Where You Need Trust, You Need PKI

posted on February 28, 2022

tags:

For all the good created by the Information Age from cultural exchange to advances in medical care – this massive network of communication has offered up new possibilities for opportunists and criminals to take advantage of our users and an easy willingness to trust in technology. The solution to this threat is simple. Build the ...

The post Where You Need Trust, You Need PKI appeared first on TechRepublic.

The Solarwinds Tipping Point

posted on February 27, 2022

tags:

What makes the SolarWinds attack so astonishing is its scale. The infected Orion software was sold to more than 33,000 customers. Sunburst, the aptly named malicious code, was distributed to as many as 18,000 organizations. For months, this Trojan Horse sat inside the firewalled networks of tens of thousands of unsuspecting businesses and government agencies. ...

The post The Solarwinds Tipping Point appeared first on TechRepublic.

How Cyber Attacks Can Have Devastating Effects on the Nuclear-Armed World

posted on February 21, 2022

tags:

Cyber-espionage is an imminent threat to the world, especially to the nuclear armed nations. This cyber threat poses nuclear risks that can be extremely dangerous. Hacks can be used to undermine the security of nuclear materials and give access to cyber-terrorists to exploit it to the devastation of the world. Moreover, this cyber threat can also compromise nuclear command and control systems that can suppress the nuclear weapon employment of a nation.

The Internet Has Made the Nuclear Realm All the More Volatile

Research on traditional nuclear security has shown that the primary focus of nuclear practices had been to prevent physical attacks by using guns and guards in order to thwart theft of materials to build a bomb. Also, these practices aimed at preventing unauthorized access of nuclear command and disabling any sabotage of nuclear facilities. However, there is no noteworthy progress in preventing the growing threat of cyber-attacks on nuclear weapons and storage.

The nuclear-armed nations are significantly vulnerable and should now work aggressively on achieving a breakthrough to overcome this advancing threat.

It goes without saying that the governments around the world are cognizant of the gravity of this situation and are working to understand and minimize the vulnerabilities. But due to the increased advancement in technology, these cyber threats are becoming more sophisticated each day. Still, in the nuclear world, there is not a single nation that can tactfully handle the cyber threats aiming at their nuclear weapons. Even in countries with advanced nuclear power and research programs, measures to control the cyber-nuclear threat have been insignificant or in other words, they are non-existent. It has been found that the expertise and research developments in the field of nuclear cybersecurity are in short-supply and the International Atomic Energy Agency (IAEA), which provides countries with assistance and training in this area, does not have the resources necessary to address the growing threat.

Nuclear Grade Cyberattacks Can Be Dangerous

One can think of three basic scenarios of how a nuclear grade cyberattack can be developed and play a threatening role in destroying the peace of the world. In simple terms, a nuclear grade cyber-attack can happen when a country’s intelligence service steals, deletes, or compromises another nation’s military data. The subsequent attacks and retaliations between the two can lead to a nuclear catastrophe and vast damage to civilian life.

Another situation like this might occur if a nation, a terrorist organization or any non-state actor unleashes a huge destructive cyberattack that can affect electrical utilities, water treatment facilities and destroy industrial zones.

Perhaps, the most devastating possibility is that the attack can take place by mistake. In today’s digital world one wrong click might bring a destruction of infrastructure and human life.

Nuclear Hack Attacks Can’t Be Compared to iOS or Android Monitoring App

Let’s be clear about the magnitude of a hack attack on nuclear arsenals. Rest assured it is a lot more menacing than malware or an Android Monitoring App that might leak data at worst.

Taking into account the current scenario, there is no safe way to protect a state against a nuclear cyber-attack, except to block those avenues that make such threats possible in the first place.

The first thing to make sure is that a country’s government, businesses and its people secure their systems to prevent any person from intruding into their personal information and official domains. There should be no information available to the hackers to dig into and exploit it to build their own connections.

The industrial zones, electrical facilities, transportation companies and firms need to be more secure as hackers can work covertly to access a nation’s most critical equipment and bring them under their control. An analysis has shown that nearly three-quarters of energy companies in the U.S. had experienced some sort of network intrusion in the previous year. The intruders accessed the systems to execute hack attacks on industrial machinery and other critical equipment.

It is pertinent to mention here that such important infrastructures can only be protected through skilled cybersecurity personnel and expert staff who can do research in this field to meticulously handle the cyber-security threats on nuclear facilities. A proper department to handle nuclear threats should be developed by every nuclear-armed nation in which highly qualified professional teams should be employed to protect this highly sensitive area. In the U.S, one recruiter has expressed concern that even some of the jobs that are held by people dealing in cyber-security aren’t sufficiently qualified to do them. The solution is to introduce regular training sessions to teach people in such positions how to contain new cyber-threats and develop effective defensive strategies.

Now is the time for the world to start protecting itself from potential cyber-attacks, especially the nuclear kind. Every individual and government agency including all businesses need to work on finding solutions in order to secure their country’s vital systems on which people’s lives depend.

The post How Cyber Attacks Can Have Devastating Effects on the Nuclear-Armed World appeared first on SiteProNews.

The 7 Critical Reasons You Should Backup Your Microsoft 365 Data

posted on February 17, 2022

tags:

There is a common misconception that Microsoft fully backs up your data on your behalf, but the reality is that this is your data and YOUR responsibility. Accidental deletion, internal and external security threats, and meeting legal and compliance requirements are just a few reasons why backing up Microsoft 365 is critical for your organization. […]

Machine Learning – What It Can Bring to Cyber Security?

posted on February 13, 2022

tags:

In 1959, Arthur Samuel derived the term of machine learning and defined it as a field of study that provides computers the ability to learn without the addition of explicit coding. Machine learning enables computers to think and learn from their surroundings using various data models as well as trial and error algorithms. The term ‘machine learning’ is self-explanatory as it provides the computer with the ability to think and make decisions by using various data training and testing algorithms, thus giving the ‘machines’ the ability of ‘learning’ and having control of driving conclusions based on the trained data. The addition to machine learning can work great wonders in cyber security.

Machine Learning: Definition and Types

Machine learning is a branch of artificial intelligence, which is a sophisticated technology that performs tasks without human help. The algorithms are designed to learn from experience and better perform at complex tasks. Netflix’s recommendation system is a good example here.

Types of Machine Learning

The programmers or data scientists choose the type of machine learning based on the data they are dealing with. The four types include supervised, unsupervised, semi-supervised, and reinforcement.

1. Supervised Learning

Algorithms in supervised machine learning are trained based on the labeled datasets which in turn classifies the data and derives the results accordingly. Supervised learning is task-driven.

Example: Filtering out spam emails.

Algorithms Used: Naive Bayes algorithm, support vector machine(SVM), etc. are some examples.

2. Unsupervised Learning

Datasets are not labeled in this one and the algorithm analyzes the datasets and looks for the presence of any pattern in them. Unsupervised learning is data-driven.

Example: Image recognition.

Algorithms Used: K-means clustering, probabilistic clustering, etc.

3. Semi-Supervised Learning

It is a balance between supervised and unsupervised machine learning algorithms and uses a mixture of both labeled and unlabeled data sets. The semi-supervised learning model explores its understanding of the data itself.

Example: Audio and video manipulation.

Algorithms Used: Self-trained naive Bayes algorithm (natural language processing).

4. Reinforcement Learning

Learns the environment on its own and doesn’t use the sampled datasets. Reinforcement machine learning algorithm operates on the trial and error method. Bad outcomes are rejected and the system uses the correct generated results for training.

Example: Policy creation.

Algorithms Used: Q-learning.

A Word on Sophia, the Robot

Activated in 2014, Sophia is the first humanoid robot. She is smart and can not only express facial expressions but can also use humor in her words. Sophia was first launched publicly in Texas. She was also granted citizenship by Saudi Arabia. In the not too distant future, robots will be able to perform daily regular activities in the same manner that humans do in real life.

Machine Learning and Cybersecurity: Enhancing Security

Machine language is imperative to realize the dream of a digital world, giving decision-making control to machines and providing ease to human beings from working on tardy tasks. Apart from just being a helper in daily work, machine learning can also provide benefits in the department of cybersecurity, which is the most present-day demand by the institutes working on confidential data. It is imperative for companies to have a secure system that protects their confidential records and prevents any attempts of hacks. Data breaches of, for example, company profiles can significantly damage their reputation, lead to financial loss and even fines. The introduction of machine learning in cyber security can help solve the security issue present in organizations today.

The future of cyber security lies in advanced technologies like machine learning. With machine learning, we can add security systems trained to recognize the patterns and improve the security systems based on the generated outcomes. Artificial intelligence can cover the loopholes and the hidden ambiguities in cybersecurity, with advancements like facial recognition, voice recognition, eye recognition, and fingerprint recognition, etc. Moreover, technologies like an identity verification system and know your customer kyc compliance can also provide security control on login checks to stop unauthorized users from accessing and corrupting the system.

Role of Identity Verification in Cybersecurity

The addition of identity verification can provide the security of the confidential information needed at the current moment. An identity verification system authenticates the user before giving them access to their system. Identity verification solutions authenticate the identity of customers during onboarding. The verification documents presented by the consumer are verified for their originality. The user’s identity is verified with biometric verification services like Facial recognition that can use 3D mapping and analyze the skin texture along with detecting the liveness of the user.

Conclusion

The chairman of Google, Eric Schmidt, says that the press and media have immensely covered the innovation of self-driving cars and robots whereas the real future of the company lies in machine learning. Machine learning gives computers the ability to become smarter and more personal.

To wind up the whole conversation, machine learning is important, not only for digitizing the world but also for enhancing the current cybersecurity precision and improving the safety protocols of organizations.

The post Machine Learning – What It Can Bring to Cyber Security? appeared first on SiteProNews.

2021 State of the Threat Report: A year in Review

posted on February 7, 2022

tags:

Ransomware remains the number one threat for most organisations. This report comprehensively examines the adversary’s ongoing innovation and evolution of tried-and-true TTPs like ransomware, business email compromise, zero-day threats, espionage, and more. You’ll read about some of the biggest attacks rolling across news headlines, as well as how both the government and security industry are ...

The post 2021 State of the Threat Report: A year in Review appeared first on TechRepublic.

Secureworks Threat Intelligence Executive Report 2021 Vol 6

posted on February 6, 2022

tags:

The Secureworks Counter Threat Unit™ (CTU) research team analyses security threats and helps organizations protect their systems. During September and October 2021, CTU researchers observed notable developments in threat behaviours, the global threat landscape, and security trends, and identified lessons to consider. What you’ll learn: Qakbot resurrected and returning to ransomware Cobalt Strike benefits penetration ...

The post Secureworks Threat Intelligence Executive Report 2021 Vol 6 appeared first on TechRepublic.

McAfee Enterprise and FireEye Release Report Findings

posted on December 20, 2021

tags:

McAfee Enterprise & FireEye release its Cybercrime in a Pandemic World: The Impact of COVID-19  research, examining the need for organisations to prioritise and strengthen their security processes ahead of the holiday season

The findings indicated that 81% of global organisations experienced an increase in cyber threats during the pandemic, with these threats set to increase well into the new year. As Australian’s prepare for the upcoming holiday season, businesses can expect to see a rise in cyber threats as employees and leaders count down the days for the upcoming holiday period. Key findings reveal: 

  • Over half (51%) of Australian organisations have suffered from downtime due to a cyber concern in the last 18 months, with 82% of those happening during peak season  
  • 83% of Australian IT professionals find maintaining a fully staffed security team even more challenging during peak periods
  • 87% of Australian IT professionals anticipate a moderate or even substantial impact on their business due to increased demand for their products and services during the holiday period
  • “Everything shortage” this holiday season – creating perfect catalyst for cyber threats to supply chain, ecommerce and travel 

“After a tough lockdown period in 2021, Australians are eager to celebrate this upcoming holiday season with friends and family, and spend some of their accumulated savings on cherished activities. This pent up demand will provide a great window for opportunistic cyber criminals, who will look to exploit businesses who are more focused on reinvigorating their bottom-line, than strengthening their cybersecurity infrastructure. Cybersecurity due diligence must remain front-of-mind for businesses of all sizes.”, said Bastian Schmederer, Senior Regional Director, Australia & New Zealand, McAfee Enterprise.

 â€œIt is imperative that all business of scale evaluate and prioritise security technology to keep them protected, especially during peak seasons like the holidays,” said Bryan Palma.

Cybercrime is a modern day problem and is predicted to grow. The Internet has opened up many new opportunities but also has been the cause of many new crimes including identity theft, online fraud and scams.

Online scams have resulted in many businesses losing millions of dollars. There are several different types of cyber-attacks on businesses including Online phishing, Malware, Lures, Cyber threats, Spyware and Mobile malware. It is very important that businesses understand what these different types of attacks are, how they work and how to protect themselves from them.

Cyber criminals are constantly developing new ways to commit crimes using the Internet. They are constantly finding new ways to attack Australia based businesses, causing financial and personal loss. There are many different types of crimes and attacks taking place around the world every day and Australia is not immune. Criminals target businesses and individuals online, which can result in serious consequences for the company and the individual.

“Australia is working hard to combat cybercrime and the best way to fight this type of crime is to educate everyone,” said CEO Tech Business News

It’s important for a business to understand how the Internet and technology affects everything around them and they should be careful about the information they publish online and they should take every measure to protect themselves from potential harm.

This is the only way that Australia can stay safe from the global threats posed by cyber-criminality and every business should be doing all they can to protect themselves.

All businesses should educate their staff about the prevention of online crime and about the different types of cybercrime and work closely with the law enforcement community to apprehend criminals and stop the illegal distribution of confidential and proprietary information.

Cybercrime is a serious matter that Australia is dealing with on a daily basis and it is important that every single business works together to combat this issue on an ongoing basis. 

Australia Fights Back

The United States and Australia have been battling cybercrimes for quite some time. The Internet has provided a tremendous source of potential revenue for both sides. This has led to many issues including fraud, identity theft and money laundering.

Cyber criminals have even gained access to some of the most sensitive and personal data in the computer systems of individuals. The fight to defeat cybercrime is a never ending battle between governments, law enforcement agencies, private sector interests and cyber criminals.

One of the ways that Australia fights cyber criminals is through trying to educate individuals on the dangers of using the Internet.

The Australian government has published a number of educational and awareness raising websites that will assist consumers with using the Internet safely. The Australian government warns that a lack of technological literacy is leading to more Internet scams.

The Australian government has also announced a number of public information portals that will allow users to obtain more in depth information on cyber threats. These public information portals will be directed at protecting individual privacy and increasing information sharing across the Internet.

The post McAfee Enterprise and FireEye Release Report Findings appeared first on SiteProNews.

Are your Microsoft 365 tenants exposed? A better path to security

posted on December 19, 2021

tags:

#sherweb#cybersecurity#microsoft365#officeprotect Your clients expect you to protect them, or they’ll take their business elsewhere. Learn how Sherweb’s MDR service, Office Protect Alliance, can help you delight your clients by fortifying their security posture. 0:00 – 1:55 – Introduction 1:55 – 23:35 – Threats your clients face 23:35 – 27:11 – Office Protect overview 27:11 – […]

How are Electronic Signatures and Digital Signatures Different from Each Other?

posted on December 10, 2021

tags:

People often get confused between an electronic signature and a digital signature. Many people think that the meanings of both these terms are identical and that they are interchangeable. However, this is not the case. Both these terms are different from each other. In this article you will learn about electronic and digital signatures in detail and how these two concepts are different.

Electronic Signatures

An electronic signature, also known as eSignature, is a digital form of a wet ink signature. It can be described as any electronic symbol, image, process, or sound attached to a message or document to recognize the identity and provide consent on it. It is often associated with a record or contract where a third party intends to sign the document. To put it simply, when there is a requirement to verify the document, eSignatures are used. It specifies that a person has acknowledged the contents of any electronic message or is authorizing that he/she is the person who has written the message.

Presently in several countries, including the United States, Australia, the European Union, India, and Brazil, eSignatures are well recognized within their jurisdiction as well as traditional signatures. It means that these signatures are considered completely legal and valid in these countries.

Digital Signatures

A digital signature is a secured signature generally used with an electronic signature and comes with encryption criteria. It helps identify a person’s identity in digital forms, like a fingerprint embedded in a document. To put it simply, when there is a requirement to secure a document, digital signatures are used. When it comes to the authentication of digital signatures, it is performed by trusted certificate authorities that are liable for offering digital certificates similar to licenses or passports.

Thus, it is usually authorized. A person requires a digital certificate so that he/she can be linked to the document. A digital certificate plays an important role in validating the document to determine its legitimacy and to show it has not been forged. This further helps in authenticating the identity of the original person with the signature.

Digital documents that are obtained online are often at the risk of tampering. However, with the help of a digital signature, the documents can be secured completely, thus preventing the chances of tampering by any fraudulent party. For any kind of modifications or amendments, only the authorized person can access the document.

Differences Between eSignatures and Digital Signatures

Let’s have a look at some of the key points that shows the clear difference between eSignatures and digital signatures:

  • As mentioned in the description, an electronicsignature is a digital form of a wet ink signature that is legally binding and secure. On the other hand, a digital signature is also a secured form of a signature that works with eSignature and usually relies on public key infrastructure.
  • eSignatures can be anything: a symbol, image, sound, or process that is linked to a message or document to recognize the identity of a person and to give consent to it. On the other hand, a digital signature can be considered an electronic fingerprint encoded that helps confirm a person’s identity.
  • eSignatures are generally used to verify a document, whereas digital signatures are often used to secure a document.
  • In the validation process of eSignatures, there usually are no trusted certificate authorities or trust service providers involved. Some national acts and regulations usually validate these. On the other hand, the digital signatures validation process is carried out by trusted certificate authorities or trust service providers.
  • eSignatures may be at risk of tampering. However, digital signatures are a highly secured form of signature.
  • Some of the most common types of eSignatures are verbal and electronic ticks or scanned signatures whereas in comparison, the different types of digital signatures include Adobe and Microsoft.
  • When discussing the document processing platform, a digital signature can be either a Microsoft pdf or an Adobe pdf. On the other hand, an eSignature can be a basic eSignature, click-to-sign signature, advanced e signature, or qualified signature. There are many eSignature tools like GoSigner, DigiSigner, DocuSign, and so on.
  • An eSignature usually comprises fewer security features, whereas a digital signature comprises numerous security features, making it more secure.
  • An eSignature is a general expression and much broader concerning electronic data. On the other hand, a digital signature is a signature with public-key-based cryptography.

Conclusion

Though the terms digital signature and electronic signature are sometimes used interchangeably, these are completely different from each other. Both are used widely today for various purposes. When it comes to choosing between the two, both have their importance. You can choose the type of signature based on the type of document you want to sign and the level of authenticity that is required or expected of the document.

The post How are Electronic Signatures and Digital Signatures Different from Each Other? appeared first on SiteProNews.