Home

Research to be Presented at Blackhat Shows Vulnerability in Critical Infrastructure

Research set to be presented at the Blackhat conference in Las Vegas this week will reveal vulnerabilities in Industrial Ethernet Switches that could allow Nuclear Power Plants, Hydroelectric Dams and other critical infrastructure to be hacked.

Ken Westin, Security Analyst for Tripwire says “These systems should be closed off via air gapped networks but the good news is that the problem can be fixed without updating the firmware.” Tim Erlin, Director of IT security and Risk Strategy at Tripwire explains tha, “ A lot of progress has been made in recent years, but industrial networking systems have an exceptionally long lifespan compared to corporate IT. In some cases, vendors and utilities are trying to address security issues on more than 15 year old devices that are difficult to replace.”

: INTERNATIONAL SECURITY EXPERTS; Talking Point; Posted On Tuesday, 04 August 2015 07:38

Wandera partners with Three to provide mobile data security and optimization

London and Ireland: Wandera together with enterprise mobility specialist CWSI, has announced a strategic partnership with Three to deliver its secure mobile gateway services to business customers in Ireland. The integration will enable Three’s business customers to secure, control and manage mobile data usage across employee devices.

: Hayley Myles and Sarah Walker; Industry News; Posted On Tuesday, 04 August 2015 07:32

The Enemy Within: Combatting Insider Threats in the Contact Centre

Matthew Bryars, CEO of Aeriandi in this article discusses the growing threat of insider fraud in contact centres and what can be done to mitigate the risk.

Some key points:

The threat from within - How recent security improvements such as Chip & PIN and 3D Secure have drastically reduced fraud in traditional channels but are funnelling fraudsters into a shrinking number of less well protected paths such as phone payments, making contact centres prime targets
The threat this represents to organisations and their employees, particularly relating to insider threats
The different types of insider threats a contact centre should look out for e.g. coercion, criminal gangs planting under cover staff as well as naivety leading to risk
What organisations can do to protect themselves and their employees from fraudsters

: MATTHEW BRYARS, CEO AND CO-FOUNDER AERIANDI; Viewpoints; Posted On Monday, 03 August 2015 12:32

Solving the Dropbox dilemma

...Is your cloud file-sharing platform fit for the enterprise?

In this article, Mark Edge, UK Country Manager of Brainloop writes about the security risks of using public cloud-based file-sharing platforms at work, and how businesses can implement a more secure file-sharing strategy.

To avoid the loss or misuse of sensitive information, Mark offers 9 pointers about making secure file-sharing work in the workplace. These include:

Selecting an enterprise-ready file-sharing platform that is intuitive and that can be integrated into the business workflow, to avoid bottlenecks and backdoor leaks
Using a solution that allows employees to securely manage and collaborate on confidential documents both in the office and remotely
Always think of security and convenience as going hand-in-hand, not as being either/or
Establishing a clear policy for document security in the workplace and ensure all employees understand it
Putting security measures in place that prohibit changes being made to documents unless authorised
Regularly monitoring and auditing your network to check for any unauthorised activity.

A recent survey* has revealed that accidental data sharing by staff now produces a greater amount of lost datathan software vulnerabilities. 29 per cent of respondents to the Kaspersky study reported they had suffered accidental data leaks by staff during 2014.