Guest Post: Over 50% of all cyberattacks originating in Russia target the US

Posted in Commentary with tags on December 7, 2022 by itnerd

Russian state-sponsored cyberattacks are used as a weapon to further intimidate Ukraine and other Western countries.

According to the data presented by the Atlas VPN team, 55% of cyberattacks originating in Russia targeted the United States. The United Kingdom, Canada, and Germany are among other top targets.

Russian state-sponsored threat actors targeted the United States in 55% of their cyberattacks. Organizations and government agencies in the United Kingdom were a target in 8% of cyberattacks. Furthermore, 3% of attacks originating in Russia were directed at Canada.

Even though Russia started a full-on war against Ukraine, only 2% of their cyberattacks targeted the country. Switzerland was also a target in 2% of Russian cyberattacks. At the same time, attacks on other Western countries and Baltic states made up 27% of all state-sponsored attacks.

Cybersecurity writer at Atlas VPN Vilius Kardelis shares his thoughts on Russia-based cyberattacks:

“While there is no concrete evidence that Russia-based cybercriminal groups cooperate with Kremlin, there is a clear narrative about who is the enemy. While Russia’s war in Ukraine is continuing, organizations and governments of Western countries have to stay sharp against possible attacks.”

Most targeted industries

State-sponsored hackers usually target specific industries to create as much chaos as possible.
 

The information technology industry was the target in 29% of Russian-sponsored attacks. Russian-sponsored state threat actors launched 18% of their attacks on nongovernmental organizations (NGOs). In addition, 12% of cyberattacks originating in Russia targeted government agencies and services.

Russian hackers targeted 12% of their cyberattacks on education organizations. Furthermore, 5% of cyberattacks originating in Russia were launched at financial service institutions. Finally, cybercriminals affiliated with Russia carried out 24% of attacks on other types of industries.

To read the full article, head over to:

https://atlasvpn.com/blog/over-50-of-all-cyberattacks-originating-in-russia-target-the-us

Cradlepoint Announces Availability of Zero Trust Network Access Solution for 5G and Hybrid Networks  

Posted in Commentary with tags on December 7, 2022 by itnerd

Cradlepoint, the global leader in cloud-delivered LTE and 5G wireless network solutions, is today announcing the availability of its third NetCloud Exchange (NCX) solution, Zero Trust Network Access (ZTNA). NCX ZTNA ensures a native ZTNA experience that offers simplicity, efficiency, and granularity for Cradlepoint deployments. 

While cellular connectivity delivers agility and the freedom to connect anyone from anywhere, this extended WAN edge—encompassing resources in sites, vehicles, and remote locations—creates a broader network attack surface. This, along with the need for an extended workforce to access resources in a secure way, requires an innovative approach to network security. Zero trust is emerging as the technology of choice to address these challenges. 

With a focus on enterprises who are looking to leverage 5G, Cradlepoint’s NCX ZTNA solution will offer differentiated capabilities to support the expanded edge and extended workforce. Key capabilities include:

  • Simplified administration through an integrated policy engine: A single, attribute-based policy engine for NCX SD-WAN and ZTNA allows administrators to create both network- and user-based policies, reducing operational complexity and accelerating time to service.
  • Deployment flexibility with multiple forms of network access: NCX ZTNA provides a variety of different access models including a client, Cradlepoint router, and a browser-based option (with browser-based available in 2023).  
  • Isolated user-to-resource access through fine-grained policies: With NCX ZTNA, users, such as third-party vendors, can be permitted access to only a specific resource such as an IP camera, digital sign, or Point of Sale system. 

Cradlepoint NCX ZTNA adds to the previously announced Secure Connect and SD-WAN Services. All services are based on the same zero-trust foundation and are enabled through the NetCloud Exchange Service Gateway—a scalable solution that aggregates traffic, provides flow-level visibility, and acts as the policy-enforcement point in the network. 

For more information on Cradlepoint’s NetCloud Exchange solution, Zero Trust Network Access, please visit https://cradlepoint.com/products/ztna/.

Cisco Holiday Season Shopping Survey: Online retail brands only have one shot to impress consumers 

Posted in Commentary with tags on December 7, 2022 by itnerd

Consumers have come to rely on applications and digital services for almost every aspect of their lives and they’ve now become far more discerning about what makes an incredible digital experience. With the holiday shopping season upon us and multiple online sales events available to customers, the pressure is on for brands to offer consumers amazing online bargains and incredible digital and application experiences. If this year, a massive 91 per cent of consumers said that they will only rely on online shopping applications and services, the search for great deals will be even more important! 95 per cent agreed that cheap prices and bargains will be central given the costs of living and the uncertain economic situation.

So, the extra pressure is on for retailers and their IT teams as consumers (78 per cent) stated that the digital experience is as important as the deals that are on offer.

Cisco AppDynamics recently conducted a global survey of 12,000 consumers across 12 countries including Canada, exploring how applications are being used throughout the online shopping process during seasonal shopping moments, and the significance of their role today.

Consumers surveyed revealed that:

  • 74 per cent of Canadian consumers usually wait for major online shopping dates (Singles’ Day, Black Friday, Christmas…) to take advantages of discounts and low costs deals
  • 87 per cent of Canadians will rely on brands offerings deals and discounts this year more than ever before
  • 91 per cent of Canadian consumers wants a fast and seamless digital experience without any delays or disruption and 63% claim that an underperforming application will leave them angry
  • 81 per cent of Canadian consumers won’t take any excuse for poor online experiences
  • 91 per cent of Canadian consumers feel that it’s important for retailers to provide regular updates on the status of online purchases, given ongoing supply chain issues and increased anxiety around receiving holiday gifts on time

You’ll find a blog post with additional details here

Eliminate Version Management For MS Office Via LinkrUI

Posted in Commentary with tags on December 7, 2022 by itnerd

Santa Cruz Software, a global leader in software development for cross media content publishing, today announced a new version of its DAM connector LinkrUI will now enable Digital Asset Manager (DAM) syncing for three Microsoft Office applications. Available both via DAM reselling partners and via retail, LinkrUI for Microsoft Office is now compatible for applications Microsoft Word, Microsoft Powerpoint and Microsoft Excel.

LinkrUI enables direct searching, opening, placing and synchronizing of digital assets stored in a DAM system or other storage services, such as Box and Dropbox. The new version of LinkrUI automatically synchronizes assets between Microsoft Office applications and the DAM or storage service to ensure that everyone in an organization can find and work on the latest version. 

LinkrUI started as a best-in-class extension to Adobe applications, providing an in-app panel link between popular creative applications and the DAM or cloud storage service. Santa Cruz Software recently began offering a version of LinkrUI completely free — guaranteed version control at no cost  — which is compatible with Adobe Photoshop, Adobe Indesign and Adobe Illustrator. The premium version of LinkrUI adds compatibility for Adobe Premiere and Adobe After Effects and includes additional features like live filtering and Smart-Linkr, which finds and fixes broken asset links automatically. LinkrUI for Microsoft Office includes compatibility for Microsoft Word, Microsoft Powerpoint and Microsoft Excel. 

A recent survey by Santa Cruz Software found that 83% of professionals said they spend time each week finding lost assets. In fact, 11% do it hourly. Over half spend at least three hours per week managing versions and a staggering 15% are spending over six hours. LinkrUI solves this problem by automatically syncing the current asset with the DAM.

LinkrUI for Microsoft Office is now available via resellers and retail. LinkrUI for Microsoft Office costs $99/year per seat and includes compatibility for Microsoft Word, Microsoft Powerpoint and Microsoft Excel. Please visit the LinkrUI webpage to download LinkrUI and see a list of current DAM vendors.

Download LinkrUI on Microsoft Appsource here.

Elon Musk Is In All Sorts Of Trouble On Multiple Fronts

Posted in Commentary with tags on December 7, 2022 by itnerd

This is one of these posts where I have no clue where to begin because there is so much to cover. Let’s start with the fact that Twitter’s credit rating has been withdrawn by S&P:

The rating firm, which is among the top in the US, said the action was “due to a lack of sufficient information to maintain the rating” in a release on Friday. At the time of the withdrawal, both Twitter and its debt were on “CreditWatch,” suggesting an imminent rating action. 

Twitter’s massive about $13 billion debt load was funded directly by banks led by Morgan Stanley when Musk’s $44 billion acquisition of the social media giant closed. Since then, Musk’s takeover of Twitter has brought sweeping changes to the company’s operations and product. Those changes included mass layoffs, changes in features and a raft of companies pulling advertising dollars from the platform. 

The group of banks that funded the buyout now face the challenge of syndicating the debt to investors, many of whom use rating companies to determine the risk involved in buying credit. 

S&P downgraded the company five notches to B- from BB+ on Nov. 1 as a result of its high leverage post-acquisition. The rating firm expected to “obtain more information regarding the final capital structure and any potential changes to the operating strategy,” according to the November research update.

That’s going to be a problem if Elon Musk needs more money to keep Twitter afloat seeing as it’s not coming in from advertising. I would not be surprised if he sells more Tesla shares in the weeks to come. Which of course will send that stock into free fall the second he does.

Next up is this District Attorney who has quit Twitter because of these reasons:

Santa Clara County District Attorney Jeff Rosen will deactivate his Office’s Twitter account, citing the explosion of hate speech on the popular communications platform.

DA Rosen’s decision to remove Northern California’s largest prosecutor’s office from Twitter follows increasing hatred, bigotry and antisemitism on the platform and Twitter owner Elon Musk’s own statements and posts, such as a meme used by racists and antisemites.

DA Rosen is respectfully asking all elected District Attorneys throughout the United States to take their Offices off Twitter.

Ouch. But he’s pointing out what everybody knows. Hate speech has massively increased since Elon took over Twitter and his reality distortion field does not change that fact. And this sort of stuff is bad for business as Elon will find out. After all, advertisers do not want to do business with a platform full of racists.

Then there’s a rather bizarre answer that Elon Musk gave in a Twitter Space chat about why he bought Twitter:

Okay…. Now I have to ask about his mental state as this answer is bizarre. Either that or Elon was on something. Seeing as he smoked weed on the Joe Rogan podcast once, that is entirely possible.

Finally, Elon’s got a big problem with one of his other companies. Neurolink is under investigation:

The investigation into Neuralink Corp – which is developing a brain implant – was opened in the US following complaints from staff, Reuters reports.

Staff have complained that animal testing is being rushed and is causing needless suffering and deaths, according to the news agency.

And:

Reuters, citing sources familiar with the investigation and internal company documents, reports that the company has killed about 1,500 animals since 2018 including pigs, sheep and monkeys.

The number is not necessarily indicative of malpractice or wrongdoing, as medical companies of various kinds routinely use animals in experiments.

But dozens of documents seen by the news agency suggest growing concern within the company about the animal tests. Some failed tests reportedly had to be repeated, increasing the number of animals that died in the process.

Some employees’ reportedly tied the failed tests to pressure from Mr Musk to accelerate research as the company works to develop its brain implant, which it has said could potentially help paralysed people walk again and address other neurological diseases.

Elon is quickly becoming the man of 99 problems. And this one is a big one both from a legal standpoint and from a PR standpoint as I fully expect groups like PETA to start making his life miserable. Which in turn will make him do and say things that will only end badly for him.

I wonder where any or all of this will lead? We’re likely to find out soon enough.

Tecsys and SVT Robotics partner to simplify warehouse robotics deployment

Posted in Commentary with tags , on December 6, 2022 by itnerd

Tecsys Inc., an industry-leading supply chain management software company, and SVT Robotics Inc., a leader in enterprise software for the rapid deployment of industrial robotics, have partnered to develop and launch an out-of-the-box integrated connection between the Tecsys’ Elite™ supply chain platform and SVT’s SOFTBOT® Platform. The integration will provide Tecsys Elite™ customers faster deployment and lower complexity without the need for lengthy custom code development often involved in multi-system automation and robotics deployments.

SVT Robotics is an enterprise software company that is revolutionizing robot deployments in the warehousing and manufacturing industries. With certified connectors to many of the industry’s foremost automation providers, and partnerships with companies such as 6 River Systems, Fetch Robotics (Zebra Technologies), Locus Robotics, MiR, OMRON, OTTO Motors and many more, SVT’s SOFTBOT Platform enables companies to deploy the robots, automation, and IoT devices they need in just days or weeks.

Tecsys contends that bringing automation into a warehouse should begin with a needs assessment and design plan, which then informs hardware selection that will meet those needs. Whereas some software vendors operate as automation resellers for a limited set of systems, Tecsys’ partnership with SVT empowers supply chain organizations to assess, design and integrate across a wide spectrum of automation choices. The result is a warehouse operation powered by end-to-end WMS functionality and easily automated workflows using today’s most innovative technologies.

Elon Musk Installs Beds For Twitter Employees….. WTF??

Posted in Commentary with tags on December 6, 2022 by itnerd

I guess that when Elon Musk said that he wanted employees at Twitter to be “hardcore”, I guess that being able to sleep at work qualifies as being “hardcore”. I am basing that on the fact that Elon is installing beds for Twitter employees:

On Monday, employees returning to work at the company’s San Francisco location were greeted by modest bedrooms featuring unmade mattresses, drab curtains and giant conference-room telepresence monitors — a significant upgrade over the Therm-a-Rest+sleeping bag situation showcased by one Twitter employee in November. One room even has a plant.

A photo of one converted bedroom shared with Forbes showed bright orange carpeting, a wooden bedside table and what appears to be a queen bed, replete with a table lamp and two office armchairs just begging for convivial workplace collaboration.

One source said that no announcement or context was provided to employees, and presumed that the beds are for remaining “hardcore” staffers to be able to stay overnight at the office. “It’s not a good look,” they said. “It’s yet another unspoken sign of disrespect. There is no discussion. Just like, beds showed up.”

Doesn’t Elon have something better to do? Like stop advertisers from leaving or getting ad revenues up because they are in free fall at the moment? Clearly not. I really don’t get what his thought process is and how these beds will help Twitter make money. This is just stupid and sure to backfire on Elon.

Bell Gigahub Issues Seem To Be Resolved

Posted in Commentary with tags on December 6, 2022 by itnerd

I’ve been tracking issues with Bell’s new Gigahub which is part of their 8 Gbps fibre rollout. Specifically there were issues with getting PPPoE pass through to work with your own router. PPPoE bypass by far the cleanest way to use your own hardware. That is assuming that your router can handle the overhead that PPPoE creates so that you get the speed that you’ve paid Bell for. It became clear that this was a Bell issue and they have been working on a updated firmware to address this. I’ve been following a thread on DSL Reports where it is becoming clear that the firmware that is working for those who have been testing it. That’s very good news.

If you are in this situation, my suggestion would be to go to the Bell Direct Forum at DSL Reports and ask a user named Bell_Dom who is a Bell employee to push the firmware to your Gigahub. Eventually I would assume that this will be pushed to all Gigahubs so everyone can benefit from this new firmware.

UPDATE: Bell appears to be rolling out firmware to Gigahub users. Details here.

Eufy Releases An App Update That Won’t Make Their Issues Go Away

Posted in Commentary with tags , on December 6, 2022 by itnerd

Over the weekend I posted a story about Eufy and the fact that they have lied about the security that their had for years. And that my belief is that they should be banned from sale because this isn’t the first time that this has happened. Part of my belief that they should be banned comes from the fact that I don’t believe that Eufy is serious about gaining the trust of their users. This is being reinforced by the news that Eufy isn’t patching out a potential security issue in the Eufy Security app. Instead Eufy is just telling users that their thumbnails will be uploaded to the cloud when they choose specific notification settings in the app;

As of Monday, an update has been rolled out to the Eufy Security app to add a statement disclosing that thumbnail images will be uploaded to the company’s cloud servers. 

For you to get notifications with thumbnails in them from a security camera, a thumbnail has to be uploaded someplace. That’s true for any camera system. And part of the problem is that Eufy sells these cameras with the expectation that they are completely private. Which clearly they are not. Now that Eufy has clarified this, I am guessing that they hope that this issue will go away. But it won’t because this doesn’t do anything about the ability for a threat actor to stream video. Eufy hasn’t commented on this as far as I know. And there’s no sign that they will do anything about it.

Thus if Eufy was hoping to make this issue go away, I don’t think that this will do it.

Guest Post: 42% of manufacturers in the UK endured a cyber incident in the last 12 months

Posted in Commentary with tags on December 6, 2022 by itnerd

According to data presented by Atlas VPN, 42% of manufacturers in the UK have been victims of cybercrime within the past year. 

Luckily, the vast majority (74%) stated that the cyber security measures in place prevented any commercial damage. 

However, the remaining 26% informed that they had suffered significant financial loss, with losses ranging from £50,000 to £250,000. 

The survey in question was conducted by Make UK, the voice for manufacturers in the UK, together in association with Blackberry Cybersecurity. A total of 112 manufacturers based in Britain participated in the study. The data was published on December 1st, 2022. 

The overall trend within the manufacturing security landscape in the UK remains relatively unchanged between 2022 and 2021. 

Throughout both periods, around one in ten companies were victims of cybercrime and incurred financial, reputational, or operational damages.

Production halts were the most prevalent outcome of a cyberattack (65%), with reputational damage coming in second (43%). In other words, financial losses incurred were a result of stopping production or loss in customer trust.

Besides that, around three out of ten manufacturing firms were attacked and infiltrated but were able to mitigate any business impact due to the cyber security processes in place.  

Vulnerabilities and cost concerns

Manufacturers in the United Kingdom confront a slew of cybersecurity threats, ranging from simple staff mistakes to sophisticated targeted attacks. 

Maintaining legacy IT (45%), a lack of cyber capabilities within the organization (38%), and granting access to third parties for monitoring and maintenance (33%) were listed as the top three cybersecurity vulnerabilities. 

According to manufacturers, the expense of cyber security tools is the most important obstacle to enhancing their degree of cyber protection. Almost four out of every ten manufacturers said this.

Stephen Phipson, Chief Executive at Make UK, commented:
 

While cost remains the main barrier to companies installing cyber protection, the need to increase the use of the latest technology makes mounting a defence against cyber threats essential. No business can afford to ignore this issue and while the increased awareness across the sector is encouraging, there is still much to be done.

To read the full article, head over tohttps://atlasvpn.com/blog/42-of-manufacturers-in-the-uk-endured-a-cyber-incident-in-the-last-12-months