Connect with us

E-Business

Sophos Global Report Shows how Cyberattacks on Cloud Honeypots occurs within Seconds

Published

on

Spread the love

Sophos, a global leader in network and endpoint security has announced the findings of its report Exposed: Cyberattacks on Cloud Honeypots, which reveals that cybercriminals attacked one of the cloud server honeypots in the study within 52 seconds of the honeypot going live in Sao Paulo, Brazil.

 

On average, the cloud servers were hit by 13 attempted attacks per minute, per honeypot.

 

The honeypots were set up in 10 of the most popular Amazon Web Services (AWS) data centers in the world, including California, Frankfurt, Ireland, London, Mumbai, Ohio, Paris, Sao Paulo, Singapore, and Sydney over a 30-day period. A honeypot is a system intended to mimic likely targets of cyberattackers, so that security researchers can monitor cybercriminal behaviors.

 

In the study, more than 5 million attacks were attempted on the global network of honeypots in the 30-day period, demonstrating how cybercriminals are automatically scanning for weak open cloud buckets.

 

If attackers are successful at gaining entry, organizations could be vulnerable to data breaches. Cybercriminals also use breached cloud servers as pivot points to gain access onto other servers or networks.

 

“The Sophos report, Exposed: Cyberattacks on Cloud Honeypots, identifies the threats organizations migrating to hybrid and all-cloud platforms face. The aggressive speed and scale of attacks on the honeypots shows how relentlessly persistent cybercriminals are and indicates they are using botnets to target an organization’s cloud platforms.

 

In some instances, it may be a human attacker, but regardless, companies need a security strategy to protect what they are putting into the cloud,” said Matthew Boddy, security specialist, Sophos. “The issue of visibility and security in cloud platforms is a big business challenge, and with increased migration to the cloud, we see this continuing.”

 

Visibility into Weaknesses

Continuous visibility of public cloud infrastructure is vital for businesses to ensure compliance and to know what to protect. However, multiple development teams within an organization and an ever-changing, auto-scaling environment make this difficult for IT security.

 

Sophos is addressing security weaknesses in public clouds with the launch of Sophos Cloud Optix, which leverages artificial intelligence (AI) to highlight and mitigate threat exposure in cloud infrastructures. Sophos Cloud Optix is an agentless solution that provides intelligent cloud visibility, automatic compliance regulation detection and threat response across multiple cloud environments.

 

“Instead of inundating security teams with a massive number of undifferentiated alerts, Sophos Cloud Optix significantly minimizes alert fatigue by identifying what is truly meaningful and actionable,” said Ross McKerchar, CISO, Sophos. “In addition, with visibility into cloud assets and workloads, IT security can have a far more accurate picture of their security posture that allows them to prioritize and proactively remediate the issues flagged in Sophos Cloud Optix.”

 

Key features in Sophos Cloud Optix include:

  • Smart Visibility – Provides automatic discovery of an organization’s assets across AWS, Microsoft Azure and Google Cloud Platform (GCP) environments, via a single console, allowing security teams complete visibility into everything they have in the cloud and to respond and remediate security risks in minutes
  • Continuous Cloud Compliance – Keeps up with continually changing compliance regulations and best practices policies by automatically detecting changes to cloud environments in near-time
  • AI-Based Monitoring and Analytics – Shrinks incident response and resolution times from days or weeks to just minutes. The powerful artificial intelligence detects risky resource configurations and suspicious network behavior with smart alerts and optional automatic risk remediation

 

“Migrating several petabytes of data and many applications to AWS and Azure made it necessary to transition from a manual to automated process for security monitoring. Sophos Cloud Optix’s multi-cloud security and compliance platform capabilities provided real-time cloud workload protection status in seconds.

 

“The AI-powered monitoring and alerts helped reduce the noise and allowed our teams to focus on delivering value to the business,” said Aaron Peck, vice president and CISO, Shutterfly, Inc., a Sophos customer, based in Redwood City, Calif.

 

“Our goal is to provide the most comprehensive and highly-effective cyber security services to all of our clients. Whether in technology, manufacturing or utilities, our customers want to maximize their investments and protect their data in the cloud. The partnership with Sophos and the ability to offer Sophos Cloud Optix is important to us because it allows us to provide continuous compliance coupled with intelligent cloud visibility and immediate threat response. With Cloud Optix, our growing customer-base will have the opportunity to solve the toughest challenges in cloud security,” said Rajeev Khanolkar, president and CEO, SecurView Inc., a Sophos partner based in Edison, New Jersey.

 

Sophos Cloud Optix leverages AI-powered technology from Avid Secure, which Sophos acquired in January 2019. Founded in 2017 by a team of highly distinguished leaders in IT security, Avid Secure revolutionized the security of public cloud environments by providing effective end-to-end protection in cloud services, such as AWS, Azure and Google.

 

Pricing and availability details are available from Sophos partners worldwide.

For more information on Sophos’ findings, please read the full Exposed: Cyberattacks on Cloud Honeypots report and accompanying Naked Security article, Knock and Don’t Run: The Tale of the Relentless Hackerbots. Additional information on Sophos Cloud Optix is available on Sophos.com.

Ugo Onwuaso is an ICT enthusiast. He believes technology should be used for general good. He holds a Master of Public Administration (MPA) degree from the Lagos state University.

Continue Reading
Advertisement
Comments

E-Business

Copyright Commission Warns Schools against Pirated Books

Published

on

John Asein
Spread the love

Nigerian Copyright Commission (NCC) has vowed to prosecute institutions and schools that use pirated books.

 

It said it would work with the Nigerian Publishers Association (NPA) to explore ways of creating safe corridors for the distribution of legitimate books.

 

Mr John Asein, NCC director-general in a statement to mark the World Book and Copyright Day, held every April 23, said the fight against book piracy will be intensified.

 

According to him, the Commission would continue to develop policies and strategies to facilitate a culture of respect for authorship and copyright works.

 

“We will step up our enforcement and prosecutorial activities to stem the tide of copyright infringements both off and online.

 

“We will also reinvigorate our compliance checks in schools and other institutions of learning to sensitize them on the need to patronize only genuine copies of books through legitimate channels of distribution.

 

“Henceforth, proprietors, heads of schools and authorities in charge will be held vicariously responsible for any pirated books distributed to pupils and students through their schools.

 

“We shall also be taking appropriate steps under the law to sanction institutions found involved in mindless and unconscionable use and promotion of pirated books,” NCC said.

 

The Commission has embraced developments in the international copyright community to create a more inclusive culture of access to published works for blind and visually impaired persons.

 

It noted that Nigeria, in October 2017, ratified the Marrakesh Treaty to Facilitate Access to Published Works for Persons Who Are Blind, Visually Impaired or Otherwise Print Disabled.

 

“We have also gone ahead to make provision for the domestication of the treaty in the new Copyright Bill which was recently approved by the Federal Executive Council.

 

“On a more practical note, the Commission, with help from the World Intellectual Property Organisation (WIPO) and its Accessible Book Consortium, is collaborating with the Nigeria Association of the Blind (NAB), the NPA, the Reproduction Rights Society of Nigeria (REPRONIG), and other key stakeholders to provide more books in accessible formats for blind and visually impaired persons in Nigeria,” Asein said.

 

According to him, a pilot project on capacity building assistance, provision of accessible books and assistive technologies to students in that category is ongoing.

This, he said, is another demonstration of the Federal Government’s policy on inclusiveness, equal access and non-discrimination against persons living with disabilities.

 

He urged stakeholders in the creative industry to support the government’s efforts to revamp the sector and build a copyright system that will help to maximize its potentials to national economic development.

 

Theme of this year’s celebration is: “Discover the World through Reading”!

 

The statement added: “The United Nations Educational, Scientific and Cultural Organization (UNESCO) in 1995 declared April 23 as a special day to focus on the wonderful world of books and the enduring role of copyright in promoting and protecting the rights of authors and other stakeholders.

 

“The day is also an occasion to celebrate the contribution of books and authors to our global culture as well as highlight the connection between copyright, creativity and books to the propagation of our common values as humanity.

 

“For us at the NCC, it is an opportunity to again underscore the importance of creativity to our collective development aspirations as a nation, with particular emphasis on respect for copyright and the effective protection of the rights of our authors. “As we join the world to celebrate the book as an enduring legacy, it is saddening to note the decline in our reading culture. This has become a major national concern in Nigeria for its youth population.

 

“The essence of reading, particularly for leisure and personal enjoyment, cannot be over emphasized.

 

“Reading is to the mind what physical exercise is to the body; it is food for the soul, the chisel that helps shape who we become in today’s knowledge driven world.

 

“Books develop the personality and stimulate imagination, taking us to faraway lands that we may never visit physically. Reading unlocks the potentials in us and fires our creative talents to innovate and build our society.

 

“Incidentally, the book remains the most resilient and prevalent copyright work today. It has helped grow human civilization and over the centuries has contributed to the development of virtually all fields of human endeavour, including education, religion, research and entertainment.

 

“In today’s digital world, it is imperative that authors and publishers should make changes in their business and distribution model so as to make the book more attractive to younger readers on the new media and digital platforms.”

 

Continue Reading

E-Business

Why We Listed on NYSE by Jumia

Published

on

Spread the love

Jumia Technologies has clarified its recent listing on the New York Stock Exchange (NYSE), while assuring its global customers, Nigerians inclusive of better services to come.

 

Ernest Eguasa, chief financial officer, Jumia Nigeria, said that its major drive in joining the New York Stock Exchange was also to showcase the digital innovation happening in Africa.

 

He explained that the company decided to settle for the NYSE because investors have a marketplace and tech focus in New York than in any other place.

 

He said: “We contemplated several venues, ultimately, we met a lot of investors and New York seemed the more natural place given the number of investors familiar with the business model.

 

“We made a logical choice as this is the largest stock exchange in the world; many technology companies are listed on the NYSE (Alibaba, Twitter, Snap.).

 

“The NYSE listing shows that innovation is happening in the African continent – it shows an innovative, dynamic and modern Africa.”

 

He further explained the Initial Public Offering (IPO), stating that the move was about creating more trust and raising the public profile to help with the business.

 

According to him, the company has been private for seven years, and “we see a lot of positive aspects to being public.”

 

“Raising the public profile is going to help us bring more sellers to Jumia. Many sellers or partners are yet to know about us, and once they do, we hope they will be keen to work with us.

 

“This IPO is all primary, and is about providing the resources to the company and not to selling shareholders.

“We also hope this will help us build even more trust with consumers, in particular, those who are still not comfortable with e-commerce, may now see us as an established company and, we hope this will help our growth and consumer adoption,” he added.

 

Also, we are keeping our fingers crossed that the listing will help us with talent recruitment, retention, as we aim to attract more attention from top talents,” Eguasa added.

 

The CFO also noted that although the two CEOs are French, Jumia’s management and staff in most countries are largely local, including country heads.

 

Speaking further, he said; “It is important to note that we directly employ more than 5,000 people in Africa and believe that our business has a significant indirect impact on job creation across the continent.

 

“Nigeria is our headquarters in Africa, and our incorporation in Germany, is a way to get foreign investors excited to send funds to Africa to boost our operations.”

Continue Reading

E-Business

Freshworks Integrates with WhatsApp Business Solution

Published

on

Spread the love

Freshworks, a global leader in customer engagement software, has integrated its customer engagement suite with the WhatsApp Business solution to offer on-the-go conversational support via WhatsApp. Over 1.5 billion people from 180 countries use WhatsApp to stay in touch with friends, family and businesses, anytime and anywhere.

Freshworks now helps businesses efficiently manage and route user conversations happening on WhatsApp and other channels, via Omniroute™, Freshworks’ patent-pending technology within the Freshworks customer engagement suite.

Omniroute™ provides customer service agents with a unified view of customer inquiries regardless of channel and helps them respond to those inquiries more efficiently. What results is better customer service and more efficient support through WhatsApp and the rich variety of other seamlessly integrated channels in the Freshworks platform.

WhatsApp is a simple, reliable, and private way to talk to anyone in the world. The WhatsApp Business solution helps businesses and customers connect quickly and easily. With the Freshworks integration, users can now reach out to businesses with any query, directly on WhatsApp, so businesses can immediately respond and offer support.

Freshworks recently launched Proximity, a set of features for Freshchat, their modern messaging software to bring businesses closer to users. The integration with the WhatsApp Business solution further fulfills this promise while giving businesses the power to manage conversations at scale. Responses can be text, images, GIFs, attachments or even canned responses.

The Freshchat dashboard provides separate insights on WhatsApp conversations, like chat volume and productivity within the WhatsApp channel. The integration is already available in four continents leveraged by support and sales functions across verticals like e-commerce, media, travel, and finance.

“Users no longer have to jump through hoops to reach out to a business – all they have to do is flip out their mobile and engaging with their favorite brand is just a message away on WhatsApp,” says Girish Mathrubootham, CEO of Freshworks.

“Omnichannel customer engagement is becoming the imperative to providing great customer support. The integration with the enormously popular WhatsApp platform enables customers and prospects to get in touch with businesses instantly, offering support through this widely used medium of choice.”

Supr Daily, a direct to home dairy products delivery service in India, uses the Freshchat integration with the WhatsApp Business solution to broaden its customer support opportunities.

“Today’s customer wants a convenient way to reach out to brands. WhatsApp is a user-friendly way to communicate; as such, it’s also the easiest way for many of our customers to reach out to us.” says Tarkeshwar Singh, Senior Product Manager at Supr Daily.

“We actively promote WhatsApp as a medium to connect with us and we now see about half of our customers use it for support queries. The Freshworks integration made it possible for us to provide great quality and quick support to our customers, which is indispensable in our business.”

Continue Reading

Trending

Copyright © 2017 Communication Week Media Limited.