Cloud Hosting

The Indian Computer Emergency Response Team (CERT-In) on Friday issued Guidelines on Information Security Practices for government entities for safe and trusted Internet.

These guidelines apply to all Ministries, Departments, Secretariats, and Offices specified in the First Schedule to the Government of India (allocation of business) Rules, 1961, along with their attached and subordinate offices, it said. They also include all government institutions, public sector enterprises, and other government agencies under their administrative purview.

The government has taken several initiatives to ensure an open, safe and trusted and accountable digital space. We are expanding and accelerating on Cyber Security with focus on capabilities, system, human resources and awareness, Rajeev Chandrasekhar, Minister of State for Electronics & Information Technology & Skill Development and Entrepreneurship, said.

Recognising the significance of a secure and trustworthy digital environment, the government has formulated policies aimed at ensuring an open, safe and trusted and accountable Internet for its users. It remains fully aware of the growing cyber threats and attacks present in todays digital world, he said.

These guidelines are a roadmap for government entities and industry to reduce cyber risk, protect citizen data, and continue to improve the cyber security ecosystem in the country. They will serve as a fundamental document for audit teams, including internal, external, and third-party auditors, to assess an organisations security posture against the specified cybersecurity requirements, CERT-In said.

The guidelines include various security domains such as network security, identity and access management, application security, data security, third-party outsourcing, hardening procedures, security monitoring, incident management, and security auditing.

For instance, for desktop/laptop/printer security in office, the guidelines suggest to Use only Standard User (non-administrator) account for accessing the computer/ laptops for regular work. Admin access to be given to users with approval of CISO only.

Similarly, use of complex passwords with a minimum length of 8 characters, using a combination of capital letters, small letters, numbers and special characters; Never store any usernames and passwords on the Internet browser; and do not store any payment related information on the Internet browser.

Apart from adhering to the best practices in the field they also include guidelines prepared by the National Informatics Centre for Chief Information Security Officers (CISOs) and employees of Central government Ministries/ Departments to enhance cyber security and cyber hygiene.

Here is the original post:
CERT-In issues Guidelines on Information Security Practices for government entities - BusinessLine

Check Point Software, Sophos, Trend Micro, WatchGuard, and Zimperium published security reports last week. ManageEngine revealed that it had attained a Spanish cybersecurity certification. LogRhythm published a press release rounding up its success in H1 2023, and VMWare announced a partnership with AMD and Samsung.

Check Point released the 2023 Cloud Security Report. Key findings from the report based on over 1000 responses included:

TJ Gonen, VP of Cloud Security at Check Point Software Technologies, commented, Our survey found that cloud misconfigurations are the foremost concern for todays CISOs. However, what sets successful cloud security organizations apart, is not only the ability to identify misconfigurations, but also to grasp their contextual relevance and prioritize their resolution.

Understanding which misconfigurations truly pose a risk to business operations is paramount. As is the capability to swiftly and effectively address those vulnerabilities to maintain a strong security posture. It is imperative for enterprises to select a comprehensive solution that goes beyond surface-level detection.

Check Point Software also published its Environmental, Social, and Governance (ESG) report for 2022. The report covers Check Points sustainability-related projects, technology, business and activities over the last twelve months.

Key highlights include how Check Point is increasing Digital resilience, focusing on Carbon neutrality, its social responsibility, governance and ethics.

Gil Shwed, Founder and CEO at Check Point, said: Our report is an accurate reflection of what weve achieved so far, as well as a glimpse of our future plans. ESG is of paramount importance to us, and were taking definitive steps to continuously improve. From committing to achieving carbon neutrality by 2040, to extending cyber education programs to eager learners worldwide, these actions and many more embody what I believe to be the essence of Check Point making the world safer while also making it better.

LogRhythm reviewed its success, and the product updates rolled out over the first half 2023. It reviewed the improvements to its Axon, SIEM, and NDR solutions.

Chris OMalley, CEO of LogRhythm, commented, LogRhythm demonstrates in our actions a dedication to improving security analysts experience by providing them with the tools they need to navigate the evolving threat landscape effectively. Our latest product enhancements empower security analysts, improve operational efficiency, and offer unparalleled visibility into potential risks. We remain committed to our customers success and resilience against cyber threats.

LogRhythm also celebrated achievements such as:

The company also won several notable awards, including the Frost & Sullivan Competitive Leadership Awards, the Colorado Technology APEX Awards and the Globee Gold Awards.

ManageEngine announced that it has successfully obtained the Spanish governments Esquema Nacional de Seguridad (National Security Framework) certification. The company achieved this certification in the INTERMEDIATE (medium) category in its first attempt after a rigorous evaluation of all its cloud and on-premises solutions by BDO, an independent audit firm.

The evaluation, encompassing audits of the companys European Union data centres (located in Dublin and Amsterdam), announced ManageEngine as a certified company that met all the compliance policy requirements.

Rajesh Ganesan, president of ManageEngine, commented, Regulatory frameworks ensure high levels of trust for citizens using government, public and private digital services. Over the last 13 years, the National Security Framework (ENS) has evolved into a comprehensive framework that helps companies make modern technologies more secure so people can use them with confidence.

We at ManageEngine are excited to receive this certification, which is a testament to our continued efforts to fulfil the needs of our Spanish customers.

Sophies published the The State of Ransomware in Manufacturing and Production 2023 report. It found that the adversaries successfully encrypted data in 68% of ransomware attacks against this sector. This is the highest reported encryption rate for the sector over the past three years and is in line with a broader cross-sector trend of attackers more frequently succeeding in encrypting data.

Manufacturers are increasing the use of backups, 73% (58% 2022) but are taking longer to recover, 55% recovered in less than a week (2022 67%)

John Shier, field CTO Sophos, commented, Using backups as a primary recovery mechanism is encouraging, since the use of backups promotes a faster recovery. While ransom payments cannot always be avoided, we know from our survey response data that paying a ransom doubles the costs of recovery. With 77% of manufacturing organizations reporting lost revenue after a ransomware attack, this added cost burden should be avoided, and priority placed on earlier detection and response.

Longer recovery times in manufacturing are a concerning development. As weve seen in Sophos Active Adversary reports, based on incident response cases, the manufacturing sector is consistently at the top of organizations needing assistance recovering from attacks. This extended recovery is negatively impacting IT teams, where 69% report that addressing security incidents is consuming too much time and 66% are unable to work on other projects.

Sophos recommend several actions for manufacturers that other sectors are already taking:

Trend Micro sponsored and published a SANS Institute report, Breaking IT/OT Silos With ICS/OT Visibility. The report reveals that enterprise Security Operation Centers (SOCs) are expanding their capabilities to the OT domain, but major visibility and skills-related challenges are causing roadblocks.

Bill Malik, vice president of infrastructure strategies at Trend Micro, said, IT-OT integration is already driving digital transformation for many industrial organizations, but to effectively manage risk in these environments, IT and OT security operations (SecOps) must also converge. OT security programs may be lagging, but theres a fantastic opportunity to close the visibility and skills gap by consolidating onto a single SecOps platform like Trend Vision One.

The study also reveals the top challenges organisations looking to expand SecOps face.

Trend Micro also published an Omdia report that revealed that most enterprises invest 5-10% of their IT budgets specifically on private 5G network security, despite an assumption that the technology is secure by default. They will spend $12.9B on Private Network Security by 2027.

The research reveals that 72% of global enterprises believe the 3GPP approach1 to private 5G security is sufficient. These network architectures were built with security in mind, and because they are private, they are inherently more secure than public 5G. However, that doesnt mean they are impenetrable to determined attackers. The report highlights requirements and priorities shared by security leaders for their 5G deployments.

Greg Young, vice president of cybersecurity at Trend Micro, commented, When it comes to private 5G network technology, theres no such thing as secure by default, so its reassuring that enterprises are looking to add their own protections. What will be crucial going forward is educating this new user base about where the most critical security gaps are and what a shared responsibility model will look like in these environments.

VMWare has announced that it is joining forces with AMD, Samsung, and members of the RISC-V Keystone community to simplify the development and operations of confidential computing applications. VMware researched, developed and open-sourced the developer-focused Certifier Framework for Confidential Computing project.

AMD, Samsung and VMware aim to address a significant barrier to adopting confidential computing by standardising on an easy-to-use, platform-independent API for creating and operating confidential computing applications.

Kit Colbert, CTO of VMware, said, Confidential Computing has the potential to secure workloads no matter where they run including in multi-cloud and edge settings. The challenge has been to help customers adopt and implement the standard with ease. The collective efforts of the growing ecosystem of contributors to Certifier Framework will help bring those benefits to bear to ISVs, enterprise customers, and Sovereign Cloud providersenabling them to use this emerging technology more easily and effectively.

WatchGuard announced the findings of its latest Internet Security Report, detailing the top malware trends and network and endpoint security threats analyzed by WatchGuard Threat Lab researchers in Q1 2023. The key findings included the following:

Corey Nachreiner, the chief security officer at WatchGuard, commented, Organizations need to pay more active, ongoing attention to the existing security solutions and strategies their businesses rely on to stay protected against increasingly sophisticated threats.

The top themes and corresponding best practices our Threat Lab have outlined for this report strongly emphasize layered malware defenses to combat living-off-the-land attacks, which can be done simply and effectively with a platform for unified security run by dedicated managed service providers.

Zimperium published its Global Mobile Threat Report 2023. Key findings included the following:

Jon Paterson, CTO of Zimperium, commented, There is a fundamental issue that todays modern organizations must contend withhow can they capitalize on the opportunities of being mobile-powered without being exposed to evolving risks.

To thrive, it is critical that they employ a mobile-first security strategyone where they continually prioritize and assess risk as close to the user and device as possible, and baseline and continuously assess vulnerability posture to operate in a known state with complete visibility.

They must take responsive action on risk detection: leverage zero trust and conditional access workflows, leverage XDR and autonomous, 3rd party integrations and ensure they assess and stay updated on global privacy regulations and the risks that affect apps they develop and use.

Security News from the week beginning 19th June 2023

See original here:
Security news from the week beginning 26th June 2023 - - Enterprise Times

not all about the technology. Many attacks originate from complex social engineering.Pawel Czerwinski on Unsplash

As any person operating in the digital world will know, you open yourself up to vulnerability, simply by opening an internet browser. But for family offices, this risk is even more pernicious and cybersecurity attacks are increasingly on the rise. As Boston Private points out, Over a quarter (26%) of family offices have suffered a cyberattack. In almost two-thirds of these cases, it happened within the last 12 months. As the discussion around the importance of daily offices digitising their operations picks up pace, if ever there was a time for family offices to get serious about their digital security, its now.

Like any cyber attacks, the biggest threats posed to family offices arent that different from those experienced by the rest of the world. The difference, however, comes in what is at stake for family offices. Family offices should be acutely aware of several key cybersecurity risks. This includes phishing and ransomware attacks, data breaches, insider threats, and third-party risks, all of which can lead to significant financial and reputational damage, says Eton Solutions CIO Muralidhran Nadarajah. The emergence of generative AI has introduced new threat vectors, with hackers now capable of creating sophisticated deep fakes and phishing/vishing attacks using analyzed voice, video, email, and social media data.

The need for heightened vigilance is paramount in this new era of threats, especially as many of these sophisticated attacks are orchestrated by state actors. Naturally, the biggest concern for family offices is financial, due to the level of wealth theyre dealing with, but this isnt the only theyre at risk of losing. Sophisticated modern cyberattacks today will almost always have a physical-world component. In the case of family offices, this can be deep research or intel that the attackers obtained or compiled, which will bring the quality of their phishing attack or social engineering to the next level, says Tobias Jaeger, Founder & CEO of Falcone International. A family office is often run by a small group with a lot of power and doesn't necessarily follow the same decision-making routes and operational rules as an investment firm with similar AUM (assets under management). This makes it easier for attackers to shortcut certain actions that these individuals would never do otherwise.

The reality is that social engineering is often where attacks start and not necessarily highly technical hacking or exploits.

The reality of knowing that your family office could be so vulnerable is a pretty grim one, but fortunately for family offices, theyre in a slightly better position than most to protect themselves. Etons Muralidhran Nadarajah notes that large single family offices have the resources to create dedicated security departments and infrastructure for effective data protection.

So, what are some ways they can protect themselves? According to Tony Gebely CEO of Annapurna, tackling family office cybersecurity isnt one-dimensional and should be approached internally, as well as externally. Cybersecurity is not a technology problem, it is a multifaceted challenge that extends far beyond the realm of technology, he says, and trying to resolve it alone isnt the way to go. Employing best practices will bolster efforts to some extent, but this is a very risky approach. Utilizing a third-party expert to identify and prioritize risks within the family system is the best approach to achieving cyber resilience.

Concierge Cyber, CEO Kurtis Suhs echoes this, and adds the priority to audit processes should be on par with auditing people and technology. Family offices need to address people, processes and technology. People: Does the family office require security awareness training for all employees? Processes: Does the family office network have a Written Information Security Plan (WISP) that addresses policies such as email security, mobile devices, business continuity, disaster recovery, physical security, and incident response? Technology: Does the family office utilize multi-factor authentication and endpoint protection?

The bottom line is, there is no silver bullet when it comes to cyber protection and in the same way a family office would default to external expertise when engaging in an unfamiliar asset class, they should consider the same here. Annapurnas Tony Gebely advises family offices to understand what they seek to gain by investing in cybersecurity, but ultimately, this cost would be lower than dealing with a breach. Falcones Tobias Jaeger seconds this, The cost of fixing a problem can easily be a factor of 100x compared to an investment into measures that would have prevented the issue in the first place.

Before launching any process updates, Concierge Cybers Kurtis Suhs suggests starting with a vulnerability test. This would include an external scan of their network for outsider threats and an internal scan for insider threats. Any discovered high vulnerabilities should immediately be remediated and medium threats should be addressed within 30 days.

From there, he says the entire organization must embrace a protective mindset. Cybersecurity risk management involves the entire C-Suite. For example, Legal should evaluate third-party contracts, particularly those vendors that maintain PII, with respect to mutual indemnity and hold harmless provisions, says Suhs. The CFO should ensure the family office has a call back requirement with their financial institutions. The Chief Security Officer should implement multi-factor authentication, endpoint protection and oversee vulnerability testing. The Facilities Manager should ensure that the family office has physical security to protect tangible assets. And most importantly, the family office should have a cyber incident response plan and annually test that plan to ensure business continuity, he continues.

And even once a strategy has been put in place, it will only succeed with constant monitoring and status updates. Etons Nadarajah says Implementing security measures, continuous staff training, consistent system monitoring, crafting incident response plans, conducting third-party assessments, backing up data, and enforcing multi-factor authentication are all vital practices for robust cybersecurity. An essential addition to these practices is a regular audit of the family office's security posture and a vulnerability assessment by a recognized external party. This process instils confidence in the sufficiency of the security framework in place. The work concerning family offices cybersecurity is not a once-off task. It is a constantly evolving process due to the ever-changing threat landscape.

In short, the more that family offices think about embracing tech, the more they will have to grapple with increasing cybersecurity risks that can result in significant financial and reputational damage. To protect themselves, family offices should prioritize digital security and employ best practices but most crucially seek external expertise. A two-factor approach that combines internal and external audits and processes is advised for long-term safeguarding.

By investing in cybersecurity measures, family offices can mitigate risks and avoid costly breaches, but this wont succeed without also conducting vulnerability tests, implementing protective measures, and continuously monitoring the organizations security framework.

I help design and incubate the family offices of the future. Starting with a clear purpose, we help plan for continued family involvement over the coming generations and build solid, innovative businesses. Founder of Simple, a family office insight & strategy company, that supports the future private wealth owners to use their capital to create the better world they would like to live in.

See the article here:
Dont Get Hacked. The Increased Risk Of Cyber-Threats And How Family Offices Can Protect Themselves - Forbes

With the rise in data breaches, many businesses look for ways to improve internet security and enhance online privacy. One way is by deploying a Virtual Private Network (VPN). One VPN provider making waves in the industry is Surfshark. Founded in 2018, with more than 3,200 servers in 100 countries, Surfshark provides businesses with many capabilities, such as malware protection, an ad blocker, identity protection, data breach alert and an antivirus utility. This comprehensive review delves into the latest Surfshark VPN software examining its pricing and notable features as well as its pros and cons.

Pricing

Surfshark offers a seven-day free trial and three pricing plans, each providing a slew of features including unlimited devices, leak protection, a kill switch and AES-256 encryption. All plans come with a 30-day money-back guarantee. Below is the breakdown of the costs.

Apart from the above plans, there are additional costs for customers who want to add extra services like antivirus, real-time alerts and an anonymous search engine option.

Highlighted below are the key features that make Surfshark a compelling choice for those seeking a reliable VPN solution.

One of Surfsharks notable strengths is its extensive multiplatform support. Surfshark can be used on Windows, macOS, Linux, iOS, Chromebook and Android. Its also compatible with multiple devices, such as PCs, smartphones, routers and smart TVs. This cross-platform compatibility allows users to protect their online activities across all their devices.

The unlimited device connection offered across all pricing plans is what sets Surfshark apart from many VPN providers. With a single subscription, users can connect to unlimited devices simultaneously. This feature is particularly beneficial for businesses with many employees or individuals with an extensive device ecosystem. This feature also ensures that users can safeguard all their devices without worrying about hitting connection limits or incurring additional costs.

To ensure secure and private connections, Surfshark provides users with a selection of VPN protocols, including WireGuard, OpenVPN, and IKEv2. Surfshark employs robust AES-256-GCM encryption, which is regarded as a highly secure encryption standard.

Surfshark also ensures the security of user logins by encrypting them in their database, guaranteeing that no unauthorized individuals can decrypt or access the stored login information. Even in the unlikely event of a server data breach, Surfshark says that encrypted user logins will remain indecipherable and protected from unauthorized access.

SEE: The best encryption software

The split tunneling feature or bypasser, as Surfshark labels it, allows users to selectively encrypt their data, making it easier to choose the information they want to protect. With this feature, users can use two different IP addresses simultaneously, ensuring a higher level of privacy and security. This feature also allows users to maintain their original internet speed on the traffic they dont want to encrypt, ensuring a seamless browsing experience.

Figure A

Surfsharks MultiHop feature is for users who require an extra layer of anonymity and security. By routing connections through multiple servers in different locations, MultiHop adds an additional level of encryption and anonymity, making it harder for anyone to trace online activities. This feature is particularly valuable for businesses handling sensitive data or IT professionals working with confidential information that needs adequate protection.

Figure B

Intrusive ads and online trackers can hinder productivity and may even compromise privacy. Surfshark includes a built-in ad and tracker blocker known as CleanWeb, which helps eliminate annoying ads, cookie pop-ups and tracking attempts on computer devices. This feature has recently been upgraded and can be installed separately as a browser extension on Chrome, Edge and Firefox or together with the Surfshark VPN service. By enabling this feature, users can enjoy a cleaner and more focused browsing experience while minimizing the risk of being tracked by advertising networks or malicious entities.

Figure C

While Surfshark offers a range of impressive features and benefits, its always a good idea to explore alternative VPN options to find the one that best suits your specific requirements. There are three notable alternatives to Surfshark worth considering.

NordVPN is a popular name in the VPN market and stands as a worthy alternative to Surfshark. The VPN has about 5,710 servers in 60 countries and provides a lot of features such as Meshnet, which allows users to create their own private encrypted network for file sharing, a dedicated IP for easy access to IP-restricted networks and a threat protection feature that helps combat malware, intrusive ads and web trackers. NordVPN is also compatible with multiple operating systems like Windows, macOS, Android, iOS and Linux. With a single subscription, users can connect up to six devices.

ExpressVPN is another top contender known for its exceptional speed and security features. With servers in 94 countries, ExpressVPN offers features like smart location, which automatically selects the best VPN server location based on various factors, including download speed, latency and distance. Express VPN also offers split tunneling, a network lock kill switch, private DNS and a threat manager that blocks sites and apps from communicating with trackers.

CyberGhost VPN is another VPN option worthy of consideration. This VPN service is known for its extensive server network. With a straightforward and intuitive interface, its a good choice for business users seeking a hassle-free VPN experience. With 9,107 servers in 91 countries, CyberGhost VPN provides a large server network, offering broader options for accessing geo-restricted content and maintaining a stable connection. With one subscription, users can connect up to seven devices a bargain compared to some other VPN providers. CyberGhost is compatible with Windows, macOS, Android, iOS and Linux operating systems. Users can also configure CyberGhost VPN to work on routers, smart TVs and the Amazon Fire TV Stick.

Surfshark, like every other software product, has its strengths and weaknesses.

SEE: Get 3 years of rock-solid protection with Surfshark VPN

Surfshark is most suitable for small and medium-sized businesses looking for a VPN service that offers unlimited device connection, multiplatform device support and strong security and no-log policy features. With Surfsharks unlimited device connection offering available on all plans, businesses with an extensive collection of computing devices can get the best value for their money. Additionally, Surfshark is also ideal for individuals with streaming needs that require bypassing geolocations, as the VPN enables users to bypass geo-restrictions and access their favorite streaming platforms from anywhere in the world.

This review involved a detailed assessment of Surfsharks features, including its security protocols, server network, device compatibility and cost. Examining these features helped us to evaluate its overall performance and user experience. Furthermore, we supplemented our research by studying user reviews and testimonials from reputable review sites, to ensure a well-rounded understanding of its strengths and weaknesses as experienced by customers.

Visit website

NINJIO prepares organizations to defend against cyber threats through their engaging, video-based training courses. They earned the highest score among providers named "Customer's Choice" in Gartner's 2022 "Voice of the Customer Security Awareness Computer-Based Training report. Teams love NINJIO because of their Hollywood-style microlearning episodes, each based on recent, real-world breaches. Click below to get the full Gartner report and 3 free episodes, and see why everyone loves NINJIO.

Learn more about NINJIO Cybersecurity Awareness Training

Visit website

Dashlane secures your data with a patented security architecture and AES256-bit encryption, the strongest method available. Employees can securely share encrypted passwords with individuals or groups- instead of sending them unsecurely over email or Slack. Try Dashlane Business for free

Learn more about Dashlane

Visit website

Endpoint Central is one super app to manage your enterprise IT, from endpoint management to end-user security. Streamline and scale every IT operation from device enrolling/onboarding to retiring for multiple device types across different platforms. Perform patching, distribute software, manage mobile devices, deploy OS, keep track of hardware/software inventory, and remotely troubleshoot end-user issues while shielding them from cyberattacks. Get a free 30-day trial on unlimited endpoints.

Learn more about ManageEngine Desktop Central

Read next: Surfshark vs NordVPN (2023): In-depth comparison

Read the rest here:
Surfshark VPN Review (2023): Features, Pricing, and More - TechRepublic