Reactive approach to cybersecurity is a problem for organizations

Businessman screaming and pointing at his laptop

A new survey shows respondents feel a reactive approach to security is problematic for their organizations. 90 percent of them say they struggle with challenges when they react to cyber security problems as they arise.

The study, conducted by Forrester Consulting for WithSecure, shows most organizations currently approach cyber security on a reactive basis, with 60 percent of respondents saying they react to individual cyber security problems as they arise.

Continue reading

60 percent of organizations have had authentication breaches in the last year

Passwordless authentication - Inscription on Blue Keyboard Key.

Insecure authentication is a primary cause of cyber breaches and cumbersome login methods take an unacceptable toll on employees and business productivity, according to a new report.

The 2023 State of Passwordless Security Report, released by HYPR and Vanson Bourne, shows that 60 percent of organizations have reported authentication breaches over the last 12 months and that three out of the top four attack vectors are connected to authentication.

Continue reading

Smaller means safer as bigger businesses see more endpoint infections

Computer security

Of businesses with between 21 and 100 protected endpoints, only five percent encountered a malware infection in 2022. For smaller firms with one to 20 endpoints, the rate is 6.4 percent, but as companies grow so do infections.

For businesses between 101 and -500 endpoints the rate rises to 58.7 percent and over 500 it's 85.8 percent. These findings are from a new report by OpenText Cybersecurity which looks at the latest threats and risks to the small and medium business (SMB) and consumer segments.

Continue reading

Phishing emails soar as messages bypass standard email security solutions

phishing keyboard hook

A new report shows that 2022 saw a 569 percent increase in malicious phishing emails and a 478 percent increase in credential phishing-related threat reports published.

The report from Cofense also looks at emails bypassing SEGs and hitting users' inboxes and highlights that delivery methods for carrying out phishing campaigns continue to keep up with the advancement of technology. Cofense has witnessed a continued blending of tactics to make detection and mitigation even more difficult for organizations.

Continue reading

API attacker activity up 400 percent in six months

api

The latest State of API Security Report from Salt Security shows a 400 percent increase in unique attackers in the last six months.

In addition, around 80 percent of attacks happened over authenticated APIs. Not surprisingly, nearly half (48 percent) of respondents now say that API security has become a C-level discussion within their organization.

Continue reading

Getting the most value out of your data [Q&A]

folder stack

The past few years have seen a boom in digital transformation as enterprises have sought to modernize their operations to take advantage of a new, more flexible world of work.

But this change has often led to unwieldy data structures that are difficult to manage, which means that extracting value from the data is harder than it should be.

Continue reading

Disruptions to eCommerce cost businesses up to $1 million a month

women having problem buying on line

A new survey of retail and consumer brands shows that nearly 40 percent of all respondents suffer customer-impacting disruptions, which cost up to $1 million per month.

The survey, conducted by Forrester Consulting on behalf of Catchpoint, finds 61 percent of respondents say internet disruptions have resulted in lost revenue, while 64 percent report damage to their brand's reputation that led to lack of consumer confidence.

Continue reading

Companies struggle to protect against insider risks

insider threat

Although more than 70 percent of companies say they have an insider risk management (IRM) program in place, the same companies experienced a year-on-year increase in data loss incidents of 32 percent, according to a new report from Code42 Software.

Based on a survey of 700 cybersecurity leaders, cybersecurity managers and cybersecurity practitioners in the US, conducted by Vanson Bourne, the report shows 71 percent expect data loss from insider events to increase in the next 12 months.

Continue reading

Stolen credentials and the rise of the 'traffers'

Password

Even as we move towards passwordless authentication methods, stolen credentials remain a major problem for businesses.

A new report from cyber risk management company Outpost24 highlights the increasing professionalization of the market for stolen credentials thanks to the rise of what are known as 'traffers'.

Continue reading

75 percent of SaaS applications pose a risk to enterprises

Risk dial

The past few years have seen massive growth in the number of SaaS applications used by enterprises, but new research from Spin AI shows that 75 percent of SaaS applications pose a high or medium risk to data stored in either Google Workspace or Microsoft 365.

On average, 35 percent of apps with OAuth permissions to Google Workspace or Microsoft 365 are classified as high risk. For large organizations (with more than 2,000 employees) 56.91 percent of apps pose a high risk.

Continue reading

Okta launches identity verification for Zoom users

ID verification

Many organizations have come to rely on Zoom as a means of connecting employees and customers in a hybrid environment.

But this comes with challenges when it comes to keeping meetings secure without harming productivity. Identity management platform Okta is launching a new identity verification feature that will authenticate Zoom meeting attendees in End-to-End Encryption (E2EE).

Continue reading

Banks lack transparency over their use of AI

Artificial intelligence banking

Banks across North America and Europe are failing to publicly report on their approaches to responsible AI development, according to new research from Evident.

While AI is already used by banks for many critical processes, from authenticating customers to risk modeling, eight of the 23 largest banks in the US, Canada and Europe currently provide no public responsible AI principles.

Continue reading

Integrating security into the development process [Q&A]

DevSecOps

Historically, security has been treated as something as an afterthought in the IT industry. In more recent years though there has been pressure to introduce 'security by design' to ensure that products are developed with best practices in mind.

We spoke to David Melamed CTO of Jit to find out about integrating security and how security tools can be used by developers not just security professionals.

Continue reading

Data management gets more complex as IT infrastructure diversifies

Cloud maze complexity

IT infrastructure is increasingly diverse, with organizations struggling to integrate data management and control.

The latest Enterprise Cloud Index from Nutanix shows the majority of IT teams (60 percent) use more than one IT infrastructure -- a trend that's expected to intensify in the future -- but struggle with visibility of data across environments.

Continue reading

How artificial intelligence is transforming banking [Q&A]

Robot Bitcoin Pink Piggy Bank

Banking is a key industry, playing a major role in the economy, historically though it's been one that's slow to adapt to technological advances.

That's starting to change though, partly down to the arrival of more agile fintech companies. We spoke to co-founder of Iterate.ai, Brian Sathianathan, to find out more about how AI and machine learning can help transform the banking sector.

Continue reading

Load More Articles