L&g Cyber Discussion Threads

[the grumpy old men] 17/10/2018 06:11

17/10/2018 | 7:04
WALLIX RECEIVES '2018 INNOVATION AWARD' FROM 'TOP 250 FRENCH SOFTWARE EDITORS' BY EY AND DIGITAL SYNTEC (17/10/2018 07:00)

WALLIX, publisher of cybersecurity software solutions, received the "Innovation Award" on 16 October at the eighth edition of the "Top 250 French Software Editors" organized by EY and Syntec Numérique. The European specialist in cybersecurity is rewarded for the performance of its innovation policy supported by an ambitious R & D program.

EY and Syntec Numérique have rewarded WALLIX for its innovation policy based on excellence and for its strong involvement in R & D in the European cybersecurity ecosystem. The company works on collaborative projects with major groups and research laboratories, in France and in Europe, to anticipate the technological breakthroughs of the Internet of Things, Big Data and Artificial Intelligence as well as projects around uses such as Industry 4.0, connected health, and more generally the design of digital infrastructures and "Privacy and Security by Design" applications.

A third of the workforce of the cybersecurity software vendor is dedicated to innovation and R & D with teams of experts working on continuous product improvement, software quality excellence and the interoperability of its solutions with those of the market in a context of widespread use in the cloud environment.

WALLIX is driven by hyper-growth since 2013. In this context, after a fundraising of 37 million euros in May 2018, the goal of the publisher is to become one of the European leaders in cybersecurity through the constant search for innovation and its international development.

Jean-Noël de Galzain, Chairman of the Management Board of WALLIX said: "We are very pleased to have received this" Innovation Award "from EY and Syntec Digital. It rewards the work of a dedicated team, totally dedicated to our ambition: to become one of the major players in cybersecurity in Europe. "

ABOUT WALLIX

Publisher of cyber security software, WALLIX Group is the European specialist in the governance of privileged accounts. Responding to recent regulatory developments (NIS / RGPD in Europe and OIV in France) and cybersecurity issues that affect all businesses, WALLIX products and solutions help users protect their critical IT assets. The WALLIX Bastion secures access to servers, terminals and connected objects. It benefits from ANSSI CSPN certification and responds to the request for regulatory compliance. The DataPeps solution protects enterprise data by providing an end-to-end encryption software brick in SaaS mode that enables them to meet the constraints imposed by the RGPD.

WALLIX supports more than 570 companies and organizations in their daily access management. Its solutions are distributed through a network of more than 160 resellers and integrators. Listed on Euronext under the ALLIX code, WALLIX Group is one of the leaders in the PAM market with a strong presence throughout the Europe and EMEA region and is one of its TDH reference shareholders, a company controlled by Thierry Dassault.

The WALLIX Bastion won the Computing Security Awards 2016, voted "Best Buy" by SC Magazine and named one of the leaders in the Products and Innovation category of the Privilege Access Management of the Compass KuppingerCole2017. The company is a member of Bpifrance Excellence, Champion of the Systematic Paris Region cluster and a founding member of the Hexatrust Group. In 2017, WALLIX GROUP was integrated into the Futur40, the first list of growth companies on the stock market published by Forbes France, and is part of the Tech 40 index.

More information on www.wallix.com

[ariane] 10/10/2018 07:41

Seven in ten FTSE 100 companies are not ready for the next major DNS attack
0
By LLB Reporter at 7:36 am October 10, 2018 Business News, Tech

ThousandEyes, the company empowering businesses with Network Intelligence, has found that 72% of the Financial Times Stock Exchange (FTSE) 100 companies are not adequately prepared for the next major attack on the domain name system (DNS), according to the results of the 2018 ThousandEyes Global DNS Performance Report.

Additionally, the report found similar vulnerability among 68% of the top 50 companies on the Fortune 500 rankings and 44% of the top 25 SaaS providers.

The annual ThousandEyes report, released today, is an analysis and global performance comparison of DNS, the Internet infrastructure that acts as the phone book of the Internet, translating domain names, such as www.thousandeyes.com to Internet Protocol addresses. This ThousandEyes DNS research also includes an IT architecture readiness assessment for leading global brands, determining their level of risk should another incident occur like the Dyn attack of 2016.

“Because Digital Experience is so central to a brand’s success these days, it’s critical that businesses understand that not all DNS infrastructures are created equal — performance and risk exposure varies widely between providers and geographies, so they need to be aware and base decisions on data relevant to their market,”said Craig Matsumoto, Senior Analyst at 451 Research. “Moreover, very basic DNS architectural decisions matter. In this day and age, not properly architecting for potential attacks is a major risk factor that businesses need to mitigate immediately, if they care at all about their website or services being discoverable on the Internet.”

[grupo guitarlumber] 02/9/2018 09:47

If your mobile phone is running slowly or always losing battery, it might have been hacked to mine cryptocurrency – here's how to protect yourself
Business Insider España

Ana Zarzalejos, Business Insider España



According to a experts at internet security firm ESET, alarm bells should ring if you notice your phone overheating, running slowly or the battery running out inexplicably quickly.
All of these symptoms could be a sign that your phone has been hacked by a cryptojacker.
The battery malfunctions and overheating caused by mining can damage your devices — and the damage can sometimes be permanent.

If your mobile phone (especially if it's an Android) has started to run slowly, is overheating, or its battery is depleting rapidly for no apparent reason, you should be worried.

Why? According to a report from AFP, these symptoms may mean you've been the unfortunate victim of a cryptojacker.

Mining cryptocurrencies is essentially just carrying out digital transactions — the difference between cryptocurrency transactions and other digital transactions is that it typically involves solving problems using hardware (in return for which you get paid in a given cryptocurrency).

Typically, the mathematical problems that need solving in order to carry out crypto transactions are highly complex and, therefore, demand a significant amount of computing power. This naturally entails spending a lot on hardware and incurs hefty energy bills — but it would seem cybercriminals have found a more cost-efficient shortcut.

iphone cellphone smartphone phone screen time Apple texting One of the things you can do to prevent your phone being manipulated for crypto-mining is to ensure your operating system and apps are updated to the latest version. 1Day Review/Flickr/CC BY 2.0

One smarphone alone doesn't have the required processing power to mine cryptocurrencies — but when many are used together, cybercriminals can easily take advantage of their collective processing power. And, without users' knowledge, an increasing number of cryptojackers are doing just that.

In order for cryptojackers to mine, users download seemingly harmless apps that, in turn, introduce mining malware to the device.

Worryingly, ESET experts quoted in AFP's report suggest that the list of apps hiding programs for mining cryptocurrencies is growing.

According to We Live Security, the Bug Smasher gaming app was just one of many that turned out to have hidden mining functionality — it was removed in January 2018 when ESET researchers discovered what was going on.
Google is more exposed than Apple but it's cracking down

The best-case scenario if you do get hacked is that your phone will slow down and overheat a lot. But worse things can happen - phones could end up permanently damaged due to battery malfunctions, with those that run on Android being particularly susceptible.

The reason devices using Google's operating system are more vulnerable is simple because Apple's iOS exercises more rigorous control over the applications it allows in the App Store. For example in June Apple made a point of adding to its guidelines that the use of cryptocurrency mining programs on its devices was expressly prohibited.

However, according to the AFP, Google is now following the same steps as Apple with Google Play and recently informed developers that it will no longer allow the mining of cryptocurrencies on their devices.

crypto ESET experts have indicated that the list of apps hiding programs cryptocurrency-mining programs is growing. Getty
How you can protect your phone

The experts admit it's somewhat difficult to tell which apps are hiding malware but that, as a user, there are measures that can be taken to make yourself less vulnerable :

Ensure your operating system and apps are updated to the latest version to ensure they remain secure.
Only install apps from official platforms (Google Play Store and Apple's App Store).
Avoid installing applications from unknown sources.
Use the number of app downloads and user reviews to ensure any apps you download are the legitimate versions.
Don't grant your apps unnecessary permissions.

You can also use antivirus software suitable for your operating system for extra protection.

Read the original article on Business Insider España.

[adrian j boris] 14/7/2018 12:42

WALLIX: WALLIX GROUP ONCE AGREED IN THE FUTURE40, THE GROWTH OF GROWTH CORPORATIONS
Actusnews13 / 07/2018 at 19:15

Paris, the 13/07/2018

WALLIX GROUP (ALLIX: FR0010131409 - Euronext Growth), a cybersecurity software publisher and European specialist in the management and protection of privileged access, announced that it has been recognized for the second consecutive year in the 2018 list of 40 Future Trophies40, gathering the 40 champions of growth in France.

Forbes France and SME finance-Europe Entrepreneurs, the 40-year-old Futures Award40, honors each year 40 companies, eligible for the PEA-SME and listed in Paris, which have shown during the last 3 years, the fastest growth, sustained and sustainable, of their turnover.

[sarkasm] 11/7/2018 14:52

UK firms are too confident about their cybersecurity

11 July 2018 | By LLB Reporter

Print
Save

Cyber

New survey shows

Despite the growth in data breaches, senior executives at UK firms think their cybersecurity protection is top-notch, according to a new survey conducted by research and consultancy firm Ovum for Silicon Valley analytics firm FICO. Three out of four executives from UK firms said their firm was better prepared than their competitors, and 43 percent said their firm was a top performer. While this overconfidence was seen across the eight regions surveyed, Canada was the only country where more respondents (44 percent) said they were a top performer for cybersecurity protection.

Key highlights:

75 percent of UK firms surveyed said they are better prepared for data breaches than their competitors — up from 60 percent last year
Of eight regions surveyed, only Canadians were more likely to rate their firm a top performer for cybersecurity
Financial services respondents were least realistic, with 96 percent rating their firms above average or top performers
Retail and e-commerce respondents were most realistic, with 57 percent rating their firms above average or top performers
Ovum conducted telephone surveys for FICO of security executives at 500 companies in the UK and 10 other countries

Among British industries, financial services firms were the most confident of all —55 percent said their firm was a top performer, and 41 percent said their firm was above average. Telecommunications providers were second, with 42 percent calling their firm a top performer. The least confident — or most realistic — respondents were in retail and ecommerce, where 38 percent said their firm is a top performer, and just 19 percent said they were above average.

Despite this confidence, only 36 percent of organisations are carrying out more than a point-in-time assessment of what their cybersecurity risk is.

“The grave risk posed to our privacy and security demands that firms take an honest view of their protection,” said Steve Hadaway, FICO general manager for Europe, the Middle East and Africa. “These numbers suggest that many firms just don’t understand how they compare to their competitors, and that could lead to a lack of investment. When we review firms’ cybersecurity risk with our FICO Enterprise Security Score, I can tell you that most firms are not above average.”

“IT leaders have greater funding than ever to protect organisations from the continuously evolving threat landscape and meet complex compliance demands,” said Maxine Holt, research director at Ovum. “These same IT leaders are undoubtedly keen to believe that the money being spent provides their organisation with a better security posture than any other – but the rapid pace of investment, often in point solutions, rarely takes an organisation-wide view of security.”

[waldron] 09/7/2018 18:42

Alexandra Saintpierre, published on the 09/07/2018 at 16h56
Orange and Europol sign a protocol against cybercrime

(Boursier.com) - Orange has signed a Memorandum of Understanding (MoU) with Europol, the European Agency for Police Cooperation, to strengthen their collaboration and share their knowledge on cyber-threats and major attacks. The two organizations are working together to create a safer cyberspace for citizens, businesses and governments, and fight cybercrime.

In The Hague, Jean-Luc Moliner (Orange Group Director of Security) and Steven Wilson (Director of Europol's European Crime Center, EC3) have signed an agreement on a knowledge-sharing partnership on cyber threats that can weigh at the European level.

The agreement sets a framework for Orange and Europol to exchange information on the state of the threat on cybercrime networks and trends. Orange will help strengthen and enrich data by exchanging technical know-how and sharing indicators that the operator can see on its networks: spam, DDoS attacks, fraud, mobile cyber attacks or even cyberattacks. banking for example.

[grupo] 21/6/2018 07:32

Wallix shows its ambitions after raising 37 ME

Jean-Noël Legalland, published on the 21/06/2018 at 9h01
Wallix shows its ambitions after raising 37 ME

(Boursier.com) - Wallix, a cybersecurity software publisher and European specialist in the management and protection of privileged access, has finalized a fundraising of E36.8 million on May 22nd. This fundraising reinforces the means of the publisher in its ambition to protect identities, access and sensitive data organizations in a digital world by supporting organizations in their compliance and implementation of the standard 'Security & Privacy by design', an enhancement of its cybersecurity solutions offering, an international presence through a network of integrating partners in EMEA and North America, as well as the development of its ecosystem with strategic alliances key sectors such as the industry of the future, the Internet of Things and artificial intelligence.

Wallix intends to build on its position in the group of European leaders on privileged access management (PAM) to become a global player in cybersecurity, able to support companies in their digital transformation on the protection of the key elements of their digital activity are access, data and identities. The group aims to facilitate the development of ethical digital uses and trust while simplifying the compliance of companies with regulations and new European standards such as RGPD and NIS in the field of IT risk management.

The publisher intends to consolidate an offer of innovative cybersecurity solutions to support businesses in the approach of 'Security & Privacy by design' in existing information systems or in the cloud.

These solutions will complement Wallix's current offer, which is now based on Wallix Bastion (a software suite that manages the problem of passwords in organizations and manages internal or external access to applications and networks. of the company) and DataPeps (end-to-end encryption solution in SaaS mode).

Wallix intends to spend approximately two-thirds of the fundraising on targeted acquisitions in France and abroad.

Wallix is already able to deliver solutions in half of the EMEA countries, as well as in parts of North America. The publisher intends to invest to develop internationally and cover 80% of its market by 2021. To do so, the company will invest in the development of its network of integrators and value-added resellers in all concerned with a particular focus on the German-speaking zone, the United States and Canada.

At the same time, Wallix plans to create a new alliance program to animate an ecosystem of partners to facilitate the integration of its Wallix Bastion and DataPeps solutions into third-party solutions on the market. Priority is given to identity management and governance, strong authentication, artificial intelligence and application publishers who want to integrate the encryption component into the data exchange of their users. These initiatives will accelerate the adoption of technologies in new business applications, such as e-Health, Industry 4.0, Finance, Distribution and the Internet of Things.

Wallix now has 160 partners referenced in more than 55 countries that develop a close relationship with end users. "The raised capital will allow to invest in the animation and the extension of this network with the aim of responding to the strong growth of the cybersecurity market where it is located", concludes the group, thus affirming all its confidence .

[la forge] 13/6/2018 15:40

AXA chooses SecurityScorecard to reduce risk in cyber insurance
Published 07 June 2018

French insurance giant AXA has selected SecurityScorecard to provide security ratings as part of the underwriting process for its cybersecurity business.

The SecurityScorecard platform will provide AXA's underwriters with an overall risk rating and detailed view into the cyberhealth of their insureds. AXA will use the ratings to determine insurability, as well as evaluate premiums for new policies and renewals.

AXA cyber global chief underwriting officer Scott Sayce said: "Cybersecurity threats present a serious risk to businesses of all types and sizes.

"Cyber Insurance is a rapidly growing business for AXA because it helps reduce the financial losses that businesses incur should they become a victim of a cyber-attack. Forward looking businesses seek cyber insurance products because they understand modern day risks or need to carry a policy in order to conduct business with their customers.

“The SecurityScorecard platform will help us rapidly evaluate companies to understand their cyberhealth and provide our underwriters with crucial information needed to evaluate an insured's risk."

AXA Risk Consulting CEO Corinne Vitrac said: "AXA has the ambition to develop Cyber Risk Consulting services for Commercial Lines clients.

"This partnership with SecurityScorecard is an important step in the development of our cyber services platform."

SecurityScorecard continually monitors over 200,000 businesses across the world and rates them on an easy to understand A-F scale. Companies that rate as a D or F are 5.4 times more likely to be breached than companies that rate as an A or a B.

The platform also provides ratings across 10 risk factors, which gives deeper insights into the company's security. SecurityScorecard's cyber insurance offering utilizes the platform's automation and security analytics capabilities to rapidly deliver ratings to underwriters for any company and analyze risk, a unique differentiator in the marketplace.

SecurityScorecard CEO and co-founder Aleksandr Yampolskiy said: "AXA and SecurityScorecard are pioneering the cyber insurance industry.

"It is a privilege to work with such a visionary brand. This partnership demonstrates the value of the SecurityScorecard platform and the trust top business leaders have in our score. Our vision is to create a ubiquitous language for cybersecurity that facilitates collaboration and communication between business partners."

AXA Venture Partners, the venture capital fund backed by AXA, participated in October 2017 to the $27.5m Series C funding round and has been instrumental in the implementation of this global agreement with AXA.

Source: Company Press Release

[suetballs] 17/3/2018 14:06

These are doing much better than my holding in soph.
Suet