Skip to content

Winning the War Against Hackers in the Face Of Device Proliferation

Expanding Network Edges & Device Proliferation

With the advent of COVID-19, an enormous push to hybrid work changed the threat landscape. Many more activities have become remote, and therefore more reliant on and demanding of secure remote network connections. As more organizations expand their hybrid workforce models, the network edge continues to push out and the number of potential entry points for attackers increases. Device proliferation – specifically BYOD – is exacerbating this trend. As of 2021, 67% of employees use personal devices at work, and 59% of organizations have adopted BYOD.  IoT device proliferation is also broadening the threat surface, adding to the list of endpoints not only in the office, but also in the operating room, the factory floor and the shipping warehouse. There may be some 21.5 billion IoT devices by 2025 – a number that keeps IT security professionals up at night. From security cameras to connected multifunction copiers, IoT devices open the real potential for breaches. 

The Role of Network Access Control

With so many diverse, dispersed devices requesting network access, security teams must be more diligent about setting and enforcing access control policies. To maintain vigilance, security teams need to focus their efforts on network access control (NAC). In a perfect world, this means deploying a NAC that offers cloud RADIUS services, a variety of authentication methods, as well as 24/7 endpoint risk assessment and remediation across all prominent access layers – wired, wireless and VPN. Simple, yet powerful – a NAC that’s easy to use while providing the extensive security coverage needed to confront these challenges head-on is required.

About Version 2 Digital

Version 2 Digital is one of the most dynamic IT companies in Asia. The company distributes a wide range of IT products across various areas including cyber security, cloud, data protection, end points, infrastructures, system monitoring, storage, networking, business productivity and communication products.

Through an extensive network of channels, point of sales, resellers, and partnership companies, Version 2 offers quality products and services which are highly acclaimed in the market. Its customers cover a wide spectrum which include Global 1000 enterprises, regional listed companies, different vertical industries, public utilities, Government, a vast number of successful SMEs, and consumers in various Asian cities.

About Portnox
Portnox provides simple-to-deploy, operate and maintain network access control, security and visibility solutions. Portnox software can be deployed on-premises, as a cloud-delivered service, or in hybrid mode. It is agentless and vendor-agnostic, allowing organizations to maximize their existing network and cybersecurity investments. Hundreds of enterprises around the world rely on Portnox for network visibility, cybersecurity policy enforcement and regulatory compliance. The company has been recognized for its innovations by Info Security Products Guide, Cyber Security Excellence Awards, IoT Innovator Awards, Computing Security Awards, Best of Interop ITX and Cyber Defense Magazine. Portnox has offices in the U.S., Europe and Asia. For information visit http://www.portnox.com, and follow us on Twitter and LinkedIn.。

What threatens SaaS security in the upcoming year

· Difficulties in controlling app security risks

Many companies use SaaS apps in their work more and more often, especially when their employees must work remotely. This is when they hit a problem: it is necessary to adjust security settings correctly for each app considering their configurations. As there are many such apps, security departments are forced to do major volumes of work and are not always maximally efficient.

· Low level of knowledge in cybersecurity rules by privileged users

Employees who do not follow cybersecurity rules and have expanded access put confidential information at the threat of being hacked and increase the risk of it being revealed. And because SaaS use continues to grow, there appears the necessity for control of employees’ access to apps.

· Phishing via SaaS

Criminals attack companies’ email via SaaS using the following scheme:

– Criminals send an email with OAuth app.

– An employee follows the link and logs in to their account.

– The app requests access to emails.

– The employee accepts the request.

– OAuth token is created, which is subsequently used by the cybercriminal to gain access to and control email or the whole disc.

– The criminal encodes the disc and the user can get access to it back only after they  have paid ransom.

This is how ransomware works. Other types of cyberattacks can be organized using OAuth app as well.

Having installed special apps for protection against cyberattacks or using cloud services companies can protect themselves from such cyberattacks and identify changes in cybersecurity settings and SaaS apps in timely manner.

About Version 2 Digital

Version 2 Digital is one of the most dynamic IT companies in Asia. The company distributes a wide range of IT products across various areas including cyber security, cloud, data protection, end points, infrastructures, system monitoring, storage, networking, business productivity and communication products.

Through an extensive network of channels, point of sales, resellers, and partnership companies, Version 2 offers quality products and services which are highly acclaimed in the market. Its customers cover a wide spectrum which include Global 1000 enterprises, regional listed companies, different vertical industries, public utilities, Government, a vast number of successful SMEs, and consumers in various Asian cities.

About SafeDNS
SafeDNS breathes to make the internet safer for people all over the world with solutions ranging from AI & ML-powered web filtering, cybersecurity to threat intelligence. Moreover, we strive to create the next generation of safer and more affordable web filtering products. Endlessly working to improve our users’ online protection, SafeDNS has also launched an innovative system powered by continuous machine learning and user behavior analytics to detect botnets and malicious websites.

[特別消息] 伺服器將於 2022-02-10 (15:00-17:00) 進行定期維護

為了提供更穩定的服務,產品註冊伺服器 (https://version-2.com/register/)
將於 2022-02-10 (15:00-17:00) 進行定期維護。
不便之處,敬請原諒。

技術支援熱線: (852) 2893 8186
或電郵至: support@version-2.com.hk

About Version 2

Version 2 Digital is one of the most dynamic IT companies in Asia. The company distributes a wide range of IT products across various areas including cyber security, cloud, data protection, end points, infrastructures, system monitoring, storage, networking, business productivity and communication products. Through an extensive network of channels, point of sales, resellers, and partnership companies, Version 2 offers quality products and services which are highly acclaimed in the market. Its customers cover a wide spectrum which include Global 1000 enterprises, regional listed companies, different vertical industries, public utilities, Government, a vast number of successful SMEs, and consumers in various Asian cities.

The Top 5 Biggest Data Leaks in 2021

Data breaches are a common phenomenon in the world of data and can pose serious threat to organizations. When a data breach occurs, a company’s reputation is at risk, and fines from legal authorities may be imposed. The costs of such breaches can be enormous. According to IBM’s Cost of a Data Breach Report, issued in conjunction with the Ponemon Institute, in 2021 the average cost of a data breach reached $4.24 million per incident, in healthcare it was $7.13 million. Let us walk you through the biggest data breaches of 2021.

#1 Twitch

Number of records leaked: 5 billion

The Amazon-owned streaming service experienced a data breach in October. There was an error in a Twitch server configuration change that resulted in access to 100GB of data by a malicious third party and data leak.

An investigation was launched immediately, the company fixed the configuration and secured the systems. This leak was caused by a human error, hence an insider threat.

Types of data exposed: 

  • User data
  • Client list
  • Twitch’s source code
  • Security tools
  • Three years of payment information
 

#2 Astoria Company

Number of records leaked: 30 million

Astoria Company LLC focuses on lead generation from various websites and collects data for its clients.

In January, the team at Night Lion Security discovered several new breached databases of Astoria Company for sale on the dark web. Night Lion notified Astoria Company, the company was not aware of the breach.

Types of data exposed: 

  • Social security numbers
  • Bank accounts
  • Driver’s license numbers
  • Names
  • Email addresses
  • Dates of birth
  • Mobile phone numbers
  • Physical addresses
  • IP addresses
  • Credit history
  • Medical data
  • Home and vehicle information
 

#3 Park Mobile

Number of records leaked: 21 million

Park Mobile provides the largest cashless parking app in the U.S. In March, the company experienced a data breach in which the personal data of 21 million customers was sold online by Russian hackers.

The breach occurred due to vulnerability in a third-party software that is being used by the company. Park Mobile immediately launched an investigation, notified legal authorities, and recommended that customers change their passwords.

Types of data exposed: 

  • License plate numbers
  • Email addresses
  • Phone numbers
  • Vehicle nicknames

 


#4 ClearVoiceResearch.com

Number of records leaked: 15.7 million

ClearVoice Research focuses on market research surveys. In April, the company discovered that a backup file of one of their survey databases from 2015 was exposed and sold online.

The company launched an investigation, located the backup file, secured it and eliminated any further exposure. Other files were checked to see whether they were secured properly against other breaches.

ClearVoice Research reset the passwords of people whose data might have been compromised and implemented security measures to prevent the recurrence of such an event.

Types of data exposed: 

  • Names
  • Email addresses
  • Addresses
  • Home addresses
  • Phone numbers
  • Dates of birth
  • Passwords from 2015
  • Responses to various questions (such as health conditions, political affiliation and ethnicity)

 


#5 Jefit

Number of records leaked: 9.05 million

Jefit is a workout tracking app. In March, the company experienced a data breach due to a security bug. The breach impacted clients’ accounts that were registered before 20th September 2020.

The company secured the servers and impacted accounts immediately and launched an investigation and contacted the authorities. Jefit also adopted new security measures to avoid another breach in the future.

Types of data exposed: 

  • Account usernames
  • Email addresses associated with the accounts
  • Encrypted passwords
  • IP addresses when creating the account

How to avoid data breaches

There are various ways to avoid data breaches. The tips below might help you to protect your company’s valuable data.

  • Identify all the sensitive data in your company and review who can access it and why.
  • Review security policies and make sure they are not too difficult to understand and follow.
  • Educate your employees and reiterate why data security is important.
  • Implement a DLP solution that helps you to perform security audits and set and manage security policies.

Eighty-five percent of companies experience a data breach and 60% of small businesses close within 6 months due to a major data leak. At Safetica, we help all companies, large and small, from various sectors to protect their data against leakage and insider threats. 

About Version 2 Digital

Version 2 Digital is one of the most dynamic IT companies in Asia. The company distributes a wide range of IT products across various areas including cyber security, cloud, data protection, end points, infrastructures, system monitoring, storage, networking, business productivity and communication products.

Through an extensive network of channels, point of sales, resellers, and partnership companies, Version 2 offers quality products and services which are highly acclaimed in the market. Its customers cover a wide spectrum which include Global 1000 enterprises, regional listed companies, different vertical industries, public utilities, Government, a vast number of successful SMEs, and consumers in various Asian cities.

About Safetica
Safetica is to provide small and mid-sized companies with the same quality data protection that corporations have – affordably, and without any additional IT administration or disruptions in operation.

訊連科技舉辦「2022 智慧安控新機遇」研討會 介紹以全球頂尖技術打造,結合門禁考勤及防疫的智慧安控解決方案

【2022年2月9日,台北訊】 AI人工智慧領導廠商訊連科技(5203.TW)宣布將於 2022 年 2 月 23 日舉行「2022 智慧安控新機遇」研討會。會中將介紹FaceMe® Security 7新版本的多人動態式人臉辨識解決方案,提供門禁考勤及口罩偵測、體溫測量等防疫功能,可適用於智慧辦公室、智慧工廠及智慧建築等多樣場景,也推出全新「以圖找圖」的智慧人臉搜尋功能。此外,並邀請 Intel® 、Network Optix及晶睿通訊等產業專家,分享最新人工智慧於邊緣裝置的應用,及安控產業的最新趨勢。

疫情當前,員工上班量體溫、配戴口罩已是每日例行公事,然需使用額溫槍量測及使用刷卡方式打卡,不僅造成不必要之人力、時間成本,亦有潛在的接觸風險。訊連科技推出 FaceMe® Security 動態式人臉辨識軟體,方便員工以「刷臉」方式,無須刻意站在鏡頭前,自然行走即能完成人臉辨識,在 1 秒內同時完成出勤打卡、口罩偵測、體溫測量等後疫情世代必備工作,為企業實現「零接觸」門禁暨員工健康管理。

FaceMe® Security可相容於現行各式 IP 攝影機、邊緣裝置、工作站與伺服器,無須全面升級安控設備,僅需額外安裝軟體及搭配部分具有人臉辨識能力之電腦或工作站,以低於20%之成本,即可為企業無縫升級刷臉門禁、防疫等多樣應用。

訊連科技也與晶睿通訊、Network Optix 等安控廠商合作,將 FaceMe® Security 解決方案整合至主流VMS影像管理系統。當偵測到特定人士或事件發生時,便會即時發送告警,輔助保全迅速應對。

而為加強物聯網設備的 AI 運算能力,FaceMe® 亦針對多項 Intel® 物聯網服務進行優化,以提升企業在 Intel® 平台導入 AI 人臉辨識的運算效能與彈性。訊連科技為Intel® 物聯網解決方案聯盟成員,透過與 Intel® 深化合作,訊連科技將加速布局智慧安控與 AIoT 領域的落地應用。

「2022 智慧安控新機遇」研討會活動訊息

  • 時間:2022 年 2 月 23 日 13:30 – 16:30
  • 地點:華南銀行國際會議中心 201 會議廳(台北市信義區松仁路 123 號 2 樓)
  • 活動亦同時透過線上直播進行
  • 活動連結:https://mailchi.mp/cyberlink/solutions_day_2022

About Version 2

Version 2 Digital is one of the most dynamic IT companies in Asia. The company distributes a wide range of IT products across various areas including cyber security, cloud, data protection, end points, infrastructures, system monitoring, storage, networking, business productivity and communication products. Through an extensive network of channels, point of sales, resellers, and partnership companies, Version 2 offers quality products and services which are highly acclaimed in the market. Its customers cover a wide spectrum which include Global 1000 enterprises, regional listed companies, different vertical industries, public utilities, Government, a vast number of successful SMEs, and consumers in various Asian cities.

關於CyberLink
訊連科技創立於1996年,擁有頂尖視訊與音訊技術的影音軟體公司,專精於數位影音軟體及多媒體串流應用解決方案產品研發,並以「抓準技術板塊,擴大全球行銷布局」的策略,深根台灣、佈局全球,展現亮麗的成績。訊連科技以先進的技術提供完美的高解析影音播放效果、以尖端的科技提供完整的高解析度擷取、編輯、製片及燒錄功能且完整支援各種高解析度影片及音訊格式。產品包括:「威力導演」、「PowerDVD」、「威力製片」、「威力酷燒」等。