Archive for January 25, 2024

Pax8 Bolsters MSP Defenses with Industry-Leading Security Platform from Trend Micro

Posted in Commentary with tags on January 25, 2024 by itnerd

Pax8, the leading cloud commerce marketplace, today announced Trend Micro, a global cybersecurity leader, is now available on the Pax8 Marketplace in North America and Europe. Trend Micro’s proven product and program align with Pax8’s goal of increasing accessibility to market-leading cybersecurity solutions for managed service providers (MSPs).

Trend Micro is consistently recognized as a “Leader” by Forrester, Gartner, CRN, and G2, reinforcing its dedication to delivering top-notch security solutions. Its advanced platform, encompassing Endpoint Detection and Response (EDR), Extended Detection and Response (XDR), and Managed Detection and Response (MDR), delivers multi-layered protection and heightened visibility across endpoints, mobile devices, emails, cloud applications, and browsers. With AI-powered machine learning and automatic data correlation, the co-managed offering ensures 24/7 monitoring, detection, incident investigation, and response services.

To learn more about Pax8 and Trend Micro, please visit www.pax8.com.

Leave a comment »

Majority Of Canadians Want Regulation And Ethics To Guide The Future Of AI: TELUS Report

Posted in Commentary with tags on January 25, 2024 by itnerd

Today, as the world marks Data Privacy Week, TELUS is proud to highlight its leadership in driving dialogue and collaboration around the responsible development and application of artificial intelligence (AI) by sharing the inaugural TELUS AI report: The power of perspectives in Canada. In this research report, available to the public at telus.com/ResponsibleAI, TELUS shares the perceptions, insights and opinions of AI from nearly 5,000 Canadians, including Indigenous Peoples, racialized groups, Black women, older Canadians, new Canadians, youth, people with physical disabilities, and the LGBTQ2S+ community.

TELUS’ report highlights the hopes, fears, and experiences of everyday Canadians regarding AI, showcasing both the potential benefits and concerns associated with this powerful and nascent technology. Its findings reveal that Canadians are resolute in their desire for AI to be built responsibly, with more than 90% of respondents strongly agreeing that the development of AI must be guided by ethical principles. The research emphasizes Canadians’ support for AI regulation, the importance of including diverse voices in the development of AI and the priority that should be placed on removing bias to ensure that the technology reflects the needs and values of all Canadians.

Key findings from the research include:

  • Over 90% agree that AI development should be guided by ethical principles
  • 78% of respondents believe that the use of AI should be regulated in Canada
  • 42% of respondents who self-identified as part of a racialized group feel that AI is biased against themselves and their peers
  • 80% of respondents aged 12-17 expect their generation will have to fix problems left behind by the current usage of AI (engaged with parental consent)

TELUS recognizes the importance of prioritizing human values and trust in the development and usage of AI, and remains dedicated to promoting transparency, privacy, and responsible AI practices. As part of this commitment, TELUS was the first telecom company in Canada to sign ISED’s new voluntary code of conduct for generative AI, which seeks to ensure the transparent, equitable and responsible development of GenAI technology. In 2023, TELUS Wise launched its TELUS Wise Responsible AI online workshop – a free-of-charge online workshop created in partnership with the Canadian Institute for Advanced Research (CIFAR) – that helps teens to better understand the AI landscape, including what it is, what it’s capable of and, importantly, what it’s not. Additionally, TELUS was the first organization in the world to earn the ISO Privacy by Design certification for its Data for Good program.

To learn more about the AI research report and future opportunities to have your voice heard, visit telus.com/ResponsibleAI.

Leave a comment »

GuidePoint Research and Intelligence Team’s (GRIT) Annual Ransomware Report Is Out 

Posted in Commentary with tags on January 25, 2024 by itnerd

GuidePoint Security has announced the release of GuidePoint Research and Intelligence Team’s (GRIT) 2023 Annual Ransomware Report. This report is based on data obtained from publicly available resources, including threat groups themselves, and insight into the ransomware threat landscape. GRIT observed a victim volume nearly doubling year-over-year, driven in part by multiple mass exploitation campaigns impacting hundreds of organizations. In total, GRIT observed 63 distinct ransomware groups leverage encryption, data exfiltration, data extortion, and other novel tactics to compromise and publicly post 4,519 victims across all 30 of GRIT’s tracked industries, and in 120 countries.

GRIT’s Annual Ransomware Report also examines major ransomware events throughout the year including Clop’s MOVEit campaign, Scattered Spider’s attacks on major casinos, LockBit’s new Affiliate Rules regarding ransom negotiations, SEC’s new guidance for incident notifications, law enforcement’s disruption of Alphv operations, and published decryptors impacting ransomware operations for BianLian and Akira. 

Key Highlights of the Report:

  • From an industry perspective, GRIT observed most impacts affecting a limited subset of industries. 62% of all observed victims belong to one of the “top ten” most-impacted industries, with Manufacturing and Technology remaining the two most-impacted industries; Manufacturing and Technology represented 12.9% and 7.9% of all victims, respectively. Among Manufacturing industry victims, the US was impacted five times as much as the next highest country, Germany (265 vs 48 victims). Manufacturing was the most impacted industry for almost every month in 2023, excluding May, when it placed behind Technology by a single observed victim. 
  • The United States was by far the most impacted country in 2023. Among posted victims, 2,199 were US-based organizations, accounting for 49% of all observed ransomware attacks in 2023. Eight out of the ten most impacted countries were within North America and Europe, with Brazil and Australia as the sole outliers. The same “top ten” most impacted countries were home to 76% of all observed victim organizations, of which 27% impacted non-US countries.
  • In line with GRIT’s taxonomy for classifying ransomware groups, long-term Established groups accounted for the overwhelming majority of observed victims (85%), followed by Developing groups (10%). The top three most prolific Established groups—LockBit, Alphv, and Clop—continue to account for not just the lion’s share of victims but also much of the innovation and tactical changes across the ransomware ecosystem. Ephemeral and Emerging groups, as the newest and shortest-term entrants, lagged behind their maturing counterparts but still posed a significant threat to worldwide organizations, exacerbated by less “reliable” actors and frequently recycled malware. 

For more information on GRIT’s 2023 Annual Ransomware Report:

Leave a comment »

Twitter Implements Passkeys After High Profile Twitter Account Hacks

Posted in Commentary with tags on January 25, 2024 by itnerd

Recently Twitter made passkeys available as a login option for US-based users.

This announcement follows recent Twitter account hacks of high-profile organizations, including Hyundai,Netgear and the SEC.

Kevin Vreeland, General Manager of North America, Veridas had this to say:

“The shift towards passwordless authentication is a necessary step for enhanced security. As we’ve seen with the most recent account hacks, passwords, even for high-profile organizations, are not an effective method for keeping credentials safe.  

In today’s predominantly digital landscape, users frequently reuse passwords due to the challenge and frustration of memorizing numerous combinations. This universal practice makes password theft an easy avenue for fraud, identity theft, and in more recent cases, the spread of misinformation. Passkeys, such as face and voice verification, are significantly more difficult to steal, as they are linked to a user’s physical identity. Needless to say, they provide a much more enjoyable login experience for users, as users can be verified in seconds and don’t have to jump through hoops with lengthy dual authentication processes.  

Some vendors are developing their biometric technology on the premise of shifting the paradigm away from the presumption of “what we know” or “what we have,” which is how passwords have worked so far, to “who we are,” people with unique qualities that cannot be duplicated. With Amazon, Google and now X all making passkeys available as a sign-in method, more companies need to be making this shift to keep up with the evolving threat landscape.” 

Paswordless authentication is the future. Full stop. If you or your organization rely on passwords you need to make shift sooner rather than later to avoid getting pwned like the SEC did.

Leave a comment »