud network protection, and a unified security gateway with built-in SD-WAN and IoT security. As organizations navigate the intricacies of hybrid work and cloud integration, Quantum SASE is the very future of secured networking.”
Quantum SASE key features include the following:
- Enhanced Internet Access
- Zero Trust Access
- Ease of Deployment
- Optimized SD-WAN Performance
- Unified Management
Corero Network Security announced the latest version of its SmartWall ONE DDoS protection solution. It now supports a modular architecture integrating with industry-leading routers, increasing protection against DNS-based attacks and adding 100G software appliances.
The key benefits from this release include:
- Market-leading edge router integrations
- Advanced protection against increasing DNS infrastructure attacks and TCP exploits
- Unmatched throughput for SmartWall ONE 100G software appliances
Ashley Stephenson, Corero’s Chief Technology Officer, said, “We continually enhance our platform to stay ahead of rapidly evolving cyber threats. This major update empowers our customers to take control of their DDoS protection like never before.”
Celebrus has launched Celebrus Digital Analytics (CDA). A new fully-enclosed solution for web analytics that builds on Celebrus as a true first-party, live-time platform. CDA is hosted in a single-tenant private cloud.
It provides organizations with access to a single source of truth for digital data without data, connectivity or activation gaps; no need to rely on third-party platforms that use a shared environment and funnel data through outside environments, posing huge regulatory risks.
Notable key differentiators of Celebrus Digital Analytics include:
- All of the reporting that brands have come to know, love, and expect in true live-time so value can be generated on Day 1
- No tagging is ever required for web, mobile or app – every digital interaction is automatically captured, so you’ll never hear “we didn’t tag for that” again
- First-party identity graph for accurate and complete identity resolution that will provide invaluable insight into your digital traffic
Bill Bruno, CEO, Celebrus, said, “I’ve spent my entire career in data. Reporting is a commodity, but the traditional third-party methods for reporting have continued to underdeliver in today’s marketplace. Gaps in data, identity, and connectivity cause pain for marketers, data analysts, and agencies as they all work tirelessly to understand what investments are working and which aren’t.
“Celebrus puts data reporting back in the hands of professionals that need it most, without any of the hassles or restrictions. CDA is one more way Celebrus is improving the relationships between brands and consumers via better data.”
Fortra has launched its first annual State of Cybersecurity survey. Fortra’s State of Cybersecurity survey is open until November 3. The results will be published in a report and discussed in a webinar in January 2024.
Mike Devine, Chief Marketing Officer, Fortra, commented, “The survey has been designed so that we can better understand the operational challenges our global customers face. As our customers’ cybersecurity ally, we want to provide meaningful data that will also allow them to benchmark their responses against industry peers. The results – planned for publication in January 2024 – will provide the market with valuable insight to the cybersecurity landscape moving into 2024.”
Fortra also revealed that its Digital Guardian product line now supports over 5.5 million users from 600 customers worldwide. Fortra’s Digital Guardian offering now includes secure collaboration. To help organizations take a zero-trust approach to file security, restricting actions to only authorized users and locking down documents to prevent data leaks. The product was acquired two years ago, and Fortra has continued to invest in it.
Andrew Tewksbury, Managing Director, Data Protection, Fortra, commented, “When 74% of breaches involve humans, minimizing the risk of accidental data sharing is a top priority for enterprises. Adding file-level security from secure collaboration gives customers full control of data visibility and movement, providing an instant undo button, even after data leaves the organization.
“Not only are our customers having to navigate the challenging regulatory landscape, but they also have to be prepared for new technologies such as generative AI tools and the implications for data security. Our enterprise-grade software offers them the control and visibility they need in today’s complex and ever-changing environment.”
LogRhythm has partnered with Infinigate Group, the cybersecurity powerhouse specialising in cybersecurity, secure networks, and secure cloud. Together they will transform cybersecurity accessibility in Europe.
Infinigate will provide LogRhythm’s entire product portfolio to its reseller partners. This will meet the evolving and unique security needs of enterprises in the United Kingdom & Ireland (UK&I), effective immediately, and Germany, Austria, and Switzerland (DACH), effective as 1 December 2023.
Kev Eley, VP of Sales UK & Europe at LogRhythm, said, “The increasing pace of modern digital transformation is driving the need for innovation and collaboration in the cybersecurity industry. By partnering with Infinigate, we are expanding the reach of our solutions through its extensive reseller base to build greater cyber resilience in UK&I and DACH.
“Our portfolio of solutions is built to support organizations of all sizes, no matter what stage they’re at in their security journey. Infinigate is a world-class cybersecurity distributor, and we look forward to bringing new value to resellers across Europe.”
Microsoft announced that Microsoft Defender for Endpoint customers will now be able to automatically disrupt human-operated attacks like ransomware early in the kill chain. Without needing to deploy any other capabilities.
Automatic attack disruption uses signals across the Microsoft 365 Defender workloads (identities, endpoints, email, and software as a service [SaaS] apps) to disrupt advanced attacks with high confidence. Suppose the beginning of a human-operated attack is detected on a single device. In that case, attack disruption will simultaneously stop the campaign on that device and inoculate all other devices in the organization. The adversary has nowhere to go.
Microsoft also announced that Microsoft Defender Experts for XDR is now generally available. This managed extended detection and response (MXDR) service helps customers alleviate some of their most pressing pain points. Including alert fatigue, scarce cybersecurity resources, and a limited ability to look end-to-end—beyond the endpoints—to visualize and correlate threat data across their entire digital environment.
The announcement also included details of the Microsoft Security Expert services it has launched or improved in the last sixteen months. Including Microsoft Defender Experts for Hunting, Microsoft Incident Response and Microsoft Security Enterprise Services.
The research revealed:
- Globally, 48% of SMBs have experienced a cybersecurity incident in the past year. While 26% of US SMBs have experienced more than one type of cyber breach
- 75% of US SMBs say cyber threats are a major concern. And 59% expect to increase their investment in cybersecurity in the coming year
- Globally, 70% of SMBs say cyber threats are a major concern. However, 72% feel confident about managing cyber security, and 76% regularly review it
- Top cyber breaches impacting US SMBs include Distributed Denial-of-Service (DDoS) attacks (21%), data loss (20%), ransomware attacks (16%) and credential theft (15%)
- The top 5 types of cyber breaches impacting Canadian SMBs include data loss (20%), Distributed Denial-of-Service (DDoS) attacks (19%), stolen laptops (18%), ransomware attacks (16%) and credential theft (14%)
- Keeping on top of new threats is the biggest challenge for 51% of the respondents. Followed by 45%, ensuring employees know what’s expected of them, educating staff about cyber security (44%), and cost (43%)
Ben Aung, EVP Chief Risk Officer, Sage, said, “Navigating the fast-paced world of cybersecurity can be overwhelming for SMBs, who often lack dedicated IT expertise. While our research highlights their genuine concern for cybersecurity, they seek guidance to comprehend and mitigate risks beyond the misconception of merely relying on firewalls and tools.
“At Sage, our commitment is to make cybersecurity accessible, fostering confidence through knowledge, resources, and a human-centric approach, empowering SMBs to strengthen their cybersecurity culture even with limited budgets.”
BG&E has selected Secureworks Taegis ManagedXDR to be its first line of cyber defence. Headquartered in Sydney, the international engineering company has deployed Managed Detection and Response (MDR) from Secureworks, a leading provider of cybersecurity. This will augment its in-house cybersecurity resources. It will also benefit from superior detection and unmatched response as it elevates its cybersecurity posture.
Daniel McGarry, Head of ICT, BG&E, commented, “Trust is at the centre of everything we do. As a global company working across multiple sectors, including critical infrastructure, it’s imperative that we prioritise protecting and defending our clients’, partners’ and employees’ data and IP.
“Like a lot of companies, it simply wasn’t feasible for us to build our own Security Operations Centre (SOC). We needed to partner with a company that could understand our cyber risk and provide a solution to lower that risk, whilst also optimising our security and IT investments, working alongside our in-house team.
“ Secureworks Taegis ManagedXDR has enabled us to scale and mature our cybersecurity operations in a way that previously we wouldn’t have thought possible.
“We were able to get the Secureworks solution up and running in under two weeks. It is now fully integrated into the BG&E incident response process, with our second line of defence utilising our own internal resources. The Taegis ManagedXDR dashboard gives us the capability we need in terms of telemetry and understanding exactly what is going on in our own environment.”
Sophos has appointed Wagner Tadeu as Vice President of Sales for Latin America. Pat Sheridan, Senior Vice President of Americas sales at Sophos, said, “Sophos has never been more committed to the channel and working with our partners to increase growth in the region, and Wagner will play a vital role in further building relationships with both partners and our customers to keep the momentum we have across Latin America strong.
“Wagner has an exceptional track record scaling high-performing sales teams, which we have in Latin America. We’re excited to have Wagner leading our expansion, especially at a time when cybersecurity to defeat ransomware and other threats is critical for every organization.”
Tadeu said, “I am incredibly excited to join Sophos at such a pivotal time. Latin America is a rapidly growing market, and I look forward to working closely with partners and our customers and leading a world-class sales force.
“Sophos is renowned for its industry-best security offerings, and what really drew me to Sophos – and differentiates the leader from others – is the team’s relentless commitment to protecting organizations of all sizes and across all industries from active adversaries amidst today’s constantly changing threat landscape.”
Trustwave released the “2023 Financial Services Sector Threat Landscape: Trustwave Threat Intelligence Briefing and Mitigation Strategies” report. It explores the specific threats and risks the financial services industry faces. Along with practical insights and mitigations to strengthen defences.
Key findings include:
- The Clop threat group accounted for 39% of ransomware incidents targeting the financial services sector
- A majority of the targeted financial services companies reporting a breach are from the US (51%). With India (9%) and Russia/Mexico (7%) coming in a distant second and third, respectively
- HTML attachments make up 78% of the file types being used for email-borne malware attachments. 33% of these HTML files employ obfuscation as a means of defence evasion
Trustwave CISO Kory Daniels said, “In a highly competitive B2B and B2C financial services industry, cybersecurity’s role earning and sustaining consumer trust is paramount as a competitive differentiator. For financial institutions, it isn’t just about protecting data, it’s about safeguarding the financial well-being and peace of mind of customers, partners, and investors.
“Our latest threat briefing is a valuable resource for business leaders and cyber defenders within the financial services sector, providing a comprehensive view of the threats observed by our SpiderLabs team, along with specific mitigation strategies to help organizations protect extremely sensitive data and assets.”
The report reveals details of the five challenges financial services firms face: Sensitive data, Regulation, Trust, partnership complexity and interconnectedness. It also reveals details about the most common threat actors and threat tactics:
- Alphv / BlackCat
- Black Basta
- Email-Borne Malicious Attachments (Downloaders, HTML Smuggling)
- Phishing (IPFS, Google/Cloudflare Services, RPMSG)
- BEC (Payroll Diversion, Contact Request)
- Vulnerability Exploitation
- Credential Access (Brute forcing, Abuse of Valid Accounts)
- Malware (Infostealers, Ransomware)