Skip to content

Visibility – an Essential Part of Cybersecurity

Visibility is key to protecting our networks. But what exactly is visibility and why is it important?

Visibility means having a clear understanding of what’s happening in your network at all times. That means you can continuously verify what you see in your policies and best practices, immediately catching configuration issues, vulnerabilities, irregularities in security protocols, and user behavior. You also gain knowledge in the area of network performance and services as well as their availability.

By having visibility, you can act preventively, and systematically strengthen your network’s resilience to intrusions and reduce the room for maneuver for potential attackers. It also allows you to observe traffic in all relevant locations and network segments, whether on local networks, servers, or in the cloud.

So, how can you achieve perfect visibility?

One tool that can help is GREYCORTEX Mendel, which provides real-time monitoring and visualization of all communication in your network. It builds a mathematical model of your network and helps you determine what devices are communicating with each other, when, and how much data they’re sending and receiving. In Mendel, you can read details about used protocols for communication, including analysis of application data, or user identities. This provides detailed context and additional information about security events and threats.

Visibility is also crucial for managing any OT/SCADA network.

An up-to-date and accurate knowledge of what elements are involved in these communications, and what appears or disappears in them is invaluable, if only from an operational point of view. On top of that, GREYCORTEX Mendel understands OT/SCADA protocols, which brings visibility to critical control parameters such as temperature, RPM, voltage, or any other relevant factor in the data transmitted over the network. This adds more visibility into the processes in operation and provides an additional opportunity for the prevention of and response to abnormal events.

It does not stop here. GREYCORTEX Mendel goes a step further in this visualization. Thanks to advanced filtering, combining a number of parameters and using local operators, you can examine each device and its communication also to the smallest details as well as in the history. That makes root cause analysis, threat hunting, and network troubleshooting simple. This has also been confirmed by SOC teams that found Mendel an invaluable tool for post-hack analysis and prevention activities.

In short, visibility is an essential part of cybersecurity, and tools like GREYCORTEX Mendel can help you achieve it. By clearly understanding what’s happening on your network at all times, you can take preventive measures to strengthen your network’s resilience and protect against potential attacks.

About Version 2 Digital

Version 2 Digital is one of the most dynamic IT companies in Asia. The company distributes a wide range of IT products across various areas including cyber security, cloud, data protection, end points, infrastructures, system monitoring, storage, networking, business productivity and communication products.

Through an extensive network of channels, point of sales, resellers, and partnership companies, Version 2 offers quality products and services which are highly acclaimed in the market. Its customers cover a wide spectrum which include Global 1000 enterprises, regional listed companies, different vertical industries, public utilities, Government, a vast number of successful SMEs, and consumers in various Asian cities.

About GREYCORTEX
GREYCORTEX uses advanced artificial intelligence, machine learning, and data mining methods to help organizations make their IT operations secure and reliable.

MENDEL, GREYCORTEX’s network traffic analysis solution, helps corporations, governments, and the critical infrastructure sector protect their futures by detecting cyber threats to sensitive data, networks, trade secrets, and reputations, which other network security products miss.

MENDEL is based on 10 years of extensive academic research and is designed using the same technology which was successful in four US-based NIST Challenges.

ESET Mobile Security Premium earns “Approved Mobile Product” certification by AV-Comparatives for the second year in a row

ESET Mobile Security Premium excelled in AV-Comparatives’ Mobile Security Report 2023

BRATISLAVA — July 15, 2023 — ESET, a global leader in cybersecurity, is proud to announce that its ESET Mobile Security Premium has recently earned the prestigious “Approved Mobile Product” award by AV-Comparatives, an independent testing lab specializing in antivirus and security software evaluations. Receiving this recognition in consecutive years is emblematic of ESET’s commitment to its mission and vision, showcasing its outstanding performance and effectiveness against the latest mobile threats.

AV-Comparatives’ comprehensive Mobile Security Review report examined the built-in security measures of Android and evaluated the advanced features provided by third-party security apps from 9 vendors. The assessment covered malware protection, battery consumption, functionality, app design, and overall usability. ESET’s leading product in mobile security, ESET Mobile Security Premium, demonstrated exceptional performance in all areas, providing cutting-edge security features, with a 100% mobile protection rate and 0 false positives, earning the “Approved Mobile Product” recognition.

With the increasing sophistication of cyberattacks targeting mobile devices, ESET Mobile Security Premium provides users with robust protection against malicious apps, phishing URLs, fraudulent emails and other harmful links, smishing, and other vulnerabilities. The solution combines a powerful malware scanner, real-time protection, and a cloud-assisted malware scanner to ensure the highest level of security for Android users.

In addition to its superior malware protection, ESET Mobile Security Premium includes advanced anti-theft features that enable users to remotely control a lost or stolen device. These features include location tracking, capturing pictures of the thief, and triggering actions in response to suspicious device activities. Payment protection is another security feature providing safety for users’ sensitive financial data. It prevents malicious apps from reading or replacing on-screen information of protected apps.

“We are honored for this great achievement of our mobile security solution – to be recognized ‘Approved Mobile Product’ for a second year running. It proves our determination to provide top-tier security solutions that protect our customers’ mobile devices and personal data,” said Matej Chomo, Product Manager for ESET Mobile Security at ESET. “Our journey has been driven by a steadfast commitment to innovation and customer satisfaction. We will continue to innovate and enhance our products to meet the evolving threats in the mobile landscape, ensuring our customers stay one step ahead. With this award by AV-Comparatives, we strive to set new benchmarks for excellence in mobile security.”

ESET Mobile Security Premium is available for download on Google Play and offers a free 30-day trial for users to experience its comprehensive security features. For more information about ESET’s mobile security solutions, please visit the official website.

About Version 2 Digital

Version 2 Digital is one of the most dynamic IT companies in Asia. The company distributes a wide range of IT products across various areas including cyber security, cloud, data protection, end points, infrastructures, system monitoring, storage, networking, business productivity and communication products.

Through an extensive network of channels, point of sales, resellers, and partnership companies, Version 2 offers quality products and services which are highly acclaimed in the market. Its customers cover a wide spectrum which include Global 1000 enterprises, regional listed companies, different vertical industries, public utilities, Government, a vast number of successful SMEs, and consumers in various Asian cities.

About ESET
For 30 years, ESET® has been developing industry-leading IT security software and services for businesses and consumers worldwide. With solutions ranging from endpoint security to encryption and two-factor authentication, ESET’s high-performing, easy-to-use products give individuals and businesses the peace of mind to enjoy the full potential of their technology. ESET unobtrusively protects and monitors 24/7, updating defenses in real time to keep users safe and businesses running without interruption. Evolving threats require an evolving IT security company. Backed by R&D facilities worldwide, ESET became the first IT security company to earn 100 Virus Bulletin VB100 awards, identifying every single “in-the-wild” malware without interruption since 2003.

Unleashing Digital Resilience: Empowering Through Cybersecurity Awareness Training

In an increasingly interconnected world, where our digital lives intertwine with our personal and professional spheres, the importance of cybersecurity has never been more evident. The ever-growing landscape of cyber threats demands that we equip ourselves with the necessary knowledge and skills to safeguard our digital presence. This is where cybersecurity awareness training emerges as a powerful tool. In this blog post, we will delve into the transformative potential of cybersecurity awareness training and how SafeDNS is empowering individuals and organizations to unleash their digital resilience.

Why Cybersecurity Awareness Training Matters:

1. Embracing the Changing Threat Landscape:

As technology advances, so do the tactics employed by cybercriminals. Cybersecurity awareness training offers individuals and organizations an opportunity to stay ahead of the curve by staying informed about the latest threat landscape. By understanding emerging threats and attack vectors, participants can adapt their defenses and effectively mitigate potential risks.

2. Safeguarding Valuable Data Assets:

Data has become a currency of the digital age, making it a prime target for cybercriminals. Cybersecurity awareness training equips individuals with the tools to protect their personal and organizational data. By adopting best practices in areas like password hygiene, email security, and safe browsing habits, participants can safeguard their valuable information from unauthorized access or breaches.

3. Strengthening the Human Firewall:

While technological solutions play a crucial role in cybersecurity, human behavior remains a critical factor. Cybersecurity awareness training helps individuals develop a security-conscious mindset and empowers them to act as the first line of defense. By recognizing and avoiding social engineering techniques like phishing, individuals can prevent attackers from infiltrating their networks.

4. Fortifying the Digital Perimeter:

With the increasing prevalence of remote work and interconnected devices, the digital perimeter has expanded beyond traditional boundaries. Cybersecurity awareness training addresses challenges like securing Wi-Fi networks and managing Bring Your Own Device (BYOD) policies. By understanding and implementing best practices, individuals can establish robust defenses and minimize potential vulnerabilities.

SafeDNS: Empowering Digital Resilience:

SafeDNS understands the transformative impact of cybersecurity awareness training in today’s ever-evolving threat landscape. Our comprehensive training program empowers individuals and organizations to embrace their digital resilience. Covering critical areas such as password hygiene, email security, malware awareness, Wi-Fi security, BYOD security, and ongoing awareness and reporting, our training equips participants with actionable knowledge and practical strategies.

Through engaging modules, real-life examples, and interactive exercises, SafeDNS fosters a culture of continuous learning and preparedness. We emphasize the importance of staying informed about emerging threats and provide participants with the tools to adapt their defenses accordingly. Upon successful completion of the training, SafeDNS recognizes participants’ dedication and commitment with certificates of completion, enhancing their professional credentials.

Learn more about SafeDNS’s cybersecurity awareness training and start your journey towards a more secure digital future.

Embrace the power of cybersecurity awareness training with SafeDNS and unleash your digital resilience today!

About Version 2 Digital

Version 2 Digital is one of the most dynamic IT companies in Asia. The company distributes a wide range of IT products across various areas including cyber security, cloud, data protection, end points, infrastructures, system monitoring, storage, networking, business productivity and communication products.

Through an extensive network of channels, point of sales, resellers, and partnership companies, Version 2 offers quality products and services which are highly acclaimed in the market. Its customers cover a wide spectrum which include Global 1000 enterprises, regional listed companies, different vertical industries, public utilities, Government, a vast number of successful SMEs, and consumers in various Asian cities.

About SafeDNS
SafeDNS breathes to make the internet safer for people all over the world with solutions ranging from AI & ML-powered web filtering, cybersecurity to threat intelligence. Moreover, we strive to create the next generation of safer and more affordable web filtering products. Endlessly working to improve our users’ online protection, SafeDNS has also launched an innovative system powered by continuous machine learning and user behavior analytics to detect botnets and malicious websites.

runZero 3.10: New integrations page, UX improvements, Black Hat 2023!

What’s new in runZero 3.10: #

  • Integrations page and menu updates
  • Redesigned Explorer detail page
  • Coming soon!

Integrations page and menu updates #

Previously, runZero customers used the Connect and Export menus to find and utilize integrations in the runZero console. As of 3.10 the Connect drop-down menu has been renamed to Integrate, and a new page has been added to the left menu bar titled Integrations. The integrations page displays all available integrations for runZero, with direct links to documentation and configuration pages where applicable. The integrations page shows not only the inbound integrations for runZero but our outbound and custom integrations as well, all in one place. We hope this change makes it easier for new and existing customers to configure integrations. It also showcases how runZero can work with other products and technologies in your ecosystem.

Redesigned Explorer detail page #

Officially released in 3.9.6, a redesign of the Explorer detail page refreshes the view of all existing details, and allows runZero users to view Explorer tasks and their status from the details page. Additionally, you can now edit Explorer details directly from the details page.

Coming soon: Want to see what we’ve been devOTing ourselves to lately? #

We have a new feature coming in August to assist with discovering fragile devices in OT environments and beyond. Our R&D teams have worked hard these past few months to make this a reality, and we’re excited to introduce it! Are you curious about our new OT capabilities? Are you going to Black Hat? Reach out to us to schedule an appointment and hear all about it.

Protocol improvements #

Through this release the research team has added or improved the following items:
  • Improved discovery of SSDP services providing visibility into devices that may need those services disabled
  • Added additional data extraction capabilities to our SSDP and UPnP probes
  • Added detection of SOCKS proxies
  • Improved our detection and handling of spoofed/invalid NTLMSSP versions in the SMB probe

Fingerprint improvements #

New fingerprints were added for products by Debian, DW, FRRouting Project, Google, Huawei, IADea, IBM, IndigoVision, ISC, Lexmark, MiniDLNA Project, Netgear, Nokia, ONVU Technologies Group, OpenBSD, Palo Alto Networks, QSI, ServerTech, Siemens, Siqura, Sony, StarSat, Tycho, and Ubiquiti.

Rapid response #

The research team published a blog post about finding vulnerable instances of the Fortinet SSL VPN in response to the publication of a critical vulnerability that could allow remote unauthenticated exploitation.

Release notes #

The runZero 3.10 release includes a rollup of all the 3.9.x updates, which includes all of the following features, improvements, and updates.

New features #

  • An integrations page has been added to improve visibility and simplify configuration.
  • An update to the Trends tab of Attack Surface Management graphs has been added to show enhanced date and time data.

Product improvements #

  • Assets with hostnames starting with a numeric prefix are now allowed to merge.
  • Inventory searches using keyword organization properly warn that it cannot be used unless either that specific organization or the All Organizations option are chosen from the drop-down in the upper right of the console.
  • Improved detection of various printer models.
  • The Explorer details page has been redesigned.
  • Improved database performance for asset, site, and organization delete operations.
  • Improved database performance for outlier and vulnerability processing.
  • Improved database performance for concurrent integration processing.
  • Additional MAC address detection through SSDP and UPnP services.
  • Improved operating system and hardware fingerprinting of Palo Alto Networks devices.
  • Trial accounts can now create Custom Integrations.
  • Discovery of SSDP services has been improved.
  • Improved handling of email send errors.
  • Asset correlation has been improved for switches with overlapping MAC addresses.
  • Improved detection of AIX systems.
  • Reduced OS fingerprinting false positives against assets with non-Microsoft SMB stacks.
  • Improved handling of login tokens.

Integration improvements #

  • Improved import of assets from Azure Active Directory.

Bug fixes #

  • A bug that could cause the MDNS probe to panic in limited scenarios has been resolved.
  • An issue that could result in the old Explorer details pages being shown has been resolved.
  • A bug preventing Microsoft 365 Defender OAuth Client Credential tokens from accessing Azure government environments has been resolved.
  • A bug that could result in invalid Last Seen values for Rapid7 assets has been resolved.
  • A bug that could lead to stale service entries has been resolved.
  • A bug causing some goals to return an error has been resolved.
  • An issue that could prevent alert rule actions from modifying asset ownership based on software, service, or vulnerability query results is resolved.
  • An issue where dynamic content did not have the header Cache-Control: no-store has been resolved.
  • A bug has been fixed that could cause scans to be dropped with explorer failed to queue task when the Explorer was already handling the configured maximum number of simultaneous scans.
  • A bug causing the task start time to be shown for the scan start time has been resolved.
  • A bug that could prevent the creation of new goals has been resolved.
  • A bug that could prevent those with the annotator role from viewing or modifying Asset Ownership has been resolved.
  • An issue that could prevent navigation to the Account settings page has been resolved.
  • A bug causing JavaScript errors to be thrown when adding or editing Google Workspace connector tasks has been resolved.
  • A bug with thumbprint validation for the LDAP integration has been resolved and the related error messages have been improved.
  • A bug where the link to help for query syntax led to a missing page has been resolved.
  • A bug preventing the Explorer interface and addresses from being populated has been addressed.

About Version 2 Digital

Version 2 Digital is one of the most dynamic IT companies in Asia. The company distributes a wide range of IT products across various areas including cyber security, cloud, data protection, end points, infrastructures, system monitoring, storage, networking, business productivity and communication products.

Through an extensive network of channels, point of sales, resellers, and partnership companies, Version 2 offers quality products and services which are highly acclaimed in the market. Its customers cover a wide spectrum which include Global 1000 enterprises, regional listed companies, different vertical industries, public utilities, Government, a vast number of successful SMEs, and consumers in various Asian cities.

About runZero
runZero, a network discovery and asset inventory solution, was founded in 2018 by HD Moore, the creator of Metasploit. HD envisioned a modern active discovery solution that could find and identify everything on a network–without credentials. As a security researcher and penetration tester, he often employed benign ways to get information leaks and piece them together to build device profiles. Eventually, this work led him to leverage applied research and the discovery techniques developed for security and penetration testing to create runZero.

The OSINT Framework: How Hackers Can Leverage it to Breach Your Organization

Passwords have long been a weak link in the security chain. They can be easily guessed, stolen, or cracked through various malicious techniques. Passwordless login methods eliminate the reliance on passwords altogether, significantly enhancing security. By employing advanced technologies such as public-key cryptography, companies can implement strong authentication protocols that are resistant to brute-force attacks, phishing attempts, and credential stuffing. passwordless ssh portnox

Considering Passwordless Login? Here’s What You Need to Know…

When implementing passwordless login methods for network authentication, cybersecurity professionals should consider the following key factors:
I. Strong Authentication Protocols
Passwordless authentication should employ strong authentication protocols, such as public key cryptography. These protocols add an extra layer of security beyond just passwords and provide more robust protection against unauthorized access.
II. Secure Credential Storage
With passwordless login, sensitive credentials like private keys can be used. It is crucial to ensure secure storage of these credentials, either through encrypted cloud-based storage solutions or hardware-based security modules if necessary. Unauthorized access to these credentials could lead to serious security breaches.
III. User Experience and Adoption
Passwordless methods should be designed with a focus on user experience to encourage adoption. Complex or cumbersome authentication processes can result in user resistance or workarounds that compromise security. Balancing security and usability is crucial for successful implementation.
IV. Robust Identity Verification
Passwordless login should include robust identity verification mechanisms to ensure that the person requesting access is indeed the legitimate user. This can involve factors such as device attestation or contextual information like location or network patterns to establish trust.
V. Monitoring and Logging
It is essential to implement monitoring and logging mechanisms to track authentication events and detect any suspicious or malicious activities. Security professionals should have visibility into the authentication process to identify potential threats and respond promptly to security incidents.
VI. Continual Security Updates and Patches
Passwordless methods, like any other security solution, may have vulnerabilities that could be exploited by attackers. Vulnerability assessments should be conducted to ensure that the authentication system remains resilient against emerging threats. Cloud-native solutions can help eliminate the need for continuous patching, updating and general system maintenance.
VII. Backup and Recovery Mechanisms
Implementing passwordless login should also include considerations for backup and recovery mechanisms. In the event of system failures or credential loss, there should be processes in place to restore access securely and without compromising security.
VIII. User Education and Awareness
Introducing passwordless methods requires educating users about the new authentication methods, their benefits, and best practices. Users should understand the security implications, potential risks, and how to properly use and protect their credentials to maintain a strong security posture.
IX. Threat Modeling and Risk Assessment
Before implementing passwordless authentication, conducting a comprehensive threat modeling and risk assessment is critical. This helps identify potential threats, vulnerabilities, and risks associated with the chosen authentication methods and allows for the implementation of appropriate security controls.

The Future of the Passwordless Login Trend

As the workforce adopts new habits and technologies and cyber threats evolve in parallel, the adoption of passwordless login methods for security authentication is gaining momentum. By eliminating the weaknesses of traditional passwords, companies can enhance security, streamline user experience, and meet compliance requirements. Passwordless authentication provides a robust and convenient solution for organizations seeking to protect sensitive data, accommodate mobile workforces, and reduce the costs associated with password management. Embracing this innovative approach empowers companies to strengthen their security defenses, adapt to the changing work environment, and stay resilient in the face of evolving cyber threats.

About Version 2 Digital

Version 2 Digital is one of the most dynamic IT companies in Asia. The company distributes a wide range of IT products across various areas including cyber security, cloud, data protection, end points, infrastructures, system monitoring, storage, networking, business productivity and communication products.

Through an extensive network of channels, point of sales, resellers, and partnership companies, Version 2 offers quality products and services which are highly acclaimed in the market. Its customers cover a wide spectrum which include Global 1000 enterprises, regional listed companies, different vertical industries, public utilities, Government, a vast number of successful SMEs, and consumers in various Asian cities.

About Portnox
Portnox provides simple-to-deploy, operate and maintain network access control, security and visibility solutions. Portnox software can be deployed on-premises, as a cloud-delivered service, or in hybrid mode. It is agentless and vendor-agnostic, allowing organizations to maximize their existing network and cybersecurity investments. Hundreds of enterprises around the world rely on Portnox for network visibility, cybersecurity policy enforcement and regulatory compliance. The company has been recognized for its innovations by Info Security Products Guide, Cyber Security Excellence Awards, IoT Innovator Awards, Computing Security Awards, Best of Interop ITX and Cyber Defense Magazine. Portnox has offices in the U.S., Europe and Asia. For information visit http://www.portnox.com, and follow us on Twitter and LinkedIn.。

Need help? Our team is just a message away