Three-quarters of companies suffered downtime in the past year

downtime

New research from Atlas VPN shows 76 percent of companies globally have suffered service downtime in the past year.

Reasons include system crashes, human errors, and cyberattacks as the primary causes of downtime. In addition, many IT managers are concerned about increasing numbers of politically-driven cyberattacks.

Continue reading

Half of cybersecurity professionals consider quitting due to pressure

stressed overwork pressure

New research from Vectra AI shows 94 percent of IT security leaders have felt increased pressure to keep their company safe from cyberattacks in the past year, while half say they feel burned out and ready to quit.

The survey of 200 UK IT security decision-makers finds 51 percent of respondents have experienced negative emotions such as depression, anger, or anxiety due to feeling overwhelmed by work.

Continue reading

Talent shortages leave businesses more exposed to attacks

talent

Whether it's down to the Great Resignation or a lack of the correct skills, security and development teams are struggling to find and retain enough skilled staff.

A new study released today by cybersecurity company Cobalt finds that 45 percent of security respondents say their department is currently experiencing a shortage of employees.

Continue reading

New malware targets AWS Lambda cloud environment

Malware magnifier

The latest research from Cado Security reveals the first publicly known malware that is specifically designed to execute in the AWS Lambda serverless environment.

Named Denonia, the malware downloads and runs crypto mining software, and demonstrates how attackers are exploiting newer cloud computing use cases to take advantage of their ephemeral nature to evade detection.

Continue reading

Avast One receives a major makeover to improve protection

Avast One main screen

Launched last year, Avast One aimed to offer a comprehensive protection suite with both free and paid for editions.

The company has now announced significant enhancements to the product, with new features designed to protect people from online scams, fraud, and other personal privacy threats.

Continue reading

Employees not fully prepared for cyberattacks say IT leaders

Confident businessman

Over half (56 percent) of IT security leaders say that their non-technical staff are only 'somewhat' or 'not at all' prepared, for a cyberattack.

A new survey by Egress of 600 IT security leaders also shows that 77 percent of respondents have seen an increase in security compromises since going remote twp years ago, and there's a continued significant risk to organizations.

Continue reading

Financial fraud attempts up over 200 percent in two years

hack money

A new study into financial fraud from Feedzai finds that fraud attempts globally are up by 233 percent over the last two years.

Over the same period there has also been a whopping 794 percent increase in fraud on digital entertainment transactions. The effects of the pandemic are evident too with a 65 percent increase in online transactions and a 75 percent drop in US cash withdrawals.

Continue reading

Data privacy is the top metaverse challenge say developers

metaverse neon

Ever since Facebook rebranded itself as Meta at the tail end of last year the metaverse has been creating a buzz in the tech world -- though not so much outside it.

Real-time engagement API specialist Agora has carried out a study that looking at how developers feel about the current state and evolution of the metaverse, which finds that data privacy is the biggest concern.

Continue reading

94 percent of critical assets can be compromised within four steps of a breach

Network security

A new study from Israel-based XM Cyber, based on findings from nearly two million endpoints, files, folders and cloud resources throughout 2021, shows 94 percent of critical assets can be compromised within just four steps of the initial breach point.

The research team analyzed the methods, attack paths and impacts of attack techniques that imperil critical assets across on-premise, multi-cloud and hybrid environments, and developed tips for thwarting them.

Continue reading

US among the most expensive for fixed-line broadband

Broadband

The US ranks 134th in the world for fixed-line broadband costs with an average package price of $55 per month making it one of the more expensive developed nations.

If you want a cheap service you need to head to Syria with an average monthly cost of just $2.15 according to a study from comparison site Cable.co.uk. At the other end of the scale the African state of Burundi tops the chart with an eye-watering monthly cost of $429.95.

Continue reading

New endpoint solution reduces risk and streamlines patching

Endpoint protection

A new multi-vector endpoint detection and response (EDR) solution from Qualys aims to reduce the risk of compromise with vulnerability management and patching all from a single agent.

Traditional EDR solutions still focus solely on endpoint activity to detect attacks and incorporate only MITRE ATT&CK techniques -- not tactics. This means security teams are forced to rely on additional tools to strengthen their risk management.

Continue reading

Two-thirds of ransomware victims paid up last year

ransomware cash

A record 71 percent of organizations were impacted by successful ransomware attacks last year, according to the 2022 Cyberthreat Defense Report (CDR) from CyberEdge Group, up from 55 percent in 2017.

Of those that fell victim, almost two-thirds (63 percent) paid the requested ransom, up from 39 percent in 2017.

Continue reading

The challenges of vulnerability management [Q&A]

open digital lock

Recent vulnerabilities like Log4j have highlighted how difficult it can be to manage risks and ensure that software patches are kept up to date.

We spoke to Rob Gurzeev, CEO of attack surface management specialist CyCognito, to discuss the challenges involved and how to deal with them.

Continue reading

Log4j continues to be a problem for enterprises

server vulnerability unlock

It's now over three months since the Log4Shell vulnerability, affecting the Log4j logging framework, first appeared.

But new research from Randori shows that it's still giving headaches to enterprises and identifies the top 10 attackable targets.

Continue reading

Why enterprises need to consolidate their cybersecurity efforts [Q&A]

DevSecOps

With the COVID-19 pandemic and drive for digital transformation the shift to a new distributed workforce model continues at pace.

But this can also leave businesses vulnerable as attack vectors have become more sophisticated -- resulting in a continued shortage of security experts.

Continue reading

Load More Articles