Security News > 2020

While pen testers may engage in teaming exercises, or happily talk technique when they attend Black Hat, most organizations are extremely reluctant when it comes to discussing their pen testing practices and results. Of course, confidentiality and security should be kept top of mind-sharing anything that puts data at risk defeats the point of pen testing to begin with.

At the time of writing, more than two weeks after the lights went out, our hapless company remains a ghost ship. Travelex is a financial company and thus works in a sector more heavily regulated than most.

If you need your new security company to get noticed, Tech Nation's Cyber programme is back, opening its doors for another cohort of infosec companies looking to scale at speed. With an average of £580,000 in earned revenue and £3m in raised funds per candidate in the Cyber 1.0 programme, there are good reasons to get involved.

As Elastic announced with the alpha release of ECK back in May 2019, the vision for ECK is to provide an official way to orchestrate Elasticsearch on Kubernetes and provide a SaaS-like experience for Elastic products on Kubernetes. Kubernetes has continued to grow in popularity and has become the standard for orchestrating container workloads, and Elastic has seen a growing number of users deploying the Elastic Stack on Kubernetes.

Moving from annual security testing to an almost daily security cadence has put a huge strain on legacy approaches to automated testing, with the need for a centralized team of experts to run tools that undertake static analysis and dynamic scans. New technologies such as interactive application security testing and runtime application self-protection empower developers to do their own security.

You can now use your iPhone or iPad, running iOS 10 or later, as a physical security key for securely logging into your Google account as part of the Advanced Protection Program for two-factor authentication. Roid users have had this feature on their smartphones since last year, but now Apple product owners can also use this advanced, phishing-resistant form of authentication as an alternative to a physical security key.

In a massive win for privacy rights, the advocate general advising the European Court of Justice has said that national security concerns should not override citizens' data privacy. In essence, the issue was whether national governments can oblige private parties - in this case, mostly ISPs - to hand over personal details by simply saying there were national security issues at hand.

The report found that Emotet accounted for almost 20% of confirmed malware incidents, reinforcing its role in the black market as the preferred delivery tool. As the organized cybercrime ecosystem continued to mature in 2019, Emotet remains the dark market leader for delivery-as-a-service.

Organizations around the world will accelerate enterprise technology investment in 2020, leveraging digital improvements to make them more competitive, improve connections with consumers, and keep up with the increasing demands of privacy regulation and security needs. Hyland has identified six technology trends that will drive these improvements and demand the attention of CIOs CTOs in the coming year and beyond.

The global security services industry is poised to experience spend growth of more than $80 billion between 2019-2024 at a CAGR of over 8% during the forecast period, according to SpendEdge. This is creating a pressing requirement to engage security services across the domestic and business sectors across the globe and in the process is driving investments in the security services industry at a substantial rate.