Security News > 2020 > July
China urged France Monday to guarantee a "Fair and just" environment for its companies after Paris decided to restrict licenses for telecom operators using 5G technology from Huawei. The United States and Australia have banned Huawei from their 5G networks and the Financial Times reported Monday that Britain could decide this month to phase out the company's equipment from its system.
More than 240 website subdomains belonging to organizations large and small, including household names, were hijacked to redirect netizens to malware, X-rated material, online gambling, and other unexpected content. Even Microsoft accidentally allowed some of its own long-forgotten subdomains to slip into the hands of spammers.
Microsoft has announced a new free-to-use initiative aimed at uncovering forensic evidence of sabotage on Linux systems, including rootkits and intrusive malware that may otherwise go undetected. The cloud offering, dubbed Project Freta, is a snapshot-based memory forensic mechanism that aims to provide automated full-system volatile memory inspection of virtual machine snapshots, with capabilities to spot malicious software, kernel rootkits, and other stealthy malware techniques such as process hiding.
One of the hard parts in defense is to accurately determine the actual risk posed by a particular attack. In the end some of the risks may be a bit overhyped, and it's important to understand that there is no perfect security.
These often look simple enough - mandate password complexity rules, change passwords at pre-set intervals, tighten additional authentication - but dig bear pits for the unwary. The Register readers will have read about its effects countless times as criminals spray passwords nicked from one breach at every and any online service they can think of.
With cyberattacks on the rise, today's security professionals are relying primarily on detection metrics - both key performance indicators and key risk indicators - as the primary means to measure the success of their security programs. Tactics such as multi-factor authentication, complicated password requirements, and files blocked by email firewalls work to prevent breaches and provide seemingly impressive detection metrics - but at what cost to business efficiency, as employees expend valuable time and resources? Today, many business professionals assume they must trade time and attention for the assurance of security.
Data breach incidents involving Elasticsearch have been commonly rooted in this lack of attention, as well as a poor overall understanding of Elasticsearch security requirements. This can add up to a perfect storm from a security perspective: Elasticsearch is tremendously easy to deploy, but just as simple to forget about when it comes to hardening security that properly restricts access and protects data.
Researchers at Ben-Gurion University of the Negev have determined how to pinpoint the location of a drone operator who may be operating maliciously or harmfully near airports or protected airspace by analyzing the flight path of the drone. "Currently, drone operators are located using RF techniques and require sensors around the flight area which can then be triangulated," says lead researcher Eliyahu Mashhadi, a BGU computer science student.
The global data center networking market is projected to reach $40.9 billion by 2025 and projected to register 11.0% CAGR over the forecast period, from 2019 to 2025 according to Million Insights. Rising adoption of cloud computing and the introduction of advanced data center operating models are also anticipated to boost the market growth over the forecast period.
Cyral, provider of the first cloud security platform for the data layer, announced general availability of its data layer security platform. "Cyral pioneered the concept of a security platform for the data layer and has closed scores of new customer trials and production deployments since announcing our funding in January 2020," said Manav Mital, founder and CEO of Cyral.