Archive for December 8, 2020

BREAKING: Digital Forensics Firm FireEye Pwned By Most Likely Russian Hackers…. And We All Should Be Scared

Posted in Commentary with tags , on December 8, 2020 by itnerd

This is not only embarrassing, but a real threat to all of us. Digital forensics firm FireEye has been pwned by hackers according to the New York Times. The company claims that Russians are behind the hack and it has grave consequences for all of us:

FireEye revealed on Tuesday that its own systems were pierced by what it called “a nation with top-tier offensive capabilities.” The company said hackers used “novel techniques” to make off with its own toolkit, which could be useful in mounting new attacks around the world.

It was a stunning theft, akin to bank robbers who, having cleaned out local vaults, then turned around and stole the F.B.I.’s investigative tools. In fact, FireEye said on Tuesday, moments after the stock market closed, that it had called in the F.B.I.

This is huge and you can expect hacks using these stolen tools to begin shortly. And anyone using those tools would have plausible deniability. It also means that FireEye is pretty much done as a digital forensics firm. After all if you’d have been pwned by hackers, and you need someone to investigate it and secure your systems, would you hire a company that has been pwned by hackers themselves?

Of course not.

Cisco Doubles Down On Webex Ecosystem & Accelerates Webex App Hub

Posted in Commentary with tags on December 8, 2020 by itnerd

Announced today at WebexOne, the all new Webex is not just a powerful suite of apps, it is also a platform that helps everyone to have a seamless experience as they move between Webex and their other favorite apps. Their platform starts with a powerful programmability and extensibility layer via their open APIs and SDKs.  This lets anyone get the capabilities they need with Webex– across calling, messaging, meetings, devices, intelligence and analytics. 

To ensure everyone can benefit from this platform, today they’ve announced the new Webex App Hub. Available today, the App Hub is where we make it easy for users to find and use integrations within a Webex messaging space, and soon you’ll be able to experience the same thing in a Webex meeting. Users will be able to easily add and collaborate with third-party applications while in a Webex meeting, then save the work to follow up afterwards. Of course, the App Hub also is great for IT managers who are looking to make native integrations company-wide.

Today Cisco announced the following upcoming integrations, and many more will soon follow:

Box: Get the most of your Webex meetings with content stored in Box. Currently, Box and Webex are integrated such that you can easily share and manage Box content when you’re in Webex. They are now taking this integration to the next level so that from within Box, you get embedded access to Webex enabling you to start or schedule a Webex meeting, and share content with a Webex Space – either with an existing Space or a newly created Space – all without leaving Box. All Webex content sharing events are captured in the Box activity feed.

Dropbox: For Dropbox users, the powerful integration coming between Dropbox and Webex will help drive more effective meetings. Click and select a file in Dropbox to share during a Webex meeting. Leverage Dropbox  in Webex to easily capture notes, agendas, and follow-up tasks to share with the team or move from chat to a meeting without leaving the Dropbox UI. Meeting artifacts like presentations and recordings are accessible in Dropbox before, during and after meetings.

Miro: Harness the power of visual thinking and team collaboration by using Miro within Webex. This integration allows you to embed any Miro board directly inside of your Webex project space for everything from ideation and workshopping to product planning and design without ever leaving your meeting.

MURAL: Offering an enhanced layer of engagement to video meetings from within Webex, MURAL helps distributed teams share, think, and solve problems together through visual collaboration. The integrated solution will give every team member a voice and makes remote planning, Agile ceremonies, design sprints, brainstorming sessions, and client collaboration more productive and fun.

Salesforce:  Bringing Webex and Salesforce together can make sales activities and motions 10x better and help drive quotes to cash. Within Salesforce, your Webex meetings, messages and calls will be associated with Leads and Opportunities.  These custom Webex objects will be delivered through the Salesforce AppExchange.​

ServiceNow: Webex integration with ServiceNow incident management means Webex actions related to Meetings, Calling and Messaging become “in agent” workflows, eliminating manual repetitive tasks and context switching.

Workplace from Facebook: Workplace and Cisco are coming together to improve employee communications for all organizations, particularly those with frontline employees and distributed teams split between working in-office and from home. Now, joint customers can broadcast Webex video live to Workplace and users will also be able to interact (like, comment, react, ask questions, use polls, etc.) during Webex broadcasts, for real-time engagement. Upcoming product experiences will include being able to use Workplace with Webex hardware, and Workplace live engagement features being brought into the Webex experience. Additionally, we have announced a combined offer: Webex customers who are new to Workplace will receive six months’ access to Workplace Advanced at no cost. Workplace customers who are new to Webex will receive special discounts off Webex software and hardware devices (all offers subject to limitations).

Cisco Announces Three New Webex Devices

Posted in Commentary with tags on December 8, 2020 by itnerd

Today at WebexOne, Cisco expanded its line-up of collaboration devices designed to empower the remote worker and enable a safe return to the office. The three new devices joining our intelligent Webex device portfolio are Webex Desk Camera, Webex Desk Hub and Webex Desk.

It’s clear that the future of work will involve a combination of remote and on-site interactions, known as hybrid-work. As the hybrid workplace takes shape, it’s important that you have seamless, smart experiences whether you’re at home or in the office—or somewhere in between. Together with the rest of Cisco’s intelligent portfolio, the new devices announced today provide such experiences.

Details:

  • Webex Desk Camera. Packed with the intelligent features you already know from our video portfolio – like facial recognition and occupancy metrics – the Webex Desk Camera is perfect for both the home or the office. And in an industry first that no other USB camera can do, you can now mute and unmute your microphone with a simple gesture—without ever touching your computer. Powered by the Webex platform like the rest of their desk portfolio, IT can manage the Desk Camera at scale so you’ll never miss an update and never be without support. This means that even in an ever-evolving workplace, IT can meet the needs of the workforce – wherever they are.
     
  • Preview: Webex Desk Hub. With many organizations rethinking and reconfiguring their office space,  getting back to the office may mean less desk space and more hotdesking for employees. With the new Webex Desk Hub, it’s super simple to make any available desk your personal space.  This new category of device is powerful enough to provide amazing quality video meetings and phone calls but also allows you to pair, charge, and connect all the things you’ve come to rely on for productivity and collaboration such as your own camera, headset, display, laptop and mobile. It is wrapped with intelligence to provide a consistent experience that enables you to get stuff done. In addition, Webex Desk Hub lets you reserve a desk using your laptop, badge or cell phone to authenticate your identity. This is not a basic device for hotdesking as you know it; the Webex Desk Hub is truly built for a new way of working.

    Of course, it’s not only easy to use but also to manage. The Webex Desk Hub gathers real-time environmental data, occupancy, and desk usage to help manage the new office space. Or use it to deploy digital signage with reminders to help enable a safe return. 
     
  • Preview: Webex Desk. Just like it’s “big sister” the Webex Desk Pro, the Webex Desk allows you to engage your audience by using slides or videos as your backdrop while you present—a feature we call “immersive presenter”. It transforms your experience by enabling you to connect to meetings, co-create and stay productive whether you’re at home or in the office. It is competitively priced for an all-in-one device with intelligent features users want like noise cancellation, virtual backgrounds and facial recognition. Use it as your primary display and connect to any meetings service. With a high-quality camera, microphone and speakers, it is super simple to set up, with no IT or technical knowledge required. You can be up and running in minutes.

Cisco Announces New Webex Innovations At WebexOne

Posted in Commentary with tags on December 8, 2020 by itnerd

Today at WebexOne, Cisco announced a wave of Webex innovation to help organizations collaborate seamlessly and transform their employee and customer experiences. Taking place today and tomorrow, WebexOne is Cisco’s premier digital collaboration conference that brings together thought leaders, customers and partners to discuss the future of work.

Webex has a rich history of helping employees innovate and remain productive wherever they are. Since the pandemic, Webex has not only continued to help businesses thrive, it has also been an integral platform for governments to continue to lead remotely, doctors to meet with patients safely, and educators to teach students at a distance. It’s clear that the future of work will involve a combination of remote and on-site interactions, known as hybrid-work. Cisco has a clear vision of how technology can help customers realize that future today and create a more inclusive world for all.

More than 50 innovations announced today fall into three areas: seamless collaboration, smart hybrid work experiences, and intelligent customer experiences, all built on the rock-solid security and privacy synonymous with Cisco.

The All New Webex 
The Webex team is laser focused on making sure users have what they need to do exceptional work. The all new Webex available today, provides a single secure place for connecting and getting things done: call, meet and message in one app. New features are being added across all modes, and the app includes our unique, real-time presence capability, so you always know who is available.

New in meetings.
Among the many features being added to Webex, here are some of our favorites:

In the app today

  • Noise cancellation and speech enhancement: No more loud typing or rustling papers interrupting your train of thought. Webex automatically detects and suppresses common noises, so you can concentrate. 
  • Transcriptions and closed captioning: Remove the need for extensive note-taking. Transcripts are searchable, so team members who miss a meeting can quickly catch up.
  • Highlights and action items: Webex Assistant will create these on your verbal command.
  • Enhanced video layouts: Who do you want to see? You can change your video layout with a simple slider control.
  • Webex Huddle:  Quickly call specific team members into a spontaneous meeting with a single click. No scheduling required—a single click and you’re in a quick team huddle to get stuff done.


Coming soon

  • In-meeting gestures:  Like the presentation? Simply give a “thumbs up” with your hand and our AI translates your motion into a thumbs up on the screen for all to see. This is an industry first, coming in CY 2021.
  • Immersive sharing:  Share your presentation, video or application as a dynamic background with your video overlayed, for a more immersive experience. Coming in CY 2021.
  • Real-time translation: As of February, you will be able to participate in your native language and get localized, real-time transcription of the active speaker, available in 10+ languages. Each meeting attendee can choose the language they want without impacting other users. Languages include: English, Spanish, French, German, Mandarin, Portuguese, Arabic, Russian, Dutch, and Japanese.
  • Save and share meeting artifacts: Meeting artifacts and recordings are instantly saved within your Webex app. View recordings in your Webex task bar or within the content section of 1:1 and group spaces.
  • Really big meetings: Need to host a Webex Events session with up to 25,000 fully participating attendees? You’ll soon be able to do that.  You’ll be able to host even more—up to 100,000—using the new Webex Events native live streaming coming later this month.
  • Meeting templates: Give everyone a chance to speak with round table templates and more. Put time limits on your meetings with quick syncs. 


New in messaging. 
Webex has added some great new features to help you focus on what matters most.

  • No more looking for key projects and people: With their industry leading AI, Webex is the only messaging app that learns which projects, spaces and people are most important to you and elevates them to the top of your list. Available Q1 CY 2021.
  • No more missed messages: You can manually highlight important messages and tasks with new Webex message pinning and mark as “unread”. Available Q1 CY 2021.
  • No more missed meetings: In February, Webex will automatically share recordings to 1:1 and group spaces specified by you.


New in calling.

  • Webex calling interactive voice response and video on hold:  Video menus simplify call routing while video on hold engages users in new ways. 
  • Easily escalate a phone call to a Webex meeting:  Escalate a 1:1 telephone call into a Webex video meeting and get the full Webex experience with AI features, transcriptions, notes and action items, and recordings.
  • New ways to buy: Customers can now take advantage of new calling plans with PSTN delivered directly from Cisco. This will be available in the US in mid-December, Canada in the first quarter of 2021 and many more countries globally throughout the year.


New in analytics:
Daily interactions are the fabric of effective collaboration. Last year, we introduced People Insights profiles. Now, Webex is expanding People Insights with a new suite of features. Powered by the Webex Graph, these new features deliver highly personalized insights and actionable recommendations to individuals and teams.

  • For individuals, People Insights can highlight trends that go beyond your Outlook calendar including when your days typically start and stop, time spent on video calls and more.
  • For teams, you can visualize, in aggregate, team interaction patterns within Webex to ensure your team is building and maintaining the right communication patterns and relationships to be effective. The tool can also inform strategy to ensure more inclusion across a team.

The All New Webex Contact Center
The new Webex Contact Center delivers powerful new benefits for businesses, customers, and agents to drive intelligent customer experiences:

  • Now businesses of all sizes (even with the smallest of contact centers) can have the robustness of a cloud contact center with thousands of agents on day one.
  • next-generation microservices architecture enables rapid feature innovation while open APIs allow for easy customization.
  • Customers benefit from a digital-first experience and can now connect their way – whether chat, email, voice and now text and social.
  • New AI-powered voice and chat bots can answer the easy questions and route the tricky ones to contact center agents, with all the related background served up so customers won’t have to repeat themselves.
  • Agents will no longer be blindsided by customer sentiment now that Webex Experience Management is integrated with Webex Contact Center.
     

Additional Resources:

New Salesforce Research Reveals Pandemic’s Lasting Impact On Customer Service

Posted in Commentary with tags on December 8, 2020 by itnerd

As the serial crises of 2020 redefines customer engagement, customer service leaders are transforming their operations, accelerating digital transformation, and overhauling their workforce management strategies. 

That’s according to Salesforce’s fourth State of Service research report, released today, which provides a snapshot of the priorities, challenges, and trajectories of customer service teams around the world and in Canada. This edition is based on Salesforce’s largest and most global survey of customer service agents, decision makers, mobile workers, and dispatchers: over 7,000 respondents across 33 countries – including 300 from Canada.

KEY CANADIAN DATA

Teams Navigate New Standards of Engagement – the pandemic has exposed customer service shortcomings, and leaders are taking decisive action

  • 76% of service decision makers say their service organization is accelerating digital initiatives
  • 73% of service decision makers say they’ve invested in new service technology
  • 88% of service professionals say customers have increased their use of digital service channels
  • 87% of service professionals say they’ve changed policies to provide more flexibility to customers during the pandemic

Agent Agility is Key as Demand Surges – digital transformation is accelerating for customers and employees alike

  • 67% of service professionals say balancing customer service speed and quality is difficult
  • 80% of service agents/dispatchers say automating routine tasks allows them to focus on more complex work
  • 70% of service professionals say they’re more reliant on data than before the pandemic

Service Extends to Sales, Marketing, and Beyond – service teams are being challenged by a new era of workforce engagement

  • 75% of service agents say they have a complete and accessible view of a customer’s sales interactions
  • 71% of service professionals say it’s impossible to provide great customer service without full context

Workforce Management Takes a New Shape – the shift to remote work has changed how service works

  • 70% of service professionals don’t know – or aren’t sure if – they’ll work from home in 2021
  • 76% of service agents say they can provide excellent customer experience from home

Career Paths Come Into Focus – training is a focus as requisite skill sets evolve

  • 84% of service agents say they see a direct link between their work and business performance
  • 39% of service agents say they need better training to do their job well

Field Service Evolution Drives Revenue – field service is thriving, even amid a pandemic

  • 74% of service decision makers say field service is a key part of their overall strategy
  • 90% of service mobile workers their they employer has taken the steps necessary to keep them safe in the field during the pandemic
  • 72% of service decision makers say COVID-19 has permanently transformed filed service

If you want to take a deeper dive, an interactive dashboard featuring all data is available here.

Healthcare, Research & E-commerce To Face Heightened Security Risk In 2021: Trend Micro

Posted in Commentary with tags on December 8, 2020 by itnerd

The latest 2021 predictions report from Trend Micro found, a new wave of threats will emerge, and organizations will face new challenges brought on by shifts to both remote work and priorities of organizations and governments. The widespread reliance on the cloud to conduct business will also create new vectors for breaches and attacks by criminals, leaving security teams scrambling with decreased economic resources.

Some of the other predictions from Trend Micro include:

  1. Threat actors will turn home offices into their new criminal hubs
  2. The Covid-19 pandemic will upend cybersecurity priorities as it proves to be fertile ground for malicious campaigns
  3. Teleworking setups will force organizations to confront hybrid environments and unsustainable security architectures
  4. Governments will face a tug-of-war between upholding data privacy and ensuring public health
  5. Attackers will quickly weaponize newly disclosed vulnerabilities, leaving users with a narrow window for patching
  6. Exposed APIs will be the next favoured attack vector for enterprise breaches
  7. Enterprise software and cloud applications used for remote work will be hounded with critical class bugs

All of that is going make 2021 a very “interesting” year for those in charge of defending companies against these sorts of things.

Darktrace Shares What’s In Store For 2021 With Cyber Security Predictions

Posted in Commentary with tags on December 8, 2020 by itnerd

As one truly unpredictable year comes to an end and we look ahead to 2021, questions around the future of cybersecurity in Canada are at the forefront. If this year is any indication, organizations need to prepare for a future of increasing online operations. 

World-leading Cyber AI company Darktrace has pulled together their predictions for the top cyber trends in 2021, including:

Cyber-attacks taking off in space

  • A growing number of space organizations have adopted AI to autonomously defend their space infrastructure and we will see this trend grow in 2021 as cyber-attacks in space take off
  • Hackers will target “trust,” using illegitimate access to computer networks not to steal data, but to subtly alter information and undermine its integrity
  • We can expect attackers to launch trust attacks against businesses as well as national governments, seeking to smear business’s reputations or disrupt economic activity

 A new wave of 5G

  • 5G will enable a massive increase in connectivity, emboldening hackers to launch more ambitious attacks

Internal security investigations will be performed by AI

  • A mutually dependent partnership of human and AI will be the bedrock of cyber security in 2021 and beyond

What’s clear is that 2021 is going to be a year where companies have to make sure that their cyber-defenses have to be in tip top shape or they may become a statistic as well as having their company being severely impaired by threat actors.

New Program Offering Canadian Seniors Free Smartphones & Low-Cost Data Plans From TELUS To Help Them Stay Connected

Posted in Commentary with tags on December 8, 2020 by itnerd

Today, TELUS launched Mobility for Good for Seniors, which provides Canadian seniors receiving the Guaranteed Income Supplement (GIS) access to a free smartphone and subsidized mobility rate plan. Available now, Mobility for Good for Seniors includes a free refurbished smartphone, unlimited nationwide talk and text, and 3GB of data for only $25 per month. Mobility for Good for Seniors will ensure more seniors have access to the technology they need to help address feelings of isolation, manage their mental wellbeing, stay connected to loved ones, enjoy their favourite online games and books, and access important healthcare resources and information.

Across Canada, 2.2 million seniors receive the Guaranteed Income Supplement from the federal government, and are eligible for TELUS Mobility for Good for Seniors. This program is entirely subsidized by TELUS, and comes at no cost to the government or taxpayers. To get set up, program participants are required to provide proof of receiving the GIS benefit and then will receive a unique code. Participants are also encouraged to download the Federal Government’s Covid-19 Alert app to stay updated on critical health information. Additional details and instructions on how to apply are available at telus.com/mobilityforgood.

As the COVID-19 pandemic evolved earlier this spring, TELUS donated more than 14,000 free mobile devices and $0 rate plans, valued at $9 million, to hundreds of organizations across the country including long-term care facilities in support of seniors. 

TELUS Mobility for Good for Seniors is part of the TELUS Connecting for Good portfolio of programs that gives Canadians in need access to TELUS’ world-leading technology. Additional programs include:

  • TELUS Internet for Good, offering high speed broadband Internet to qualified low-income families and people living with disabilities for only $9.95 per month;
  • TELUS Mobility for Good for youth, offering a free smartphone and a fully subsidized 3GB data plan to youth transitioning out of foster care for two years;
  • TELUS Tech for Good, helping differently abled Canadians facing challenges using smartphones and tablets with assistive technology and training that help them live more independently; and
  • TELUS Health for Good, enabling TELUS mobile health clinics to bring primary healthcare directly to people in need and living on the streets in urban centres across Canada.

TELUS also empowers Canadians of all ages to stay safe in our digital world with online resources and workshops through TELUS Wise, which covers topics including protecting your online security, privacy, and reputation, rising above cyberbullying, and using technology responsibly. Seniors advocacy and support organizations are invited to book a free, virtual TELUS Wise Seniors workshop for the seniors they support at telus.com/WiseSeniors. The workshop educates participants on common online scams and threats and provides Internet, smartphone and social media safety tips, helping seniors to stay safe and get the most out of our digital world.

In response to the COVID-19 pandemic, TELUS has committed $150 million to support Canadians with the services and resources they need. For the latest information about how TELUS gives back visit telus.com/givesback

Digital Defense, Inc. Discloses Zero-Day Vulnerabilities In D-Link VPN Routers

Posted in Commentary with tags on December 8, 2020 by itnerd

Digital Defense, Inc., a leader in vulnerability management and threat assessment solutions, today announced that its Vulnerability Research Team (VRT) uncovered a previously undisclosed vulnerability affecting D-Link VPN routers. D-Link DSR-150, DSR-250, DSR-500 and DSR-1000AC VPN routers running firmware version 3.14 and 3.17 are vulnerable to a remotely exploitable root command injection flaw.

These devices are commonly available on consumer websites/ecommerce sites such as Amazon, Best Buy, Office Depot and Walmart. Given the rise in work-from-home due to the pandemic, more employees may be connecting to corporate networks using one of the affected devices.

The vulnerable component of these devices is accessible without authentication. From both WAN and LAN interfaces, this vulnerability could be exploited over the Internet. Consequently, a remote, unauthenticated attacker with access to the router’s web interface could execute arbitrary commands as root, effectively gaining complete control of the router. With this access, an attacker could intercept and/or modify traffic, cause denial of service conditions and launch further attacks on other assets. D-Link routers can connect up to 15 other devices simultaneously.

D-Link is a global leader in designing and developing networking and connectivity products for consumers, small businesses, medium to large-sized enterprises and service providers. Since 1986, the company has grown into an award-winning global brand with over 2,000 employees in 60 countries. D-Link’s line of VPN routers enable remote workers to connect securely to company resources.

What You Can Do

D-Link’s recent advisory provides more details about the updates that have been released, which should be applied: https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10195​. For additional information, customers should contact D-Link directly.

Digital Defense Research Methodology and Practices

The Digital Defense VRT regularly works with organizations promoting the responsible disclosure of zero-day vulnerabilities. The expertise of the VRT, when coupled with the company’s next generation hybrid cloud platform, Frontline Vulnerability Manager, enables early detection capabilities. When zero-days are discovered and internally validated, the VRT immediately contacts the affected vendor to notify the organization of the new finding(s) and assists, where possible, with the vendor’s remediation actions.

To view Digital Defense’s zero-day advisories to date, please visit: https://www.digitaldefense.com/vulnerability-research-team/vulnerability-research/.

Another Judge Rules Against TikTok Ban

Posted in Commentary with tags on December 8, 2020 by itnerd

Yet another federal judge on Monday blocked the Trump administration’s attempt to ban new downloads of TikTok in the United States. TechCrunch has the details:

This is the second time a federal judge has issued an injunction against Trump administration restrictions that would have prevented U.S. companies, including internet hosting services, from transactions with TikTok and ByteDance. The first injunction was granted in October by U.S. District Court Judge Wendy Beetlestone, in a separate lawsuit brought against the President Trump and the U.S. Commerce Department by three TikTok creators.

Perhaps the Trump Administration should take the hint and really just end their war on TikTok. Clearly it’s not legal and it’s getting embarrassing for Trump and company. Thus a discreet exit from this rather than constantly losing might be a better strategy.