The threat hunter’s guide to securing the enterprise

It’s time to face facts: Attackers are stealthy enough to evade your monitoring systems. If you’re sitting back waiting for alarms to go off, there’s a good chance you’re already hosed.Despite spending more than $75 billion on security products and services, enterprises are frequently compromised, highly sensitive data is stolen, and the fallout can be devastating. Worse, enterprises don’t discover they’ve been breached for weeks to months after initial compromise, taking between 120 to 200 days on average to even detect an attack. That’s a six-month head start on reconnaissance and exploitation -- more time on your network than most of your recent hires.To read this article in full or to leave a comment, please click here

The threat hunter’s guide to securing the enterprise

It’s time to face facts: Attackers are stealthy enough to evade your monitoring systems. If you’re sitting back waiting for alarms to go off, there’s a good chance you’re already hosed.Despite spending more than $75 billion on security products and services, enterprises are frequently compromised, highly sensitive data is stolen, and the fallout can be devastating. Worse, enterprises don’t discover they’ve been breached for weeks to months after initial compromise, taking between 120 to 200 days on average to even detect an attack. That’s a six-month head start on reconnaissance and exploitation -- more time on your network than most of your recent hires.To read this article in full or to leave a comment, please click here

The threat hunter’s guide to securing the enterprise

It’s time to face facts: Attackers are stealthy enough to evade your monitoring systems. If you’re sitting back waiting for alarms to go off, there’s a good chance you’re already hosed.Despite spending more than $75 billion on security products and services, enterprises are frequently compromised, highly sensitive data is stolen, and the fallout can be devastating. Worse, enterprises don’t discover they’ve been breached for weeks to months after initial compromise, taking between 120 to 200 days on average to even detect an attack. That’s a six-month head start on reconnaissance and exploitation -- more time on your network than most of your recent hires.To read this article in full or to leave a comment, please click here

Review: Acer Chromebook 14 for Work aims at corporate IT

The Acer Chromebook 14 for Work is part of a new generation of Chromebooks. This isn't a low-end laptop aimed at budget shoppers, nor is it Google's Chromebook Pixel, which originally sold for $1,299 and was designed for people who work in the cloud and want hardware as good as anything Apple produces.To read this article in full or to leave a comment, please click here(Insider Story)

How to go on the offensive vs security foes

Focus to detectionImage by Christer van der MeerenThe industry is now moving from a focus on prevention, in which organizations try to make the perimeter impenetrable and avoid being hacked, to a focus on rapid detection, where companies can quickly identify and mitigate threats that are within the perimeter already.To read this article in full or to leave a comment, please click here

How to go on the offensive vs security foes

Focus to detectionImage by Christer van der MeerenThe industry is now moving from a focus on prevention, in which organizations try to make the perimeter impenetrable and avoid being hacked, to a focus on rapid detection, where companies can quickly identify and mitigate threats that are within the perimeter already.To read this article in full or to leave a comment, please click here

How to train new grads on corporate security

Millennials bring a lot to the workplace, whether they're pushing the boundaries of company culture or forcing companies to modernize. But there are a few risks associated with hiring recent grads -- especially if it's their first job in the industry -- and one of those risks is data security.In a recent study from the Ponemon Institute in partnership with Experian, which surveyed over 16,000 people at companies with data protection and privacy training programs, 66 percent of respondents cited employees as the biggest security threat to their company. And 55 percent said that their organization had, at some point, experienced a "security incident or data breach due to a malicious or negligent employee," according to the report.To read this article in full or to leave a comment, please click here(Insider Story)

How to train new grads on corporate security

Millennials bring a lot to the workplace, whether they're pushing the boundaries of company culture or forcing companies to modernize. But there are a few risks associated with hiring recent grads -- especially if it's their first job in the industry -- and one of those risks is data security.To read this article in full or to leave a comment, please click here(Insider Story)

How to make your phone look and work more like stock Android

Nexus phones are typically thought of as the ultimate form of Android greatness. They deliver timely updates straight from Google, are bloatware free, and get special perks like access to beta releases of Android.But there are many good reasons why you may want to go for something other than a Nexus phone. The Nexus 6P is an unwieldy beast unless you have sizable paws. The 5X is too plasticky and underpowered—it's affordable, but you sort of get what you pay for.+ ALSO ON NETWORK WORLD The 14 most influential smartphones ever +To read this article in full or to leave a comment, please click here

How to drive business with digital transformation

Quest Diagnostics CIO Lidia FonsecaTo read this article in full or to leave a comment, please click here(Insider Story)

IBM beta-tests secure cloud blockchain service

IBM is cranking up the security on its cloud-based blockchain service. On Thursday it began beta-testing a new high-security service plan for IBM Blockchain, with dedicated infrastructure for each customer. Until now, it has offered only a starter cloud service for developers who wish to experiment with blockchain technology. That service runs in a multitenant cloud, with infrastructure shared among hundreds of blockchains. The new service plan is still cloud-based, but "you get your own resources dedicated to you," said IBM Vice President for Blockchain Technologies Jerry Cuomo.To read this article in full or to leave a comment, please click here

IBM beta-tests secure cloud blockchain service

IBM is cranking up the security on its cloud-based blockchain service. On Thursday it began beta-testing a new high-security service plan for IBM Blockchain, with dedicated infrastructure for each customer. Until now, it has offered only a starter cloud service for developers who wish to experiment with blockchain technology. That service runs in a multitenant cloud, with infrastructure shared among hundreds of blockchains. The new service plan is still cloud-based, but "you get your own resources dedicated to you," said IBM Vice President for Blockchain Technologies Jerry Cuomo.To read this article in full or to leave a comment, please click here

Security Sessions: Protecting data at the endpoint

In this episode of Security Sessions, CSO Editor-in-Chief Joan Goodchild speaks with Brett Hansen, executive director of Data Security Solutions at Dell, about keeping data safe in an increasingly mobile world.

Cisco: From CLI To Cloud

IDG Contributor Network: Attention spans in apps decrease signific…

Similar-looking ecommerce and media-oriented apps, like Facebook, are causing consumers to donate the same amount of attention to both kinds of apps. And that’s not very much, says Jampp, an ad placement network.So much so, that the firm says there’s been an 88 percent reduction in ecommerce app attention span year over year, based on the first quarter of 2016. Session length for ecommerce apps is down 35 percent.+ Also on Network World: Ecommerce needs to up its game, says UPS +To read this article in full or to leave a comment, please click here

Leveraging SharePoint For Enterprise Collaboration

OpenFlow and Firewalls Don’t Mix Well

In one of my ExpertExpress engagements the customer expressed the desire to manage their firewall with OpenFlow (using OpenDaylight) and I said, “That doesn’t make much sense”. Here’s why:

Obviously if you can't imagine your life without OpenDaylight, or if your yearly objectives include "deploying OpenDaylight-based SDN solution", you can use it as a REST-to-NETCONF translator assuming your firewall supports NETCONF.

The Strategy Heads of Cisco & Ericsson Talk Once a Week

1,100 Ericsson engineers are now Cisco certified.

A surge of Pokemon Go-related apps is out to steal your data

Privacy fears about the Pokemon Go app have been largely addressed, but dozens of other apps that piggy back on the popular game have raised further concerns.Since the game launched last week, a swarm of unofficial apps has emerged and is trying to capitalize on the title’s success. And many are hungry for your personal data.These unofficial apps have been offering cheats, tips and even songs from the hit game. But in exchange, they demand permission to access sensitive data on your phone, said Chad Salisbury, a security engineer with RiskIQ, which monitors mobile malware.To read this article in full or to leave a comment, please click here

A surge of Pokemon Go-related apps is out to steal your data

Privacy fears about the Pokemon Go app have been largely addressed, but dozens of other apps that piggy back on the popular game have raised further concerns.Since the game launched last week, a swarm of unofficial apps has emerged and is trying to capitalize on the title’s success. And many are hungry for your personal data.These unofficial apps have been offering cheats, tips and even songs from the hit game. But in exchange, they demand permission to access sensitive data on your phone, said Chad Salisbury, a security engineer with RiskIQ, which monitors mobile malware.To read this article in full or to leave a comment, please click here