How to build a successful data lakehouse strategy [Q&A]
The data lakehouse has captured the imagination of modern enterprises looking to streamline their architectures, reduce cost and assist in the governance of self-service analytics.
From data mesh support to providing a unified access layer for analytics and data modernisation for the hybrid cloud, it offers plenty of business cases, but many organizations are unsure where to start building one.
Banking apps targeted by multiple malware families
New research from mobile security platform Zimperium has uncovered 29 malware families targeting 1,800 banking applications across 61 countries in the last year.
US banking institutions remain by far the most targeted by financially motivated threat actors. There were 109 US banks targeted by banking malware in 2023, compared to the next most targeted countries which were the UK (48) and Italy (44). The report also noted that trojans are evolving beyond simple banking apps to target cryptocurrency, social media, and messaging apps.
Bitdefender launches free AI-powered scam detector
We know that fraud is on the increase and by their very nature scams can be hard to spot because… Well because they're scams.
Step forward Bitdefender with the launch of a new, free scam detection service designed to help users verify fraudulent online schemes delivered by email, embedded links, text, and instant messaging through collaboration with a chatbot powered by artificial intelligence.
Public sector embraces AI but trust still an issue
A new report shows that 79 percent of public sector organizations have started to use AI in production (compared to 83 percent in the private sector) but that trust remains a major concern.
The study, from enterprise resilience platform Splunk, shows trust and reliability in AI-enabled systems -- particularly around cybersecurity tools that employ AI -- continue to be the main concerns for decision-makers (48 percent public, 36 percent private).
Retail fraud up 700 percent for the holiday shopping season
As we enter the busiest period of the year for retail sales, there's less than cheery news that scraping, loyalty card fraud and payment card fraud have increased by a collective average of over 700 percent as attackers lay the groundwork for holiday sale attacks ahead of retailer security crackdowns.
A new report from Cequence Security finds threat actors are evolving their tactics, opting for a more nuanced approach that spreads attacks across a broader timeframe to blend in with legitimate traffic and evade detection ahead of peak holiday shopping times.
Top three vulnerabilities of 2023 not covered by CVEs
As we approach the end of the year, a new report from Detectify shows that none of the top three vulnerabilities found across all industries in 2023 were covered by a CVE.
What's more, 75 percent of the total vulnerabilities regularly scanned by Detectify, primarily crowdsourced from its community of ethical hackers, don't have a CVE assigned. This suggests that over-reliance on frameworks like the CVE program can weaken an organization's security posture and give it an unrealistic sense of security.
Why open source is key to modernizing the enterprise -- without ditching the mainframe [Q&A]
Many large enterprises still rely heavily on mainframes to offer a reliable and secure basis for their systems.
But as digital transformation efforts gain pace, developers are eyeing frameworks that can boost their modernization efforts. We spoke to Phil Buckellew, president of infrastructure modernization at Rocket Software, to find out how open source software can bridge the divide between modern applications and mission-critical mainframe infrastructure.
Almost 90 percent say they're prepared for password-based attacks -- but half still fall for them
A new report from Axiad shows that 88 percent of IT professionals feel their company is prepared to defend against a password-based cyberattack, yet 52 percent say their business has fallen victim to one within the last year.
Based on over 200 responses from US IT pros, the study shows 39 percent think phishing is the most feared cyberattack, while 49 percent say it's the attack most likely to happen.
IT leaders struggle to find AI talent but aren't investing in professional development
One-in-three IT leaders say they are struggling with finding qualified AI and ML talent, and while these are the biggest areas of focus, 43 percent rate their teams' AI and ML skill sets as low.
A new study from Skillsoft of more that 5,700 IT professionals finds skill development is a critical piece of the puzzle for building a competitive organization, though more work is needed to optimise training among technology teams.
'Composite AI' could be key to successful artificial intelligence in the enterprise
New research shows that businesses are increasing their investments in AI across many areas, but there are challenges and risks that they need to manage.
The study of 1,300 tech leaders from Dynatrace shows 98 percent are concerned that generative AI could be susceptible to unintentional bias, error, and misinformation. In addition 95 percent are concerned that using generative AI to create code could result in leakage and improper or illegal use of intellectual property.
How organizations can get a handle on cloud security [Q&A]
As cloud-based enterprises continue to grow, the security threats in the cloud grow with them. Organizations operate in complex, multilayered environments that leave security teams scrambling to protect all of their organization's assets and resources. In fact, they may not even be aware of all of them.
What are the biggest risks they face today? And how can organizations mitigate their vulnerabilities?
How AI can help app developers keep up with changing regulations [Q&A]
A changing regulatory landscape can prove difficult for app developers as they need to make sure they remain compliant and keep up with evolving rule sets.
We spoke to Pedro Rodriguez, head of engineering at AI-powered compliance intelligence platform Checks, to find out how AI can help mobile app developers to handle data responsibly and keep up with ever-changing global regulations,
Sensitive data on Google Drives puts companies at risk
New research from Metomic finds that 40 percent of Google Drives hold sensitive data that could put an organization at risk of a data breach or cybersecurity attack.
The research scanned around 6.5 million Google Drive files and also shows that 34.2 percent of all the files scanned were shared with external contacts (email addresses outside of the company's domain) and more than 350,000 files (0.5 percent) had been shared publicly, giving access to anyone who had the document link.
Ransomware attacks lead to companies raising prices
Ransomware attacks are influencing price inflation, according to a new UK survey by Censuswide, commissioned by Veeam Software.
The findings show that large organizations are having to increase costs to customers by an average of 17 percent following an attack. Nearly a quarter of companies (22 percent) say they increased prices by 21-30 percent, while six percent increased prices by 31-40 percent.
84 percent of organizations combine IT and security operations in one analytics tool
A new survey of 500 full-time security decision-makers and practitioners finds that 84 percent indicate their organization combines security and data operations into a single analytics tool.
However, the study from Observe shows more than half of the security relevant data that goes into observability systems needs to be transformed before it can be used.
Ian's Bio
Ian spent almost 20 years working with computers before he discovered that writing about them was easier than fixing them. Since then he's written for a number of computer magazines and is a former editor of PC Utilities. Follow him on Mastodon
© 1998-2024 BetaNews, Inc. All Rights Reserved. Privacy Policy - Cookie Policy.