Back to aLinDev's profile
aLinDev

Posts by aLinDev

4,385 posts

  1. #4021
  2. #4022
  3. #4023
  4. #4024
  5. #4025
  6. #4026
  7. #4027
  8. #4028
  9. #4029
  10. #4030
  11. #4031
  12. #4032
  13. #4033
  14. #4034
  15. #4035
  16. #4036
  17. #4037
  18. #4038
    Reply in IT news

    The march toward the cloud for data and services has many companies rethinking their approach to cyber security. Do they need a cloud security strategy? What is different about a cloud security strategy? Two recent surveys have shed light on how security strategies are changing, and more important, how they should change.

    Placing more IT infrastructure in the cloud is in some ways more secure than having it in house. For instance, you can be reasonably sure that the system is running the latest version with the proper patches in place. Cloud service providers are also building in new capabilities such as using machine language for anomaly detection. However, it also presents new risks, some of which is the result of misunderstanding how to manage cloud security.

    It is important to know how a company’s cloud IT strategy—whether it’s hybrid, private hosted, or public—affects its cyber security strategy and the tactical execution of that strategy.

    Our new gaming site is live! Gamestar covers games, gaming gadgets and gear. Subscribe to our newsletter and we’ll email our best stuff right to your inbox. Learn more here.
    What is the cloud security risk?

    Data from cloud security provider Alert Logic shows the nature and volume of risk for each form of cloud environment as compared to an on-premises data center. For 18 months, the company analyzed 147 petabytes of data from more than 3,800 customers to quantify and categorize security incidents. During that time, it identified more than 2.2 million true positive security incidents. Key findings include:

  19. #4039
    Reply in IT news

    Anyone who uses a smartphone knows the importance of carrying a backup power bank. But given the overwhelming number of options on Amazon, you might feel overwhelmed, understandably. Besides the various charging specs, ports, and even cables you have to consider, there are a ton of competing brands. It’s common to see products from Anker, Mophie, and MyCharge, but how do you know which ones deliver on their promises? Is it worth saving a few bucks if a battery pack’s performance is lacking?

    Power-bank cheat sheet

    Our quick-hit recommendations:

    We decided to do the legwork for you, acquiring a wide range of power banks from different manufacturers, some offering unique features. We then spent weeks testing the packs (read about our testing process in detail below).

    While we’ve made some top picks, be sure to read through each review, linked to at the bottom of this page, to help you find the best battery pack for your needs. (You might also be interested in our our roundup of USB car chargers if you spend a lot of time in a vehicle.)

  20. #4040
    Reply in IT news

    Humans are funny creatures who don’t always react in their own best interests, even when faced with good, contrarian data they agree with. For example, most people are far more afraid of flying than of the car ride to the airport, even though the car ride is tens of thousands of times riskier. More people are afraid of getting bitten by a shark at the beach than by their own dog at home, even though being bitten by their dog is hundreds of thousands of times more likely. We just aren’t all that good at reacting appropriately to risks even when we know and believe in the relative likelihood of one versus the other happening.

    The same applies to IT security.

    Computer defenders often spend time, money, and other resources on computer defenses that don’t stop the biggest threats to their environment. For example, when faced with the fact that a single unpatched program needed to be updated to stop most successful threats, most companies do everything other than patch that program. Or if faced with the fact that many successful threats occurred because of social engineering that better end-user training could have stopped, the companies instead spent millions on everything but better training.

    Our new gaming site is live! Gamestar covers games, gaming gadgets and gear. Subscribe to our newsletter and we’ll email our best stuff right to your inbox. Learn more here.
    I could give you dozens of other examples, but the fact that most companies can easily be hacked into at will is testament enough to the crisis. Companies simply aren’t doing the simple things they should be doing, even when confronted with the data.

     
    The problem bothered me enough that I wrote a whitepaper, slide deck, and book on the subject. Without having to read all of that, the answer for why so many defenders don’t let the data dictate their defenses is mostly about a lack of focus. A lot of priorities compete for computer defenders' attention, so much so that the things they could be doing to significantly improve their defense aren’t being done, even when cheaper, faster, and easier to do.