2021 彙整 - Page 33 of 67

After All, How to Act in Case of Data Invasion and Theft?

In the contemporary world, where the use of technological means and virtual systems is becoming more and more indispensable, one of the great problems caused by criminal entities has been the invasion and theft of data. It is important to emphasize that, with the digital transformation and the increase in the use of digital media identified in recent years, now driven by the new Coronavirus pandemic, there has also been a spike in the practice of cybercrimes, that is, those crimes that occur through virtual means. These crimes are usually performed by hackers, who are holders of technical knowledge about internal computer systems and electronic devices, programs, and networks.

Cybercrimes can occur in different ways and for different reasons. In general, users who become victims end up having their information and data stolen or their accounts hacked by criminals, which often results in episodes that can bring disastrous and immense damage to those who suffer the crime.

Therefore, it is ideal to establish preventive security measures before attacks occur.

There are currently many ways to ensure greater protection of your data and information. Make sure you read our article on the rise of cyberattacks during the pandemic, and how to protect yourself.

But if you have already suffered any of these crimes or want to be informed about the actions that should be taken in these cases, keep reading this article and find out what are the recommendations we have separated for you.

Actions to Be Taken in Case of Invasion or Theft of Information and Data

When an organization experiences a security incident, such as cybercrime, it needs to act promptly and quickly.

We are not always prepared to deal with situations like these, but it is necessary to remain calm and take action.

Of course, actions should be taken according to the specific type of attack that took place and to what was actually stolen or hacked into.

Therefore, carefully read the possibilities listed below on which procedures should be taken in these cases and see which ones fit best for you.

Identify the Action of the Intruders

It is important to find out how the criminal act took place and what data was disclosed. Thus, the procedure must take place so that the necessary measures are taken in order to restrain the results of the crime and prevent further invasions.

You can start an investigation through companies specializing in cybercrime and hard evidence.

Look for Evidence of Crime

When becoming a victim of a computer crime, if possible, you must record the evidence of the crime.

In this sense, it is worth noting that the most correct and secure means is through specific solutions that allow the recording of all actions performed in the environment.

This can even assist in the incident remediation process, reducing operational and downtime costs.

Change Your Passwords Immediately

Another important action to be taken if you have suffered a cyberattack in which there was data theft, and also one of the ways to minimize the problem, is the immediate change of your passwords, whether for emails, networks that may be related to the theft, or for your systems.

This will prevent criminals from continuing to develop other types of damage that can be done by using your stolen data.

Check the Backup of Your Files

The use of software that backs up your information and data automatically and efficiently is a preventive measure that can help a lot in these moments.

If you have already performed this procedure, the chance of recovering your information will be much greater, so check the backup of your files and see if you can recover them.

Communicate About Information Leaks

If the information that was leaked is related to other individuals, such as employees or consumers, they must be informed about what happened and about the measures being taken concerning the case.

This behavior is an ethical measure, which must be carried out clearly and objectively.

Analyze the Weaknesses that Made the Invasion and Theft of Your Data Possible and Invest in Security

In addition to looking for those responsible for information leaks, it is important to recognize the limitations and deficiencies that allowed intruders access to your system.

When recognizing them, it is essential to take appropriate action so that future losses are avoided.

You can look for specific digital data protection solutions that will help you in this process, as is the case with senhasegura.

About Version 2 Digital

Version 2 Digital is one of the most dynamic IT companies in Asia. The company distributes a wide range of IT products across various areas including cyber security, cloud, data protection, end points, infrastructures, system monitoring, storage, networking, business productivity and communication products.

Through an extensive network of channels, point of sales, resellers, and partnership companies, Version 2 offers quality products and services which are highly acclaimed in the market. Its customers cover a wide spectrum which include Global 1000 enterprises, regional listed companies, different vertical industries, public utilities, Government, a vast number of successful SMEs, and consumers in various Asian cities.

About Segura®
Segura® strive to ensure the sovereignty of companies over actions and privileged information. To this end, we work against data theft through traceability of administrator actions on networks, servers, databases and a multitude of devices. In addition, we pursue compliance with auditing requirements and the most demanding standards, including PCI DSS, Sarbanes-Oxley, ISO 27001 and HIPAA.

2021 Segura

ESET recognized in two analyst reports on Threat Intelligence and Zero Trust Threat Detection and Response

BRATISLAVA — July 20, 2021 — ESET, a global leader in cybersecurity, has been included in two Forrester reports: The Forrester Tech Tide™: Zero Trust Threat Detection And Response, Q2 2021 and The Forrester Tech Tide™: Threat Intelligence, Q2 2021. ESET was included as a sample vendor in both reports, which ESET believes highlights its powerful endpoint detection and response and threat intelligence services.

The Forrester Tech Tide reports examine the maturity of an ecosystem of technologies, and help organizations make decisions on which technologies to invest in and when. The “Zero Trust Threat Detection and Response” report analyzes 17 technology categories and includes sample vendors that support Zero Trust threat detection and response capabilities. These capabilities “have become even more critical for identifying ongoing attacks that may have evaded preventive controls and tools.” As such, this report complements The Forrester Tech Tide™: Zero Trust Threat Prevention, Q3 2020.

“The Forrester Tech Tide: Threat Intelligence” report analyzes 15 technology and service categories that enable an effective and intelligence-driven security program.

ESET believes its inclusion in the reports reflects the high business value of its products and services, in particular, ESET Enterprise Inspector and ESET Threat Intelligence, which are backed by strong malware research (published on ESET’s security blog WeLiveSecurity).

Zero Trust threat detection and response is critical to all modern businesses. As Forrester points out in its report, endpoint detection and response solutions “are the next generation of endpoint protection, providing more visibility and control than has ever been available.”

With the threat landscape evolving and cyber breaches increasing, Forrester also identified threat intelligence as a critical component of a business’s security stance. Organizations from every industry should use cyber threat intelligence to track threat actors and help build robust security systems. ESET has been identified as an expert in the field of threat intelligence, providing detailed cyber threat intelligence and indicators of compromise feeds that are applied across the whole portfolio of its products, and are assembled and assessed by its vast network of research teams across the globe.

Zuzana Legáthová, Analyst Relations Manager at ESET, commented, “We are thrilled to be included in not one, but two Forrester Tech Tide reports for our endpoint detection and response offering and our threat intelligence services. We believe inclusion in these kinds of reports reflects our continued investment in our own technologies and research, and our commitment to ensuring our customers are always one step ahead in the threat landscape. Strong threat detection and response and threat intelligence capabilities are now more than ever of vital importance to all businesses and organizations, and we are proud to be recommended by Forrester as a vendor that supports organizations in building resilient security architectures underpinned by these technologies.”

To find out more about ESET’s business offerings, click here.

About Version 2 Digital

Version 2 Digital is one of the most dynamic IT companies in Asia. The company distributes a wide range of IT products across various areas including cyber security, cloud, data protection, end points, infrastructures, system monitoring, storage, networking, business productivity and communication products.

Through an extensive network of channels, point of sales, resellers, and partnership companies, Version 2 offers quality products and services which are highly acclaimed in the market. Its customers cover a wide spectrum which include Global 1000 enterprises, regional listed companies, different vertical industries, public utilities, Government, a vast number of successful SMEs, and consumers in various Asian cities.

About ESET
For 30 years, ESET® has been developing industry-leading IT security software and services for businesses and consumers worldwide. With solutions ranging from endpoint security to encryption and two-factor authentication, ESET’s high-performing, easy-to-use products give individuals and businesses the peace of mind to enjoy the full potential of their technology. ESET unobtrusively protects and monitors 24/7, updating defenses in real time to keep users safe and businesses running without interruption. Evolving threats require an evolving IT security company. Backed by R&D facilities worldwide, ESET became the first IT security company to earn 100 Virus Bulletin VB100 awards, identifying every single “in-the-wild” malware without interruption since 2003.

ESET 2021

WHAT’S NEW Pandora FMS 755

What’s new in the latest release of Pandora FMS, Pandora FMS 755

Let’s review together the features and improvements related to the new Pandora FMS release: Pandora FMS 755.

HOW TO UPDATE PANDORA FMS

There are several ways to update Pandora FMS console:

Through Update Manager, in Pandora FMS console itself, automatically (it requires console internet connection).
Through Update Manager, in Pandora FMS console itself, manually, through OUM update files.
By manually installing RPM packages and later updating the console through the web interface.

The server will have to be manually updated through RPM or tarball packages. You may find more information about Pandora FMS downloads on our website:

For detailed information and the steps to follow to update each item, classified by operating systems, go to our Wiki.

NEW FEATURES AND IMPROVEMENTS

New agent installer for MacOS

In this version we released a graphical installer for MacOS agents.

New interface view

A new specific view has been added to be able to see the network interfaces that are being monitored. On the one hand, there is the general view where you can filter the different agents that carry out said monitoring and on the other hand, a special view within each agent.

New online documentation

We have migrated our online documentation system to a new site: https://pandorafms.com/manual which allows better searches, better navigation and better mobile usability. It also allows exporting on demand in PDF and very soon also in eBook (ePub) format.

New Metaconsole interface

The visual interface of the Metaconsole has been modified to improve its navigability and display, adding the left side menu similar to that of the node. We have also unified some styles that will make working with the Metaconsole more familiar to how you work with the node.

New Update Manager (WARP update)

WARP is the new version of the old Pandora FMS update system (Update manager). This new version allows you to apply server and console updates without having to execute any command in the terminal. In the Metaconsole, updates are applied in a distributed manner from the Metaconsole to the nodes, with a simple click. From now on, updates incorporate a digital signature so that the source of said update can be manually validated (both online and offline).

Agent inventory

We have created a new type of report that is used to list the installed agents. Among other metrics, you can see the IP, main group, secondary groups, description and other data. These reports can also be exported to CSV and XML.

Full console translation into Russian

We have translated and revised 100% of the console into Russian. We are also working on the Russian translation of the online documentation.

SPECIAL UPDATE NOTES

Due to the new version 755 update system, WARP Update, it is necessary to perform a couple of extra steps in the console after updating the server. From version 755, the server will be automatically updated from the console using the pandora_ha component that already existed in the Enterprise version and that is now open for the Community. This component allows you to control server performance (stopping and starting it, controlling the status of HA and updates, if any). Before updating the server it will be necessary to stop the server:

service pandora_ha stop
/etc/inid.d/pandora_server top

And start it again after updating it: service pandora_ha start Or through the init.d script that has been modified to start pandora_ha /etc/init.d/pandora_server start

About Version 2 Digital

Version 2 Digital is one of the most dynamic IT companies in Asia. The company distributes a wide range of IT products across various areas including cyber security, cloud, data protection, end points, infrastructures, system monitoring, storage, networking, business productivity and communication products.

Through an extensive network of channels, point of sales, resellers, and partnership companies, Version 2 offers quality products and services which are highly acclaimed in the market. Its customers cover a wide spectrum which include Global 1000 enterprises, regional listed companies, different vertical industries, public utilities, Government, a vast number of successful SMEs, and consumers in various Asian cities.

About PandoraFMS
Pandora FMS is a flexible monitoring system, capable of monitoring devices, infrastructures, applications, services and business processes.
Of course, one of the things that Pandora FMS can control is the hard disks of your computers.

Pandorafms 2021

What is Vulnerability Management?

Vulnerability management is the continual process of assessing, identifying, managing, remediating, and reporting security vulnerabilities across endpoints, systems, and workloads. Generally, vulnerability management tools help the security team detect vulnerabilities and use different processes to remediate or patch them.

However, a powerful management program employs the knowledge of IT, business operations, and threat intelligence to prioritize vulnerabilities and risks as quickly as possible.

Is There Any Difference Between A Risk, Vulnerability, Or Threat?

According to the International Organization for Standardization (ISO), a vulnerability can be defined as a weakness of an asset or group of assets triggered by one or more threats.

On the other hand, a threat is anything that can capitalize on a vulnerability.

And lastly, risk occurs when a threat triggers vulnerabilities. It is usually damage that can happen when an open vulnerability is exploited by a threat.

Categories and Ranking of Vulnerabilities

Popular cybersecurity organizations use the Common Vulnerability Scoring System (CVSS) to communicate and assess the characteristics and severity of software vulnerabilities. Ideally, the CVSS base score has a range of 0.00 to 10.0 but, the National Vulnerability Database (NVD) added severity ratings to each CVSS score. The v3.0 of the CVSS scores and its associated ratings are as follows:

CVSS Score Severity Rating

0.0 – None
0.1-3.9 – Low
4.0 -6.9 – Medium
7.0-8.9 – High
9.0-10.0 – Critical

In addition, NVD provides a routinely updated library that houses common vulnerabilities and exposures (CVEs), providing the ranking of each vulnerability and other associated information, which includes: product name, vendor, version, etc. The list of Common Vulnerability Exposures originated from the MITRE Corporation. This corporation is a non-profit organization that began documenting CVEs in 1999. It is automatically synced with NVD and provides basic information about each vulnerability.

What are the differences between Vulnerability Assessment and Vulnerability Management?

Vulnerability assessment is not the same as vulnerability management; vulnerability management is a recurring process whereas vulnerability assessment is a one-time evaluation of a network or host. Hence, vulnerability assessment is a step in the vulnerability management process.

The stages in the Vulnerability Management Process

Vulnerability programs adhere to different stages of the vulnerability management process. However, the methods are mostly the same even though the terminology varies, but there are other ways to define each step in the process.

Preparation for a Vulnerability Management Program

According to Gartner’s Vulnerability Management Guidance framework, there are five preparation steps before commencing the process. They are:

Step 1: Ascertain the Scope of the program
Step 2: Illustrate Roles and Responsibilities
Step 3: Choose Vulnerability Assessment Tools
Step 4: Generate and Refine Policy SLAs
Step 5: Identify context resources and asset

The primary role of this preparation stage is to measure and assess current processes, tools, and resources to identify gaps.

During this preparation, also known as the pre-work stage, security professionals need to ask questions that will help understand the scope of your program. Examples of such questions are:

Which hosts or assets are most vital to protect?
What are the assets needed to be measured for vulnerabilities?
Who will manage such a program? What are their roles and responsibilities?
What policies or service level agreements (SLAs) do we need to define? How often should an asset be assessed for weak points or vulnerabilities?
What are the lists of the assets we plan to cover?
What are the necessary tools needed to effectively scan or manage our hosts

Once you provide answers to these questions, begin to implement the vulnerability management process.

The 5 steps of the Vulnerability Management Cycle

Assess
Prioritize
Act
Reassess
Improve

What to look for in Vulnerability Management Solutions

The primary responsibility of a vulnerability manager is to manage exposure to the known vulnerabilities. However, vulnerability management involves more than running a mere scanning tool. A high-quality and efficient toolset is needed to dramatically improve the implementation and the continuous success of any vulnerability program.

There are many options and solutions in the market claiming surpassing qualities, but if you want the best in a vulnerability management solution, here is how to evaluate your options:

Agent size impacts your endpoint performance: More than ever, the major vulnerability vendors in the marketplace lay claims of providing agent-based solutions. Sad to say, most of these agents are bulky, and choosing a bulky tool has an impact on your endpoint’s performance. Hence, before selecting any agent-based tool, make sure you are going for a lightweight agent because it consumes very little space on an endpoint and will minimize the effect on your productivity.

Pay attention to timeliness: One of the vital characteristics of any vulnerability management tool is to detect vulnerabilities in a timely manner. If a tool can’t detect a vulnerability earlier on, it isn’t very useful because it doesn’t contribute to overall protection. A ubiquitous tool that falls under this categorization is the network-based scanner. It takes a long time to complete a scan, using up the organization bandwidth and, in the end, producing outdated information. To avoid this, choose a tool that doesn’t rely on a network but on a lightweight agent.

Immediate and thorough visibility is critical: For maximum security, you should know and see what is vulnerable instantly. Unfortunately, legacy vulnerability tools can hamper your visibility – bulky reports provide little to no help addressing vulnerabilities promptly, scans take a long time and provide outdated results, and bloated agents slow business productivity. The best solution is a scanless technology that allows your team to interact with data in real-time. A scanless technology is always running, identifying vulnerabilities and constantly looking for weaknesses.

For maximum security, organizations no longer need a complicated set of solutions and security tools that requires specialized skills or personnel. Instead, they rely on an integrated platform that provides them with vulnerability management tools and other security tools for detecting threats.

If you need help with scanless vulnerability assessment or vulnerability management, Vicarius is the ideal software to use. Vicarius is a vulnerability management software that targets cybersecurity officers as well IT managers and operators from the U.S. market.

Photo by Christina @ wocintechchat.com on Unsplash

About Version 2 Digital

Version 2 Digital is one of the most dynamic IT companies in Asia. The company distributes a wide range of IT products across various areas including cyber security, cloud, data protection, end points, infrastructures, system monitoring, storage, networking, business productivity and communication products.

Through an extensive network of channels, point of sales, resellers, and partnership companies, Version 2 offers quality products and services which are highly acclaimed in the market. Its customers cover a wide spectrum which include Global 1000 enterprises, regional listed companies, different vertical industries, public utilities, Government, a vast number of successful SMEs, and consumers in various Asian cities.

About VRX
VRX is a consolidated vulnerability management platform that protects assets in real time. Its rich, integrated features efficiently pinpoint and remediate the largest risks to your cyber infrastructure. Resolve the most pressing threats with efficient automation features and precise contextual analysis.

vRx 2021

REvil ransomware attack illustrates IT systems need for epidemiological investigation

Originally posted on CTECH

The recent REvil ransomware attack has revealed that our computer systems are vulnerable to unknown and surprising pathogens, similar to our vulnerability to Covid-19. The hackers claim that the attack penetrated more than a million workstations, and demanded about $70 million to unlock them. However, the most important question is how the damage could have been reduced or prevented. Let’s take a step back. Antivirus software comprises the first defense line (the IT immune system, if you will). The antivirus operating principle is simple: if malicious code is detected, it is signed by the various antivirus manufacturers and its hash is distributed as an update to the local antivirus installation. Thus, antivirus software can identify most malware and prevent them from damaging the computer.

Nevertheless, similarly to biological systems, some viruses and vulnerabilities are unrecognizable by antivirus software. About 30-50 IT companies, including many Israeli ones, work to discover the meager number of yet undiscovered malware and yet unabused vulnerabilities. This activity is expensive and carries large premiums, but numerous organizations around the world would pay for such protective measures. Think about it – if a security operation is attacked by 1,000 different malware a month, the damage of even a single penetration would be catastrophic. Therefore, an antivirus that prevents 99.9% of attacks will not suffice.

However, systems identifying unrecognized threats are prone to false alarms. No wonder – anyone trying to find a new type of threat is likely to be sensitive to any anomaly or change. Yet the high number of false alarms that these systems provide causes many to ignore them or to disable the systems, quite similar to muting the sound of a cardiac monitor, thus remaining unprotected yet again. One of the methods of containing the damage might sound familiar in the post-COVID world – isolation. For example, in the latest REvil attack, Kaseya software, serving as part of the supply chain, was damaged. The company warned customers over the weekend to disconnect their devices from the internet to prevent encryption of their information, as the malware was raging outside and a cure for it was yet to be found. A network control system, like an internal epidemiological investigation array, can sometimes be useful in stopping the malware spread and preventing some of its damage.

Isolate, test, and decide

NAC (Network Access Control) systems test every device and every user individually – who is the user attempting to connect? What is his role? What hardware does he use? Does he have an antivirus? Are there security updates installed? All these parameters are calculated to a security ranking, according to which network access is granted or denied. In some cases, it is possible to prevent or restrict the use of plug-in USB devices, and in extreme cases, it is even possible to deny usage completely and isolate the “sick” computer from the outside world.

An internal epidemiological investigation array mitigates the risks instead of trying to eliminate them completely. The truth about the Covid-19 pandemic, as well as for computer systems, is that complete isolation of our homes or computer stations will prevent us from catching the virus, but it will also prevent us from functioning. Therefore, IT systems and humans need to establish risk-mitigating measures which will balance the existing threat of infection and the need to connect, meet and interact with the outside world.

About Version 2 Digital

Version 2 Digital is one of the most dynamic IT companies in Asia. The company distributes a wide range of IT products across various areas including cyber security, cloud, data protection, end points, infrastructures, system monitoring, storage, networking, business productivity and communication products.

Through an extensive network of channels, point of sales, resellers, and partnership companies, Version 2 offers quality products and services which are highly acclaimed in the market. Its customers cover a wide spectrum which include Global 1000 enterprises, regional listed companies, different vertical industries, public utilities, Government, a vast number of successful SMEs, and consumers in various Asian cities.

About Portnox
Portnox provides simple-to-deploy, operate and maintain network access control, security and visibility solutions. Portnox software can be deployed on-premises, as a cloud-delivered service, or in hybrid mode. It is agentless and vendor-agnostic, allowing organizations to maximize their existing network and cybersecurity investments. Hundreds of enterprises around the world rely on Portnox for network visibility, cybersecurity policy enforcement and regulatory compliance. The company has been recognized for its innovations by Info Security Products Guide, Cyber Security Excellence Awards, IoT Innovator Awards, Computing Security Awards, Best of Interop ITX and Cyber Defense Magazine. Portnox has offices in the U.S., Europe and Asia. For information visit http://www.portnox.com, and follow us on Twitter and LinkedIn.。

2021 Network Portnox