Home Blog Page 209

More work needs to be done to catch up with cybercriminals: Forescout

  • Developing an adequate security strategy to manage OT, IoT, IIoT, IoMT and IT security as part of a coordinated effort, rather than in isolation, is the need of the hour.
  • As more devices get connected to the edge, organisations need to look at their architecture and make security the part of their architecture.
  • Enterprises cannot start their security journey without discovering what are the assets they have and ensuring there are no rogue machines infringed on their network.

Cybersecurity solutions providers are not able to stay one step ahead of hackers or predict the attacks despite the improvements in technology, why?

Is it because the bad guys are much better than the solution providers or only the big ones in a million hacks are getting noticed.

“The cat and mouse is an arms race and it appears that the cybersecurity industry is not catching up. You need to understand that we are in an industry where one single attack in millions is disclosed, that occur every day,” Wael Mohamed, CEO of Forescout, said in an interview with TechChannel News.

There are a million attacks that happen every day that people don’t hear about it, he said and added that the industry has done a very good job but “we are still behind and have a lot of job to do”.  

Wael Mohamed, CEO of Forescout
Wael Mohamed, CEO of Forescout.

“I don’t think this job will be done as bad guys are always on the radar to exploit the systems for different reasons. Our cybersecurity industry is very matured and prepared and there are way more good guys than bad guys, for sure,” he said.

However, he said that there is no silver bullet and need to realise that the enemy is the bad guy.

“You cannot say that you are protecting your IT with an IT solution or IoT with an IoT security solution; you need to have a solution that has the awareness of all devices and provide a continuous monitoring for customers,” he said.

Business continuity

Mohamed said that enterprises cannot start their security journey without discovering what are the assets they have and ensuring there are no rogue machines infringed on their network.

One of the things that happened in the 2021 Colonial pipeline attack in the US, he said was the hackers got into the IT assets via OT (operational technology) machines and disrupted their operations.

Colonial paid the hackers, an affiliate of a Russia-linked cybercrime group known as DarkSide, a $4.4 million ransom after the hack.

“Most of the difficult thing in that situation which most people don’t understand is that the company had no other choice and it shows that continuity is the most important thing in most originations today.

Sometimes, assets that appear not that critical could be the surface of a dangerous attack,” Mohamed said.

IT (information technology) systems are storage systems, computing technology, business applications and data analysis while OT systems are machinery equipment, assets monitoring systems, industrial control systems and SCADA devices. 

Changes in attacker behaviours

Mohamed said that targeted attacks and advanced persistent attacks are the big things in the news for many years.

Attackers are increasingly choosing to deploy cyber-physical attacks that target critical infrastructure systems, which can cause outages and be fatal and research firm Gartner said that attackers will have weaponised a critical infrastructure cyber-physical system (CPS) to successfully harm or kill humans by 2025.

According to Sophos survey for 2021, 37 per cent of organisations were hit by ransomware last year, defined as multiple computers being impacted by a ransomware attack, but not necessarily encrypted. While this is a high number, the good news is that it is a significant reduction compared to 2020, when 51 per cent said they’d been hit.

Changes in attacker behaviours observed by SophosLabs and the Sophos Managed Threat Response teams indicate that many attackers have moved from larger scale, generic, automated attacks to more targeted attacks that include human-operated, hands-on keyboard hacking.

 “Organisations need to understand their security framework, as they have their policies, and the reality is aligned and if something is out of range, how you can deal with it without disrupting the daily operations,” Forescout CEO said.

Moreover, he said that the convergence of IT and OT is not happening as fast as everybody wished, not only in the Middle East but across the globe, but Mohamed believes the future is more connected.

As more OT gets modernised, he said the convergence of IT and OT will happen and it is already happening, albeit at a slower pace.

Top concerns

Although enterprise IT security is generally well-known and managed, cyber-physical systems challenge traditional security approaches.

In a recent Gartner survey, security and risk leaders ranked the Internet of Things (IoT) and cyber-physical systems as their top concerns for the next three to five years.

The term cyber-physical systems encompass concepts such as IoT, smart city and systems created as a result of OT and IT convergence.

Gartner predicts that 30 per cent of critical infrastructure organisations will experience a security breach that will result in the halting of operations- or mission-critical cyber-physical systems by 2025 and 50 per cent of asset-intensive organisations such as utilities, resources and manufacturing firms will converge their cyber, physical and supply chain security teams under one chief security officer role that reports directly to the CEO.

5G to pose more challenges

When asked whether it is possible to get full visibility on assets of Industrial Control Systems (ICS) with the convergence of IoT, OT, IIoT, IoMT, Mohamed said that if it is connected to the internet and has an IP address, organisations will be able to have full visibility of the ICS assets but the problem is it requires a high level of sophistication to be able to see the assets as every environment is different as it uses different protocols, from different vendors, etc.

“You need to have a solution that can be able to see the assets and doesn’t matter what protocol it talks and from which vendor,” he said.

With 5G coming in and more devices getting connected at the edge, he said the industry definitely needs to be prepared and it is a “challenge for the industry as the devices are not in our control”.

“We need to be prepared and make sure that we modernise the way we see those devices and be able to provide the protection. These are very small surfaces but they can be very dangerous surfaces. As more devices get connected to the edge, organisations need to look at their architecture and make security the part of their architecture,” he said.

When asked whether it is possible to have coordination at the national level and standardisation of reporting requirements globally, he said that the US has already taken great leadership and has done a good job in coordination and cooperation among all the public and private sectors.

“This [collaboration and communication] is the only way to get ahead in sharing the information and the only way to get 360 degrees and get ahead of the situation,” he said.

“We have done it in certain sectors such as law enforcement and can track the bad guys. We are already good at it, communication from the airport and police department perspective, content to content and from country to country. This is a digital world and we have to get there and we will get there,” he added.

Related posts:

Embrace geospatial data to better visualise your business

  • Visualisation is key to getting the most from your data and maps should be as clear as possible.

Geospatial data recontextualises our entire world. Whether you’re following your maps app to a new place or tracking a parcel, geospatial data helps us to see not just the location of something but its status, travel and any related events – often in real-time.

A simple detour made by your Uber driver gets you to your destination that much quicker, but it’s the geospatial analytics behind the scenes that work to divert you from a path of building work and tedious traffic.

Similarly, geospatial data provides many designs and engineering capabilities for imaging and planning functions for construction firms or else can provide census data so the fast-food chain looking to expand can find the perfect site for customer footfall.

We rely on this kind of data in our everyday lives, and businesses must embrace it. The potential impact of geospatial data is great, although it is too often misunderstood and underutilised. 

A greater potential

We can define geospatial data as information with three main elements. The first is an object, event or phenomenon, the second is a location and the third is temporal information or a time.

For businesses, this can provide invaluable insight into their weak areas, shedding light on problems in surprising ways.

Toby Hawkins, Sales Director at mpro5.

The benefits of seeing data mapped out geographically may seem apparent, but many people don’t realise the full potential. The common perception of geospatial data is that it is simply a pretty feature, for presentations or curiosity’s sake, but the temporal aspect is easily overlooked when the data is presented as a static map.

Changes over time in the data can show how different regions compare with each other or how they can affect each other. Geospatial data is increasingly used for forecasting. Anomalies can be used to predict incoming events or changes to the environment that could affect your enterprise, and trends in your data can back this up.

This provides value across many industries. It can be used to better project risk and determine appropriate premiums for different geographic areas in insurance, or for lenders to assess credit risk scores for agricultural lending. It can even be used to help electricity providers get ahead of potential faults and failures in the grid.

Since Covid-19, mapping has become widespread with population data, video, social media, maps and weather being utilised to show live data. It is through geospatial analysis that we are now able to see complex relationships between data in an easily understandable, visual way.

Avoiding poor visualisations

Unfortunately, data can be misrepresented or poorly shown in visualisations, making it confusing for the user and defeating the entire point of geospatial data.  Visualisation is key to getting the most from your data and maps should be as clear as possible.

For example, colour theory plays an important part in making spatial analysis and data visualisations digestible. Users of the maps should fully understand what to look for in changing colours, locations and other features within visualisations so that decision-makers can act on observations more effectively. 

Reaping the business benefits

Businesses can get significant value from geospatial data through anticipating and preparing for possibilities arising from changing spatial conditions or location-based events.

For example, a UK-based company might monitor regional performance by splitting maps into their own defined areas and comparing performance. This makes it possible to make better decisions by figuring out which regional areas need additional support.

In practice, the application of good geospatial data analytics can work wonders for national retailers. It gives you the ability to spot and act on trends to make widescale improvements at specific sites. Anomaly detection for deliveries become easier to spot, allowing further investigation into why they were made incorrectly and thereby better decision making around poor performance or training requirements.

Geospatial data enables retail businesses to understand the relationship between stores, products and preferences across metrics that can impact sales performance and overall performance.  

Geospatial analytics have the potential to bring indispensable context to everything.

By revealing patterns, effective visualisations from geospatial data can give businesses valuable and novel insights into their business that will empower them to make real improvements to their operations and better serve their customers.

  • Toby Hawkins is the Sales Director at mpro5, a digital transformation company to improve operational effectiveness, ensure process compliance and drive productivity gains and cost savings for businesses.

Zoho sees strong migration from Google and Microsoft to its Workspace

  • Zoho Workplace experiences 34% year-on-year growth, with more than 40% of the new migrations coming from Google and Microsoft in 2021.
  • Zoho is unique amongst its productivity suite competitors for not rolling out a cost increase for 2022, nor removing their freemium offerings, analyst says.
  • Set to see an increased demand for its Workplace services as customers seek a strong return on investment for productivity and collaboration software.

Zoho’s Workplace platform has experienced a 120 per cent increase in migrations from Google-hosted domains after Google’s announcement that it would be ending the free edition of Workspace in January 2022.

Zoho, a technology company offering the most comprehensive suite of business software applications in the industry, said that it now serves more than 16 million users globally.

Thomas Randall, Senior Research Analyst at Info-Tech Research Group, said that Zoho is unique amongst its productivity suite competitors for not rolling out a cost increase for 2022, nor removing their freemium offerings.

In 2021, Zoho Workplace experienced 34 per cent year-on-year growth, with more than 40 per cent of the new migrations coming from Google and Microsoft.

Pulling the plug

Momentum was strong across all segments, with the SMB customer base increased 40 per cent, mid-sized surging 36 per cent, and enterprises expanding by more than 20 per cent.

“Persistent long term execution has been a hallmark of Zoho, and our investment in Zoho Workplace attests to that. The market has seen vendors offering hundreds of seats for free to gain market share and eventually pulling the plug,” Sridhar Iyengar, Managing Director, Zoho Europe, said.

Zoho attributes this substantial growth to increasing business demand for contextual applications with utmost standards for user privacy as well as rising costs from other collaboration platform providers.

Since the start of the pandemic, Zoho Workplace adoption has accelerated as businesses of all sizes transitioned to digital-forward, remote work.

Privacy a top priority

Iyengar said that Zoho Workplace has been consistent in delivering customer value and continued high speed of innovation.

“Our ad-free approach and respect towards user privacy will be a pleasant surprise to users coming from alternative ‘free’ services,” he said.

 Zoho is headquartered in Chennai, India with European headquarters in Utrecht, The Netherlands. Additional offices are in the United States, India, Japan, China, Singapore, Mexico, Australia, and the UAE.

 “Other providers have justified price add-ons and increases to reflect the additional value they believe their customers have received over the pandemic for using their tools. Yet freemium offerings and price consistency have been central for many customers and businesses to stay afloat during lockdowns,” Randall said.

Now that such offerings are in short supply, he said that Zoho will likely see increased demand for their Workplace services as customers seek a strong return on investment for productivity and collaboration software.

Investing in workforce intelligence now will lead to an optimised tomorrow

  • It’s as important now as ever to look at how workforce data is the key to getting direction during these changing times.
  • In a hybrid world, data needs to be gathered automatically, wherever employees are based, in real-time, to give managers as much detail as possible.

As governments work rapidly to respond to the Omicron variant, businesses experienced its effects as a timely reminder that flexibility is an essential part of any attempt to open offices again. 

Even in a hybrid work environment, the unpredictable nature of the world and people’s lives means that organisations will need workforce management methods and tools that are flexible and intelligent to make the transition a success. 

 As a result, it’s as important now as ever to look at how data is the key to getting direction during these changing times – and how some of the data requirements that might seem burdensome can be a source of optimisation. 

Adapting to the change

The pandemic has already forced a sea-level change in how operations managers understand their workforce and workload and plan their operations. 

Michael Cupps, Senior Vice-President for Marketing at ActiveOps.

While traditional workforce management data was based on looking around the office to get a sense of things and historical data around skills, schedules, inventory, and so forth, the pandemic left many operations managers in the dark as their teams worked remotely. 

Many organisations had already adapted to this change, implementing new methods of understanding productivity and performance and managing employees that were effective when working from home. 

As hybrid working becomes the norm, the question remains for managers, where are my people most productive? Working from home is the preferred option for many employees, but not all of them – and not all types of work can be adapted to remote working. 

More recently, other layers have started to appear that present a challenge to operations managers. One layer is eligibility – as in, who is allowed to work in an office or not.  

Of course, US organisations will still be feeling the effects of the government’s attempt to enforce a nationwide vaccine mandate. 

Still, other countries are facing similar legislation – Western Europe is experiencing what can only be described as a ‘Covid-19 reality check’ when Austria became the first country to enforce a total lockdown since the vaccine rollout. 

The news of a rising number of cases has led to drastic actions from Schallenberg, with the announcement that Austria will enact compulsory vaccinations in early 2022, which has sparked violence in Vienna as tens of thousands of people protest the measures.  

While vaccinations have been the key to the UK’s return to normality, nations that continue to struggle with controlling the virus will have an eye on Austria’s vaccine mandate and consequently fear that it will be a sign of what’s to come. With the ever-changing pandemic situation in Europe, businesses must prepare for the uncertainty.  

If other Western European countries follow Austria’s example, vaccination mandates will inevitably add a new and novel challenge for businesses. Across every industry, management teams are already feeling overwhelmed. 

After two years of new variants, new vaccines and new restrictions on the workforce, Austria’s mandate, as well as Biden’s Executive Orders in the US, exemplify a new risk to the growing stability that vaccinations gave us. 

A more optimised future of work

Some organisations are implementing their mandates regardless of national policy – the upshot being that, as a result, operations managers now need to know who is allowed to work in a particular location at any given moment. 

And of course, as the Omicron variant becomes more widespread and its effects are felt in society, organisations will need to rapidly adjust their plans to keep employees safe and comply with the law. 

This can all feel very burdensome for operations managers: more data to gather, more lenses through which to look at workload, resources and availability.

But while there may be some initial pain associated with responding to these new requirements, I believe that they present an opportunity to create a more optimised future of work.  

Understanding comprehensive workforce data can make business life more manageable. Thereby, it’s crucial to outline the four ways it contributes to a productive workplace.  

  • Creates a well-balanced and engaged workforce 

It’s no secret that your employees will have preferences for where they work. Understanding those preferences and factoring that into your planning can help ensure your employees are engaged in their work, improving productivity, well-being, and retention. 

If you can layer that information with data on employees’ performance in different environments, you have another part of the picture to help you balance your workforce. 

Of course, that data may need a third layer – who is eligible to work in which locations – and that needs to be handled correctly so that you comply with any local or national laws that are in force or will come into force. 

  • Helps to reduce costs 

This has already been discussed concerning the pandemic in a few places. As organisations move to hybrid working models, their need for office space reduces the costs associated with it. That could include rent, power, heating, water, insurance, and facilities. 

But the cost argument goes beyond the maths of office space. Armed with the correct data, organisations can ensure that their people are working where they are most productive and happiest. 

That can reduce costs, mainly in decreased absenteeism, costing thousands of pounds per year. 

That reduced cost could be used to help balance the books in a tight year – or it could mean that funds are available for training and coaching programmes that improve employee performance or even on rewarding high-performing employees. 

  • Broadens the scope for your talent pool 

Although gathering and analysing more data might feel burdensome, the truth is that it enables you to implement hybrid working models effectively and with confidence that they will deliver. 

And that means that you gain all the benefits of a hybrid work environment – including a vastly expanded talent pool. With minor roles a part of the norm, you can hire anyone from any country, allowing you to create more diverse and talented teams than you could before. 

  • Can help make a positive contribution to sustainability efforts 

Most organisations are considering reducing their carbon footprint and becoming more sustainable. If your organisation uses data to support a hybrid workforce, you should see a reduction in emissions on multiple fronts. 

You may see reduced emissions as fewer employees commute and those who commute less. You may see a reduced need for office lighting and heating – not to mention a reduction in office waste – as footfall in the office decreases. 

The workforce data you gather to enable all this will help demonstrate a contribution to your organisation’s emission reduction programme – or could even form the basis of starting one if you haven’t already. 

Availability is the new eligibility 

It’s essential to start thinking about gathering data in a different light. Eligibility is arguably the most pressing (and stressing) requirement for organisations right now, and the temptation can be to find a solution that focuses solely on eligibility. 

But to take a broader view, eligibility data isn’t that different from the other data you’re gathering about employees and where they can work. You’re trying to build a picture of where your workforce is based – and eligibility is just one more layer on top of others, such as where your employees prefer to work and where they are most productive. 

When you consider the challenge in those terms, the uses for the data, you’re gathering suddenly expand. We’re calling the blanket term for this data “availability.” 

Of course, gathering availability data – and indeed all the workforce intelligence that makes the four things I’ve mentioned possible – is the trick. 

In a hybrid world, data needs to be gathered automatically, wherever employees are based, in real-time, to give managers as much detail as possible. 

But at the same time, organisations need to find solutions to prevent managers from drowning in data, which will prevent them from getting on with their jobs.

  • Michael Cupps is the Senior Vice-President for Marketing at ActiveOps.

Omicron leads to 521% surge in Covid test-related email scams

  • Attackers went as far as impersonating the Office 365 logo and stating that the document has already been scanned for virus and spam content.
  • Scammers are using different tactics to get the attention of their victims such as offering to sell Covid-19 tests and other medical supplies such as masks or gloves.

Cybercriminals have been taking advantage of the heightened focus on the Covid-19 testing and the latest omicron variant not only led to another spike in Covid-19 cases but also phishing attacks.

There has been a 521 per cent rise in Covid test-related scam emails between October 2021 and January 2022.

As some organisations try to get their staff back to the office, they send out updated policies or request information on employees’ vaccination status.

Hackers hijack these conversations and in one specific example found in Barracuda’s research, cybercriminals impersonated an HR department and shared a file hosted on a phishing site with employees in hope of stealing their account credentials.

The attackers went as far as impersonating the Office 365 logo and stating that the document has already been scanned for virus and spam content.

Scammers are using different tactics to get the attention of their victims such as offering to sell Covid-19 tests and other medical supplies such as masks or gloves; fake notifications of unpaid orders for Covid-19 tests, where scammers provide a PayPal account to send payments to complete the purchase of rapid tests — counting on the desperation of their victims; the impersonation of either lab, testing providers, or individual employees sharing fake Covid-19 test results.

Evolving tactics

“Capitalising on the chaos of the pandemic is not a new trend in the world of cybercrime. But, with constantly evolving tactics, and new trends to latch on to, it’s easy to see why scammers are not giving up on this trick,” Fleming Shi, CTO for Barracuda Networks, said.

In fact, in March 2020, when Covid-19 started to spread rapidly, Barracuda researchers observed that Covid-related phishing attacks jumped 667 per cent.

Just like the threat of Covid-19, Shi said that pandemic-themed scams are not going to disappear overnight, but fortunately, there are several tactics that businesses and consumers can employ to ensure they remain protected.

“For a start, businesses must leverage sophisticated email security which utilises artificial intelligence to detect and block email attack tactics that are designed to bypass basic gateways and spam filters.

“Providing employees with up-to-date user awareness training about covid-related phishing, seasonal scams, and other potential threats is also a vital cybercrime prevention method which must be adopted,” he said.

Steps to protect:

  • Some email scams include offers to purchase Covid-19 tests, provide information on testing sites with immediate availability, or share test results. Don’t click on links or open attachments in emails that you did not expect, as they are typically malicious.
  • Scammers are adapting email tactics to bypass gateways and spam filters, so it’s critical to have a solution that detects and protects against spear-phishing attacks, including brand impersonation, business email compromise and email account takeover. Deploy purpose-built technology that doesn’t rely solely on looking for malicious links or attachments. Using machine learning to analyse normal communication patterns within your organization allows the solution to spot anomalies that may indicate an attack.
  • Don’t just focus on external email messages. Some of the most devastating and successful spear-phishing attacks originate from compromised internal accounts. Be sure scammers aren’t using your organization as a base camp to launch these attacks. Deploy technology that uses artificial intelligence to recognise when accounts have been compromised and that remediates in real-time by alerting users and removing malicious emails sent from compromised accounts.
  • Educate your users about spear-phishing attacks. Provide employees with up-to-date user awareness training about Covid-19-related phishing, seasonal scams, and other potential threats. Ensure staffers can recognise the latest attacks and know how to report them to IT right away. Use phishing simulation for email, voicemail, and SMS to train users to identify cyberattacks, test the effectiveness of your training, and evaluate the most vulnerable users.
  • All companies should establish and regularly review existing policies, to ensure that personal and financial information is handled properly. Help employees avoid making costly mistakes by creating guidelines and putting procedures in place to confirm all email requests for wire transfers and payment changes. Require in-person or telephone confirmation and/or approval from multiple people for all financial transactions.

Related posts:

India has rightfully linked sustainability with digital inclusion: SAP

  • The foundation of policy and program level initiatives has been firmly established.
  • Sustainability presents a unique opportunity to create a lasting positive impact for future generations.
  • He says that the time for concrete activities is now and technology can empower businesses to become sustainable.

India is on a remarkable growth path and has rightfully linked sustainability with digital inclusion, the CEO of SAP said.

Speaking from Germany for the sixth iteration of the Global Technology Summit, Christian Klein said that the approach of competitive federalism in India is notable and replicable.

“You cannot manage what you cannot measure, and digital technologies play a crucial role. The foundation of policy and programme level initiatives has been firmly established. Now technology can catalyse their implementation and true value,” he said.

India’s Prime Minister Modi, at this year 2021 United Nations Climate Change Conference in Glasgow, shared a five-point programme to combat climate change, achieving 500 gigabytes of clean energy capacity by 2030 and net-zero carbon emissions by 2070.

“The unique initiative of the Sustainable Development Goal index in India is a crowd breaking path to ensure measurement and monitoring at national and sub-national levels and it is also a testament of what we at SAP strongly believe,” Klein said.

Moreover, he said that sustainability presents a unique opportunity to create a lasting positive impact for future generations.

Digital transformation

“We all need to work together to accelerate the transformation of our economies, deal with the impact of the climate change we have already created and bend the curve on global emissions. The time for concrete activities is now and technology can empower businesses to become sustainable, inclusive, and successful,” he said.

Nine out of 10 warehouses globally are running on SAP and are powering most of the world’s most critical and energy-intensive processes.

“We help our customers become intelligent, networked, and sustainable enterprises. At SAP we lead by example through our sustainable business operations, for instance by becoming carbon neutral in 2023 or moving to a fully emission-free car fleet by 2030. And even more important, we lead as an enabler helping our customers to manage their green line together with top and bottom line,” Klein said.

They can make climate protection “measurable and promote sustainable business practices” across their entire value chain by tracking their end-to-end carbon footprint to ensure diversity, inclusion and the protection of human rights, he said.

“For sure, sustainability is one of the defining issues of our lifetime, and it is at the core of what we do at SAP,” he said.

Related Posts: