Connect with us

E-Business

Sophos Global Report Shows how Cyberattacks on Cloud Honeypots occurs within Seconds

Published

on

Kindly share this post

Sophos, a global leader in network and endpoint security has announced the findings of its report Exposed: Cyberattacks on Cloud Honeypots, which reveals that cybercriminals attacked one of the cloud server honeypots in the study within 52 seconds of the honeypot going live in Sao Paulo, Brazil.

 

On average, the cloud servers were hit by 13 attempted attacks per minute, per honeypot.

 

The honeypots were set up in 10 of the most popular Amazon Web Services (AWS) data centers in the world, including California, Frankfurt, Ireland, London, Mumbai, Ohio, Paris, Sao Paulo, Singapore, and Sydney over a 30-day period. A honeypot is a system intended to mimic likely targets of cyberattackers, so that security researchers can monitor cybercriminal behaviors.

 

In the study, more than 5 million attacks were attempted on the global network of honeypots in the 30-day period, demonstrating how cybercriminals are automatically scanning for weak open cloud buckets.

 

If attackers are successful at gaining entry, organizations could be vulnerable to data breaches. Cybercriminals also use breached cloud servers as pivot points to gain access onto other servers or networks.

 

“The Sophos report, Exposed: Cyberattacks on Cloud Honeypots, identifies the threats organizations migrating to hybrid and all-cloud platforms face. The aggressive speed and scale of attacks on the honeypots shows how relentlessly persistent cybercriminals are and indicates they are using botnets to target an organization’s cloud platforms.

 

In some instances, it may be a human attacker, but regardless, companies need a security strategy to protect what they are putting into the cloud,” said Matthew Boddy, security specialist, Sophos. “The issue of visibility and security in cloud platforms is a big business challenge, and with increased migration to the cloud, we see this continuing.”

 

Visibility into Weaknesses

Continuous visibility of public cloud infrastructure is vital for businesses to ensure compliance and to know what to protect. However, multiple development teams within an organization and an ever-changing, auto-scaling environment make this difficult for IT security.

 

Sophos is addressing security weaknesses in public clouds with the launch of Sophos Cloud Optix, which leverages artificial intelligence (AI) to highlight and mitigate threat exposure in cloud infrastructures. Sophos Cloud Optix is an agentless solution that provides intelligent cloud visibility, automatic compliance regulation detection and threat response across multiple cloud environments.

 

“Instead of inundating security teams with a massive number of undifferentiated alerts, Sophos Cloud Optix significantly minimizes alert fatigue by identifying what is truly meaningful and actionable,” said Ross McKerchar, CISO, Sophos. “In addition, with visibility into cloud assets and workloads, IT security can have a far more accurate picture of their security posture that allows them to prioritize and proactively remediate the issues flagged in Sophos Cloud Optix.”

 

Key features in Sophos Cloud Optix include:

  • Smart Visibility – Provides automatic discovery of an organization’s assets across AWS, Microsoft Azure and Google Cloud Platform (GCP) environments, via a single console, allowing security teams complete visibility into everything they have in the cloud and to respond and remediate security risks in minutes
  • Continuous Cloud Compliance – Keeps up with continually changing compliance regulations and best practices policies by automatically detecting changes to cloud environments in near-time
  • AI-Based Monitoring and Analytics – Shrinks incident response and resolution times from days or weeks to just minutes. The powerful artificial intelligence detects risky resource configurations and suspicious network behavior with smart alerts and optional automatic risk remediation

 

“Migrating several petabytes of data and many applications to AWS and Azure made it necessary to transition from a manual to automated process for security monitoring. Sophos Cloud Optix’s multi-cloud security and compliance platform capabilities provided real-time cloud workload protection status in seconds.

 

“The AI-powered monitoring and alerts helped reduce the noise and allowed our teams to focus on delivering value to the business,” said Aaron Peck, vice president and CISO, Shutterfly, Inc., a Sophos customer, based in Redwood City, Calif.

 

“Our goal is to provide the most comprehensive and highly-effective cyber security services to all of our clients. Whether in technology, manufacturing or utilities, our customers want to maximize their investments and protect their data in the cloud. The partnership with Sophos and the ability to offer Sophos Cloud Optix is important to us because it allows us to provide continuous compliance coupled with intelligent cloud visibility and immediate threat response. With Cloud Optix, our growing customer-base will have the opportunity to solve the toughest challenges in cloud security,” said Rajeev Khanolkar, president and CEO, SecurView Inc., a Sophos partner based in Edison, New Jersey.

 

Sophos Cloud Optix leverages AI-powered technology from Avid Secure, which Sophos acquired in January 2019. Founded in 2017 by a team of highly distinguished leaders in IT security, Avid Secure revolutionized the security of public cloud environments by providing effective end-to-end protection in cloud services, such as AWS, Azure and Google.

 

Pricing and availability details are available from Sophos partners worldwide.

For more information on Sophos’ findings, please read the full Exposed: Cyberattacks on Cloud Honeypots report and accompanying Naked Security article, Knock and Don’t Run: The Tale of the Relentless Hackerbots. Additional information on Sophos Cloud Optix is available on Sophos.com.


Kindly share this post

Ugo Onwuaso is an ICT enthusiast. He believes technology should be used for general good. He holds a Master of Public Administration (MPA) degree from the Lagos state University. Dear Reader, Your support matters. But we believe that technology makes life more exciting and helps improve the lives of people around Nigeria and indeed the world. That is why, we have devoted our energy to independent reportage of technology and finance and how they affect lives. Our incisive and analytical view of how technology news affects the daily life help individuals and organizations make up their minds. Quality journalism costs money. Today, we're asking that you support us to do more. Kindly support our effort to deliver technology and finance journalism to everyone in the world. Donate as little as N1,000. Bank transfers can be made to: UBA Plc 1017156876 Communication Week Media Ltd

E-Business

FG to Fnalise National Intellectual Property Policy  Soon– NCC Boss

Published

on

Kindly share this post

Dr John Asein, director-general, Nigerian Copyright Commission (NCC), has said that the federal government is taking steps to finalise its National Intellectual Property (IP) Policy and Strategy for the country.

FG to Fnalise National Intellectual Property Policy  Soon– NCC Boss

Asein disclosed this on Friday while commemorating the 2024 World Intellectual Property Day with the theme “IP and the SDGs: Building Our Common Future with Innovation and Creativity’’ in Abuja.

The that the Day is observed every April 26 to celebrate the importance of intellectual property (IP) rights to encourage innovation and creativity.

The director-general was represented by  Mr Emeka Ogbonna, director of Legal.

NCC boss said the policy would serve as a blueprint for a more efficient modern and responsive legal and administrative framework for the country to leverage on its creative and innovative potential.

He said that the day underscored the power of innovation and creativity in achieving the Sustainable Development Goals (SDGs) and shaping a sustainable and inclusive future for humanity.

According to him, the SDGs represent a universal call to action to end poverty, protect the planet, and ensure prosperity for all by the year 2030.

“IP rights play a pivotal role in fostering innovation, creativity, and technological advancements. They provide the framework that encourages men and women to develop new solutions that address global challenges.

“It is the lynchpin for incentivising the use of creative and innovative ideas to solve many of the challenges that confront humanity.

“This year’s World IP Day reminds us that intellectual property can be a powerful tool for social, economic, and environmental development.

“It encourages individuals, businesses, and governments to leverage IP rights to drive innovation, create jobs, and build resilient communities.

“By aligning our intellectual property policies and strategies with the objectives of the SDGs, we can accelerate their achievement,’’ NCC boss said.

He said in the spirit of the “Renewed Hope Agenda’’ of the present administration, government had also shown appreciable commitment to the creative industry as a major sector of the economy.

“As one of the agencies responsible for the wholesome development of the creative sector, the Nigerian Copyright Commission will continue to provide the needed institutional, legal and administrative support for the protection, promotion, regulation and enforcement of copyright.

“The commission will pay particular attention to using the copyright system to advance Goal 1 (No poverty); Goal 4 (Quality education); Goal 5 (Gender equality).

“And Goal 8 (Decent and economic growth); Goal 9 (Industry, innovation and infrastructure) and Goal 17 (Partnerships to achieve the goals).

“We are aware that the goals would have to be adapted to fit the peculiar needs of intellectual property which is an intangible asset.’ ’he added.

The director-general, who said that the commission focused on the 17 SDGs to address emerging challenges, called on authors, innovators, users, IP experts and other stakeholders to reflect on the vulnerability of the nation’s fragile knowledge and creative ecosystem.


Kindly share this post
Continue Reading

E-Business

NITDA, ICF Train 100 Schoolgirls in ICT Skills

Published

on

Kindly share this post

The National Information Technology Development Agency (NITDA) and Illmi Children’s Fund (ICF) have trained 100 schoolgirls in digital and Information and Communication Technology skills training.

Mrs. Maryam Augie-Abdulmumin, ICF Executive Director, confirmed this in a statement on Thursday in Lagos.

The graduation followed the training of the schoolgirls in ICF and NITDA’s DIGITGALS 2.0 programme, a collaborative initiative aimed to equip adolescent girls in Abuja with critical digital and ICT skills.

Augie-Abdukmumin said the DIGITGALS 2.0 centred around essential digital literacy, programming fundamentals, digital marketing and communication skills, and cybersecurity awareness.

She added that the girls were equipped with the confidence to compete and excel in a globalised digital economy. The graduation was in commemoration of the 2024 International Girls in ICT Day celebration on April 25.

DIGITGALS 2.0 is in its second phase and empowered 100 senior secondary school girls selected from five government schools in the Federal Capital Territory.

The girls aged between 15 and 18 years were equipped with the knowledge and tools needed to thrive in the digital world and address the growing demand for ICT skills in the 21st century.

Augie-Abdulmumin reiterated the importance of bridging the digital gap in the country starting with the girl-child.

“This graduation ceremony on International Day of Girls in ICT is a powerful symbol of our commitment to closing the digital gender gap.

This programme made possible through our partnership with NITDA, and signifies a crucial step towards bridging the digital gender gap.

It also fostering a future where women are active leaders in the tech industry. This is also an opportunity for these girls to take charge of their own future,”.

Mr Kashifu  Abdullahi, the Director-General of NITDA, commended the collaborative efforts of ICF in making the DIGITGALS 2.0 a reality.

According to him, building a diverse and inclusive digital workforce is critical for Nigeria’s success.

“We are proud to collaborate with ICF on DIGITGALS 2.0 to empower these young women to become active participants in the tech industry. This programme showcases the importance of collaborative efforts in bridging the digital gender gap.

These girls have been equipped with essential digital skills, and ICF and NITDA are confident they will become active contributors to Nigeria’s thriving tech landscape,”.

ICF is a non-profit organisation dedicated to improving the lives of children, from underprivileged backgrounds, through education, healthcare, technology and entrepreneurship initiatives.

NITDA is a public service institution established in 2007. It functions as the ICT policy implementing arm of Nigeria’s Federal Ministry of Communication and Digital Economy.


Kindly share this post
Continue Reading

E-Business

Confronting the Google Monolith: Survival Strategies for Online Businesses

Published

on

Kindly share this post

By Reuben Kalu.

In the vast expanse of the digital realm, Google looms large, an omnipresent force shaping the way we navigate, search, and conduct business online.

From its humble beginnings as a search engine to its current status as a multifaceted tech behemoth, Google has entrenched itself deeply into the fabric of the internet.

Its influence is undeniable, its reach unparalleled, and its ubiquity seemingly inescapable. But can you truly run an online business without Google?

The answer, in today’s digital landscape, is a resounding no. You have no choice.

Google’s dominance extends across multiple facets of the online world, making it virtually impossible for businesses to thrive without engaging with its ecosystem.

From search engine optimization (SEO) to online advertising, email services to analytics, Google’s suite of products and services permeates every aspect of the online business landscape.

Attempting to operate without Google is akin to swimming against a relentless tide, fighting an uphill battle fraught with obstacles and limitations.

At the heart of Google’s influence lies its search engine, the gateway through which billions of internet users navigate the vast expanse of online content. .

Google’s search algorithms wield immense power, determining which websites rank prominently in search results and which languish in obscurity.

For businesses seeking to attract organic traffic and expand their online presence, optimizing for Google’s search algorithms is not merely advisable—it’s imperative.

But Google’s influence extends far beyond search. Consider Google Ads, the company’s advertising platform that enables businesses to reach targeted audiences through paid search, display, and video advertising.

With billions of searches conducted on Google each day, Google Ads provides unparalleled reach and visibility, allowing businesses to target potential customers with pinpoint accuracy.

Attempting to compete in the online advertising arena without leveraging Google Ads is akin to entering a battle unarmed—a futile endeavor destined for failure.

 

Moreover, Google’s suite of productivity tools, including Gmail, Google Drive, and Google Workspace, has become indispensable for businesses seeking to streamline their operations and enhance collaboration.

With seamless integration across devices and platforms, Google’s productivity tools offer unparalleled convenience and efficiency, empowering businesses to work smarter, not harder.

Attempting to eschew Google’s productivity suite in favor of alternative solutions is not only impractical but also unwise, depriving businesses of the tools they need to succeed in today’s fast-paced digital landscape.

Furthermore, Google Analytics stands as the gold standard for web analytics, providing businesses with invaluable insights into their online performance and audience behavior.

From tracking website traffic and user engagement to analyzing conversion metrics and customer demographics, Google Analytics offers a comprehensive toolkit for optimizing online marketing strategies and driving business growth.

Attempting to gauge online performance without leveraging Google Analytics is akin to flying blind, devoid of the critical data needed to make informed decisions and drive meaningful results.

But perhaps the most formidable aspect of Google’s influence lies in its role as a gatekeeper of information and access.

With billions of users relying on Google’s platforms and services each day, the company wields immense control over the flow of online traffic and the dissemination of information.

For businesses seeking to connect with customers and expand their reach, Google’s dominance presents both a tremendous opportunity and a formidable challenge.

Attempting to circumvent Google’s influence and establish an online presence independent of its ecosystem is a Herculean task, fraught with uncertainty and risk.

In essence, attempting to run an online business without engaging with Google is akin to swimming against a relentless tide, fighting an uphill battle fraught with obstacles and limitations.

While alternative platforms and solutions exist, none possess the ubiquity, reach, and influence of Google’s ecosystem.

To thrive in today’s digital landscape, businesses must embrace Google’s dominance and leverage its suite of products and services to their advantage. You have no choice.

In conclusion, Google’s pervasive influence permeates every aspect of the online business landscape, making it virtually impossible to escape its grasp.

From search engine optimization to online advertising, productivity tools to web analytics, Google’s ecosystem encompasses a vast array of products and services that have become indispensable for businesses seeking to succeed in the digital age.

While alternative solutions may exist, none possess the ubiquity, reach, and influence of Google’s ecosystem.

To thrive in today’s digital landscape, businesses must embrace Google’s dominance and leverage its suite of products and services to their advantage.

You have no choice.


Kindly share this post
Continue Reading

Trending