API Attacks, Breaches Piling Up
APIs have emerged as a major attack vector, with only 6% of companies reporting no API-related security issues in the past year, according to one report. Find out why API security is so problematic.
cybersecurity
Five Functions That Benefit From Cybersecurity Automation
Businesses are facing staff shortages and budget constraints that impact their ability to maintain security. Cybersecurity automation, including AI-powered intelligent automation, is helping close the gap.
SASE Model Proving Value Beyond Remote Work Scenarios
When the pandemic hit, enterprises rushed to the new cloud-based networking solutions for remote employees. Now it’s being applied to on-prem data centers and WANs.
Paying Hackers’ Ransom Demands Is Getting Harder
The U.S. Treasury Department has sanctioned a cryptocurrency exchange for its role in facilitating ransomware payments and issued an advisory to private companies against making such payments.
OMIGOD Vulnerability Exposes Virtual Machines Running Inside Azure
New Azure-based OMIGOD vulnerability is easy to exploit and has already been attacked by Mirai botnet.
What to expect from SASE certifications
NETWORK WORLD–Free and fee-based SASE certifications are cropping up from vendors including Cato Networks, Netskope and Versa Networks. Are they worth the effort?
Zero-Trust Model Gains Luster Following Azure Security Flaw
DATA CENTER KNOWLEDGE–Microsoft Azure vulnerability, ChaosDB, exposes the fact that enterprises can’t simply trust cloud providers to protect the infrastructure. Experts point to the zero-trust model and ID-based authentication as critical to cloud security strategy.
Microsoft Azure Vulnerability ‘Breaks Secure Multitenancy’
DATA CENTER KNOWLEDGE–Researchers from cloud security firm Wiz reported an Azure vulnerability affecting Cosmos DB that gave them complete access to thousands of Azure customers.
Taking a Close Look at the $2B for Cybersecurity in the $1T US Infrastructure Bill
DATA CENTER KNOWLEDGE–The $1 trillion spending package includes funds for bolstering cybersecurity posture in critical digital infrastructure.
What is a managed service provider? Strategic outsourcing for IT services explained
CIO–MSPs are increasingly being turned to as strategic outsourcing partners that remotely manage or delivery IT services, thanks to talent and technologies most enterprises lack.
Ransomware recovery: 8 steps to successfully restore from backup
The best way to recover from a ransomware attack is to have a reliable and fast backup process. Here’s how to do it.
Why CISA’s China Cyberattack Playbook Is Worthy of Your Attention
DATA CENTER KNOWLEDGE–The advisory outlines the tactics, techniques, and procedures China’s state-sponsored cybercriminals use to breach networks.
The Kaseya Ransomware Attack Is a Wakeup Call for MSP-Reliant IT Shops
DATA CENTER KNOWLEDGE–The pandemic has driven more outsourcing to MSPs, making them prime targets for cybercriminals wanting to scale their attacks.
Security Problems Worsen as Enterprises Build Hybrid and Multicloud Systems
DATA CENTER KNOWLEDGE–Under pressure to accelerate cloud adoption, IT orgs often skip over crucial security planning steps.
Botnet attacks on APIs: Why most companies are unprepared
CSO–The use of botnets to target applications for illegal and unethical purposes is growing, yet implementation of bot detection tools and best practices lags.