Week in review: Confidential computing, data protection predictions, Sandworm hackers charged

Right here’s an summary of a few of final week’s most fascinating information, evaluations and articles:

What is confidential computing? How can you use it?
What’s confidential computing? Can it strengthen enterprise safety? Nelly Porter, Senior Product Supervisor, Google Cloud and Sam Lugani, Lead Safety PMM, Google Workspace & GCP, reply these and different questions on this Assist Web Safety interview.

Cybersecurity is failing due to ineffective technology
Primarily based on over 100 complete interviews with enterprise and cybersecurity leaders from massive enterprises, along with distributors, evaluation organizations, authorities businesses, trade associations and regulators, the analysis shines a lightweight on why know-how distributors are usually not incentivized to ship merchandise which can be more practical at lowering cyber threat.

Safari, other mobile browsers affected by address bar spoofing flaws
Safety researcher Rafay Baloch has found tackle bar spoofing vulnerabilities in a number of cell browsers, which may permit attackers to trick customers into sharing delicate data via legitimate-looking phishing websites.

Review: Netsparker Enterprise web application scanner
We reviewed Netsparker Enterprise, which is likely one of the trade’s prime decisions for net utility vulnerability scanning.

Is poor cyber hygiene crippling your security program?
Cybercriminals are concentrating on vulnerabilities created by the pandemic-driven worldwide transition to distant work, in response to Secureworks.

US charges Sandworm hackers who mounted NotPetya, other high-profile attacks
The Sandworm Workforce hacking group is a part of Unit 74455 of the Russian Important Intelligence Directorate (GRU), the US Division of Justice (DoJ) claimed because it unsealed an indictment in opposition to six hackers and alleged members on Monday.

Cybercrime capitalizing on the convergence of COVID-19 and 2020 election
The cybersecurity challenges of the worldwide pandemic are actually colliding with the 2020 U.S. presidential election leading to a surge of cybercrime, VMware analysis reveals.

25 vulnerabilities exploited by Chinese state-sponsored hackers
The US Cybersecurity and Infrastructure Safety Company (CISA) has launched a listing of 25 vulnerabilities Chinese language state-sponsored hackers have been not too long ago scanning for or have exploited in assaults.

Can we trust passwordless authentication?
We’re starting to shift away from what has lengthy been our first and final line of protection: the password. It’s an thrilling time. Because the starting, passwords have aggravated folks. In the meantime, passwords have turn out to be the de facto first step in most assaults. But I can’t assist however assume, what’s going to the implications of our actions be?

Data protection predictions for 2021
2020 offered us with many surprises, however the world of knowledge privateness considerably bucked the pattern. Many trade verticals suffered losses, uncertainty and closures, however the safety of people and their data continued to truck on.

Critical infrastructure and industrial orgs can test Azure Defender for IoT for free
Azure Defender for IoT – Microsoft’s new safety resolution for locating unmanaged IoT/OT belongings and IoT/OT vulnerabilities – is now in public preview and may be put to the check freed from cost.

SecOps teams turn to next-gen automation tools to address security gaps
SOCs throughout the globe are most involved with superior menace detection and are more and more seeking to next-gen automation instruments like AI and ML applied sciences to proactively safeguard the enterprise, Micro Focus reveals.

Preventing cybersecurity’s perfect storm
Zerologon may need been cybersecurity’s excellent storm: that second when a number of situations collide to create a devastating catastrophe. Due to Secura and Microsoft’s fast response, it wasn’t.

Most cybersecurity pros believe automation will make their jobs easier
Regardless of 88% of cybersecurity professionals believing automation will make their jobs simpler, youthful staffers are extra involved that the know-how will substitute their roles than their veteran counterparts, in response to a analysis by Exabeam.

Moving to the cloud with a security-first, zero trust approach
Many firms have a tendency to leap into the cloud earlier than fascinated about safety. They might assume they’ve considered safety, however when shifting to the cloud, the entire idea of safety adjustments. The safety mannequin should rework as nicely.

5 tips to reduce the risk of email impersonation attacks
Electronic mail assaults have moved previous customary phishing and turn out to be extra focused over time. On this article, I’ll give attention to electronic mail impersonation assaults, define why they’re harmful, and supply some suggestions to assist people and organizations cut back their threat publicity to impersonation assaults.

Webinar: How to think about cybersecurity the way executives think about business
It’s time to alter the best way we take into consideration cybersecurity and threat administration. Cybersecurity is not an IT downside to resolve or a “essential evil” to price handle. Slightly, cybersecurity has quickly stormed the boardroom on account of high-profile and expensive information breaches.

Save 40% on CISSP or CCSP training until November 30
That will help you keep dedicated to your certification, via November 30, (ISC)² is providing a 40% low cost off Official CISSP and CCSP On-line Teacher-Led Trainings once you bundle with an examination voucher. Coaching seats are restricted, so safe your spot in the present day!

New infosec products of the week: October 23, 2020
A rundown of an important infosec merchandise launched final week.