2021 彙整 - Page 33 of 70

The ECSO ‘Cybersecurity Made in Europe’ label is awarded to ESET, the leading endpoint protection platform vendor headquartered in Europe

ESET, headquartered in the Slovak Republic, is the first Slovak company to be awarded the ‘Cybersecurity Made in Europe’ label and sees the designation as further recognition of the company’s capabilities and commitment to protecting citizens, businesses and government bodies from cyberthreats.

BRATISLAVA – July 21, 2021 – ESET is one of the first Europe-based IT security companies to be awarded the ‘Cybersecurity Made in Europe’ label by the European Cyber Security Organization (ECSO). The seal of approval underscores the quality and values of European security vendors that meet the criteria.

“As the leading endpoint protection platform vendor headquartered in Europe, ESET is delighted to be awarded this label, underlining our commitment to our home in Central Europe, and to supporting innovation in the region,” says Andrew Lee, Director of Government Affairs at ESET. “Whilst ESET is now very much a global company we remain proud of our European roots and our reputation for the quality of our products and services.”

Founded and headquartered in Bratislava more than 30 years ago, ESET has been working to ensure that digital users globally can take full advantage of the huge potential from an increasingly digital world. At an EU level, ESET has built effective partnerships between the public and private sectors drawing upon the expertise of both. This has extended to research cooperation with major European projects in the sciences and collaboration with security organizations tasked with defending cyberspace.

To earn ECSO’s ‘Cybersecurity Made in Europe’ label, companies must demonstrate that:
•   the head office of the company is located in Europe;
•   the majority of the employees are employed in Europe;
•   the core market is Europe; and
•   the 10 baseline security requirements specified by ENISA, as essential for products and services in information and communication technology to be considered secure, are complied with.

“You can follow the important work ESET does on WeLiveSecurity, the ESET Blog, or at the ESET Research Twitter.

About Version 2 Digital

Version 2 Digital is one of the most dynamic IT companies in Asia. The company distributes a wide range of IT products across various areas including cyber security, cloud, data protection, end points, infrastructures, system monitoring, storage, networking, business productivity and communication products.

Through an extensive network of channels, point of sales, resellers, and partnership companies, Version 2 offers quality products and services which are highly acclaimed in the market. Its customers cover a wide spectrum which include Global 1000 enterprises, regional listed companies, different vertical industries, public utilities, Government, a vast number of successful SMEs, and consumers in various Asian cities.

About ESET
For 30 years, ESET® has been developing industry-leading IT security software and services for businesses and consumers worldwide. With solutions ranging from endpoint security to encryption and two-factor authentication, ESET’s high-performing, easy-to-use products give individuals and businesses the peace of mind to enjoy the full potential of their technology. ESET unobtrusively protects and monitors 24/7, updating defenses in real time to keep users safe and businesses running without interruption. Evolving threats require an evolving IT security company. Backed by R&D facilities worldwide, ESET became the first IT security company to earn 100 Virus Bulletin VB100 awards, identifying every single “in-the-wild” malware without interruption since 2003.

ESET 2021

After All, How to Act in Case of Data Invasion and Theft?

In the contemporary world, where the use of technological means and virtual systems is becoming more and more indispensable, one of the great problems caused by criminal entities has been the invasion and theft of data. It is important to emphasize that, with the digital transformation and the increase in the use of digital media identified in recent years, now driven by the new Coronavirus pandemic, there has also been a spike in the practice of cybercrimes, that is, those crimes that occur through virtual means. These crimes are usually performed by hackers, who are holders of technical knowledge about internal computer systems and electronic devices, programs, and networks.

Cybercrimes can occur in different ways and for different reasons. In general, users who become victims end up having their information and data stolen or their accounts hacked by criminals, which often results in episodes that can bring disastrous and immense damage to those who suffer the crime.

Therefore, it is ideal to establish preventive security measures before attacks occur.

There are currently many ways to ensure greater protection of your data and information. Make sure you read our article on the rise of cyberattacks during the pandemic, and how to protect yourself.

But if you have already suffered any of these crimes or want to be informed about the actions that should be taken in these cases, keep reading this article and find out what are the recommendations we have separated for you.

Actions to Be Taken in Case of Invasion or Theft of Information and Data

When an organization experiences a security incident, such as cybercrime, it needs to act promptly and quickly.

We are not always prepared to deal with situations like these, but it is necessary to remain calm and take action.

Of course, actions should be taken according to the specific type of attack that took place and to what was actually stolen or hacked into.

Therefore, carefully read the possibilities listed below on which procedures should be taken in these cases and see which ones fit best for you.

Identify the Action of the Intruders

It is important to find out how the criminal act took place and what data was disclosed. Thus, the procedure must take place so that the necessary measures are taken in order to restrain the results of the crime and prevent further invasions.

You can start an investigation through companies specializing in cybercrime and hard evidence.

Look for Evidence of Crime

When becoming a victim of a computer crime, if possible, you must record the evidence of the crime.

In this sense, it is worth noting that the most correct and secure means is through specific solutions that allow the recording of all actions performed in the environment.

This can even assist in the incident remediation process, reducing operational and downtime costs.

Change Your Passwords Immediately

Another important action to be taken if you have suffered a cyberattack in which there was data theft, and also one of the ways to minimize the problem, is the immediate change of your passwords, whether for emails, networks that may be related to the theft, or for your systems.

This will prevent criminals from continuing to develop other types of damage that can be done by using your stolen data.

Check the Backup of Your Files

The use of software that backs up your information and data automatically and efficiently is a preventive measure that can help a lot in these moments.

If you have already performed this procedure, the chance of recovering your information will be much greater, so check the backup of your files and see if you can recover them.

Communicate About Information Leaks

If the information that was leaked is related to other individuals, such as employees or consumers, they must be informed about what happened and about the measures being taken concerning the case.

This behavior is an ethical measure, which must be carried out clearly and objectively.

Analyze the Weaknesses that Made the Invasion and Theft of Your Data Possible and Invest in Security

In addition to looking for those responsible for information leaks, it is important to recognize the limitations and deficiencies that allowed intruders access to your system.

When recognizing them, it is essential to take appropriate action so that future losses are avoided.

You can look for specific digital data protection solutions that will help you in this process, as is the case with senhasegura.

About Version 2 Digital

Version 2 Digital is one of the most dynamic IT companies in Asia. The company distributes a wide range of IT products across various areas including cyber security, cloud, data protection, end points, infrastructures, system monitoring, storage, networking, business productivity and communication products.

Through an extensive network of channels, point of sales, resellers, and partnership companies, Version 2 offers quality products and services which are highly acclaimed in the market. Its customers cover a wide spectrum which include Global 1000 enterprises, regional listed companies, different vertical industries, public utilities, Government, a vast number of successful SMEs, and consumers in various Asian cities.

About Segura®
Segura® strive to ensure the sovereignty of companies over actions and privileged information. To this end, we work against data theft through traceability of administrator actions on networks, servers, databases and a multitude of devices. In addition, we pursue compliance with auditing requirements and the most demanding standards, including PCI DSS, Sarbanes-Oxley, ISO 27001 and HIPAA.

2021 Segura

ESET recognized in two analyst reports on Threat Intelligence and Zero Trust Threat Detection and Response

BRATISLAVA — July 20, 2021 — ESET, a global leader in cybersecurity, has been included in two Forrester reports: The Forrester Tech Tide™: Zero Trust Threat Detection And Response, Q2 2021 and The Forrester Tech Tide™: Threat Intelligence, Q2 2021. ESET was included as a sample vendor in both reports, which ESET believes highlights its powerful endpoint detection and response and threat intelligence services.

The Forrester Tech Tide reports examine the maturity of an ecosystem of technologies, and help organizations make decisions on which technologies to invest in and when. The “Zero Trust Threat Detection and Response” report analyzes 17 technology categories and includes sample vendors that support Zero Trust threat detection and response capabilities. These capabilities “have become even more critical for identifying ongoing attacks that may have evaded preventive controls and tools.” As such, this report complements The Forrester Tech Tide™: Zero Trust Threat Prevention, Q3 2020.

“The Forrester Tech Tide: Threat Intelligence” report analyzes 15 technology and service categories that enable an effective and intelligence-driven security program.

ESET believes its inclusion in the reports reflects the high business value of its products and services, in particular, ESET Enterprise Inspector and ESET Threat Intelligence, which are backed by strong malware research (published on ESET’s security blog WeLiveSecurity).

Zero Trust threat detection and response is critical to all modern businesses. As Forrester points out in its report, endpoint detection and response solutions “are the next generation of endpoint protection, providing more visibility and control than has ever been available.”

With the threat landscape evolving and cyber breaches increasing, Forrester also identified threat intelligence as a critical component of a business’s security stance. Organizations from every industry should use cyber threat intelligence to track threat actors and help build robust security systems. ESET has been identified as an expert in the field of threat intelligence, providing detailed cyber threat intelligence and indicators of compromise feeds that are applied across the whole portfolio of its products, and are assembled and assessed by its vast network of research teams across the globe.

Zuzana Legáthová, Analyst Relations Manager at ESET, commented, “We are thrilled to be included in not one, but two Forrester Tech Tide reports for our endpoint detection and response offering and our threat intelligence services. We believe inclusion in these kinds of reports reflects our continued investment in our own technologies and research, and our commitment to ensuring our customers are always one step ahead in the threat landscape. Strong threat detection and response and threat intelligence capabilities are now more than ever of vital importance to all businesses and organizations, and we are proud to be recommended by Forrester as a vendor that supports organizations in building resilient security architectures underpinned by these technologies.”

To find out more about ESET’s business offerings, click here.

About Version 2 Digital

Version 2 Digital is one of the most dynamic IT companies in Asia. The company distributes a wide range of IT products across various areas including cyber security, cloud, data protection, end points, infrastructures, system monitoring, storage, networking, business productivity and communication products.

Through an extensive network of channels, point of sales, resellers, and partnership companies, Version 2 offers quality products and services which are highly acclaimed in the market. Its customers cover a wide spectrum which include Global 1000 enterprises, regional listed companies, different vertical industries, public utilities, Government, a vast number of successful SMEs, and consumers in various Asian cities.

About ESET
For 30 years, ESET® has been developing industry-leading IT security software and services for businesses and consumers worldwide. With solutions ranging from endpoint security to encryption and two-factor authentication, ESET’s high-performing, easy-to-use products give individuals and businesses the peace of mind to enjoy the full potential of their technology. ESET unobtrusively protects and monitors 24/7, updating defenses in real time to keep users safe and businesses running without interruption. Evolving threats require an evolving IT security company. Backed by R&D facilities worldwide, ESET became the first IT security company to earn 100 Virus Bulletin VB100 awards, identifying every single “in-the-wild” malware without interruption since 2003.

ESET 2021

WHAT’S NEW Pandora FMS 755

What’s new in the latest release of Pandora FMS, Pandora FMS 755

Let’s review together the features and improvements related to the new Pandora FMS release: Pandora FMS 755.

HOW TO UPDATE PANDORA FMS

There are several ways to update Pandora FMS console:

Through Update Manager, in Pandora FMS console itself, automatically (it requires console internet connection).
Through Update Manager, in Pandora FMS console itself, manually, through OUM update files.
By manually installing RPM packages and later updating the console through the web interface.

The server will have to be manually updated through RPM or tarball packages. You may find more information about Pandora FMS downloads on our website:

For detailed information and the steps to follow to update each item, classified by operating systems, go to our Wiki.

NEW FEATURES AND IMPROVEMENTS

New agent installer for MacOS

In this version we released a graphical installer for MacOS agents.

New interface view

A new specific view has been added to be able to see the network interfaces that are being monitored. On the one hand, there is the general view where you can filter the different agents that carry out said monitoring and on the other hand, a special view within each agent.

New online documentation

We have migrated our online documentation system to a new site: https://pandorafms.com/manual which allows better searches, better navigation and better mobile usability. It also allows exporting on demand in PDF and very soon also in eBook (ePub) format.

New Metaconsole interface

The visual interface of the Metaconsole has been modified to improve its navigability and display, adding the left side menu similar to that of the node. We have also unified some styles that will make working with the Metaconsole more familiar to how you work with the node.

New Update Manager (WARP update)

WARP is the new version of the old Pandora FMS update system (Update manager). This new version allows you to apply server and console updates without having to execute any command in the terminal. In the Metaconsole, updates are applied in a distributed manner from the Metaconsole to the nodes, with a simple click. From now on, updates incorporate a digital signature so that the source of said update can be manually validated (both online and offline).

Agent inventory

We have created a new type of report that is used to list the installed agents. Among other metrics, you can see the IP, main group, secondary groups, description and other data. These reports can also be exported to CSV and XML.

Full console translation into Russian

We have translated and revised 100% of the console into Russian. We are also working on the Russian translation of the online documentation.

SPECIAL UPDATE NOTES

Due to the new version 755 update system, WARP Update, it is necessary to perform a couple of extra steps in the console after updating the server. From version 755, the server will be automatically updated from the console using the pandora_ha component that already existed in the Enterprise version and that is now open for the Community. This component allows you to control server performance (stopping and starting it, controlling the status of HA and updates, if any). Before updating the server it will be necessary to stop the server:

service pandora_ha stop
/etc/inid.d/pandora_server top

And start it again after updating it: service pandora_ha start Or through the init.d script that has been modified to start pandora_ha /etc/init.d/pandora_server start

About Version 2 Digital

Version 2 Digital is one of the most dynamic IT companies in Asia. The company distributes a wide range of IT products across various areas including cyber security, cloud, data protection, end points, infrastructures, system monitoring, storage, networking, business productivity and communication products.

Through an extensive network of channels, point of sales, resellers, and partnership companies, Version 2 offers quality products and services which are highly acclaimed in the market. Its customers cover a wide spectrum which include Global 1000 enterprises, regional listed companies, different vertical industries, public utilities, Government, a vast number of successful SMEs, and consumers in various Asian cities.

About PandoraFMS
Pandora FMS is a flexible monitoring system, capable of monitoring devices, infrastructures, applications, services and business processes.
Of course, one of the things that Pandora FMS can control is the hard disks of your computers.

Pandorafms 2021

What is Vulnerability Management?

Vulnerability management is the continual process of assessing, identifying, managing, remediating, and reporting security vulnerabilities across endpoints, systems, and workloads. Generally, vulnerability management tools help the security team detect vulnerabilities and use different processes to remediate or patch them.

However, a powerful management program employs the knowledge of IT, business operations, and threat intelligence to prioritize vulnerabilities and risks as quickly as possible.

Is There Any Difference Between A Risk, Vulnerability, Or Threat?

According to the International Organization for Standardization (ISO), a vulnerability can be defined as a weakness of an asset or group of assets triggered by one or more threats.

On the other hand, a threat is anything that can capitalize on a vulnerability.

And lastly, risk occurs when a threat triggers vulnerabilities. It is usually damage that can happen when an open vulnerability is exploited by a threat.

Categories and Ranking of Vulnerabilities

Popular cybersecurity organizations use the Common Vulnerability Scoring System (CVSS) to communicate and assess the characteristics and severity of software vulnerabilities. Ideally, the CVSS base score has a range of 0.00 to 10.0 but, the National Vulnerability Database (NVD) added severity ratings to each CVSS score. The v3.0 of the CVSS scores and its associated ratings are as follows:

CVSS Score Severity Rating

0.0 – None
0.1-3.9 – Low
4.0 -6.9 – Medium
7.0-8.9 – High
9.0-10.0 – Critical

In addition, NVD provides a routinely updated library that houses common vulnerabilities and exposures (CVEs), providing the ranking of each vulnerability and other associated information, which includes: product name, vendor, version, etc. The list of Common Vulnerability Exposures originated from the MITRE Corporation. This corporation is a non-profit organization that began documenting CVEs in 1999. It is automatically synced with NVD and provides basic information about each vulnerability.

What are the differences between Vulnerability Assessment and Vulnerability Management?

Vulnerability assessment is not the same as vulnerability management; vulnerability management is a recurring process whereas vulnerability assessment is a one-time evaluation of a network or host. Hence, vulnerability assessment is a step in the vulnerability management process.

The stages in the Vulnerability Management Process

Vulnerability programs adhere to different stages of the vulnerability management process. However, the methods are mostly the same even though the terminology varies, but there are other ways to define each step in the process.

Preparation for a Vulnerability Management Program

According to Gartner’s Vulnerability Management Guidance framework, there are five preparation steps before commencing the process. They are:

Step 1: Ascertain the Scope of the program
Step 2: Illustrate Roles and Responsibilities
Step 3: Choose Vulnerability Assessment Tools
Step 4: Generate and Refine Policy SLAs
Step 5: Identify context resources and asset

The primary role of this preparation stage is to measure and assess current processes, tools, and resources to identify gaps.

During this preparation, also known as the pre-work stage, security professionals need to ask questions that will help understand the scope of your program. Examples of such questions are:

Which hosts or assets are most vital to protect?
What are the assets needed to be measured for vulnerabilities?
Who will manage such a program? What are their roles and responsibilities?
What policies or service level agreements (SLAs) do we need to define? How often should an asset be assessed for weak points or vulnerabilities?
What are the lists of the assets we plan to cover?
What are the necessary tools needed to effectively scan or manage our hosts

Once you provide answers to these questions, begin to implement the vulnerability management process.

The 5 steps of the Vulnerability Management Cycle

Assess
Prioritize
Act
Reassess
Improve

What to look for in Vulnerability Management Solutions

The primary responsibility of a vulnerability manager is to manage exposure to the known vulnerabilities. However, vulnerability management involves more than running a mere scanning tool. A high-quality and efficient toolset is needed to dramatically improve the implementation and the continuous success of any vulnerability program.

There are many options and solutions in the market claiming surpassing qualities, but if you want the best in a vulnerability management solution, here is how to evaluate your options:

Agent size impacts your endpoint performance: More than ever, the major vulnerability vendors in the marketplace lay claims of providing agent-based solutions. Sad to say, most of these agents are bulky, and choosing a bulky tool has an impact on your endpoint’s performance. Hence, before selecting any agent-based tool, make sure you are going for a lightweight agent because it consumes very little space on an endpoint and will minimize the effect on your productivity.

Pay attention to timeliness: One of the vital characteristics of any vulnerability management tool is to detect vulnerabilities in a timely manner. If a tool can’t detect a vulnerability earlier on, it isn’t very useful because it doesn’t contribute to overall protection. A ubiquitous tool that falls under this categorization is the network-based scanner. It takes a long time to complete a scan, using up the organization bandwidth and, in the end, producing outdated information. To avoid this, choose a tool that doesn’t rely on a network but on a lightweight agent.

Immediate and thorough visibility is critical: For maximum security, you should know and see what is vulnerable instantly. Unfortunately, legacy vulnerability tools can hamper your visibility – bulky reports provide little to no help addressing vulnerabilities promptly, scans take a long time and provide outdated results, and bloated agents slow business productivity. The best solution is a scanless technology that allows your team to interact with data in real-time. A scanless technology is always running, identifying vulnerabilities and constantly looking for weaknesses.

For maximum security, organizations no longer need a complicated set of solutions and security tools that requires specialized skills or personnel. Instead, they rely on an integrated platform that provides them with vulnerability management tools and other security tools for detecting threats.

If you need help with scanless vulnerability assessment or vulnerability management, Vicarius is the ideal software to use. Vicarius is a vulnerability management software that targets cybersecurity officers as well IT managers and operators from the U.S. market.

Photo by Christina @ wocintechchat.com on Unsplash

About Version 2 Digital

Version 2 Digital is one of the most dynamic IT companies in Asia. The company distributes a wide range of IT products across various areas including cyber security, cloud, data protection, end points, infrastructures, system monitoring, storage, networking, business productivity and communication products.

Through an extensive network of channels, point of sales, resellers, and partnership companies, Version 2 offers quality products and services which are highly acclaimed in the market. Its customers cover a wide spectrum which include Global 1000 enterprises, regional listed companies, different vertical industries, public utilities, Government, a vast number of successful SMEs, and consumers in various Asian cities.

About VRX
VRX is a consolidated vulnerability management platform that protects assets in real time. Its rich, integrated features efficiently pinpoint and remediate the largest risks to your cyber infrastructure. Resolve the most pressing threats with efficient automation features and precise contextual analysis.

vRx 2021