Gartner: ‘Insider threat is alive and well on the dark Web’

National Harbor, Md. -- Corporate employees who help carry out cyberattacks are increasingly being sought and are seeking criminals to hire them, a Gartner analyst told a group at the consulting firm’s Security and Risk Management Summit.A group of 60 CIOs and CISOs she worked with say this recruitment is more active and becoming a larger concern because of their use of the Dark Web to sell their services, says Gartner analyst Avivah Litan.+More on Network World: National Intelligence office wants to perfect the art of security deception+To read this article in full or to leave a comment, please click here

Using Docker Datacenter for Enterprise-Ready Orchestration – The SA Home Loans Story

Orchestration for dockerized applications in production has been a huge reason for why today’s enterprises have begun to leverage Docker Datacenter.

Universal Control Plane, the management layer of the Docker Container-as-a-Service platform delivers production-level orchestration. The tool enables enterprise IT ops teams to manage, deploy and scale their applications across their multi-node clusters. These clusters can be comprised of nodes that exist both in cloud providers like Azure and AWS as well as in the datacenter. Universal Control Plane comes with Docker Swarm embedded into it, giving it the power to create clusters and scale applications across their environment, regardless of infrastructure type, all with support from the Docker team.

Continue reading

Nokia hopes its new IoT platform, Impact, will be a hit

Nokia hopes it will have a hit on its hands with Impact, an all-encompassing new Internet-of-Things management platform that brings together several existing products.The Intelligent Management Platform for All Connected Things builds on the company's established CPE (customer premises equipment) management tool for network operators, Motive Connected Device Platform, so broadband and home routers will be among the first devices to feel its impact. It already supports 80,000 different device types, Nokia said Tuesday.No doubt its new Smart Home Gateway, also unveiled Tuesday, will soon be among them. It combines a fiber "modem" with a router, dual-band gigabit Wi-Fi -- and Zigbee and Z-Wave radios for home automation. It's intended to be distributed by network operators. To read this article in full or to leave a comment, please click here

Don’t run JS email attachments: ​they​ can carry potent ransomware

Attackers are infecting computers with a new ransomware program called RAA that's written entirely in JavaScript and locks users' files by using strong encryption.Most malware programs for Windows are written in compiled programming languages like C or C++ and take the form of portable executable files such as .exe or .dll. Others use command-line scripting such as Windows batch or PowerShell.It's rare to see client-side malware written in Web-based languages such as JavaScript, which are primarily intended to be interpreted by browsers. Yet the Windows Script Host, a service built into Windows, can natively execute .js and other scripting files out of the box.To read this article in full or to leave a comment, please click here

Don’t run JS email attachments: ​they​ can carry potent ransomware

Attackers are infecting computers with a new ransomware program called RAA that's written entirely in JavaScript and locks users' files by using strong encryption.Most malware programs for Windows are written in compiled programming languages like C or C++ and take the form of portable executable files such as .exe or .dll. Others use command-line scripting such as Windows batch or PowerShell.It's rare to see client-side malware written in Web-based languages such as JavaScript, which are primarily intended to be interpreted by browsers. Yet the Windows Script Host, a service built into Windows, can natively execute .js and other scripting files out of the box.To read this article in full or to leave a comment, please click here

Gartner: How to make a digital risk plan and sell it to the board

It’s not enough for security pros to figure out how to protect digital enterprises from risks that can ruin the business, they must effectively sell it to corporate boards whose blessing is needed to authorize the plan, Gartner analysts told attendees at their Security and Risk Management Summit.With that in mind, three Gartner security specialists walked the roughly 3,400-person audience through how to create a plan to manage risk and minimize damage when – not if – an attack succeeds, and the strategy for buy-in from the board of directors.“One hundred percent protection should not be the goal,” Gartner analyst Peter Firstbrook told the gathering. “The goal should be resilience.”To read this article in full or to leave a comment, please click here

Gartner: How to make a digital risk plan and sell it to the board

It’s not enough for security pros to figure out how to protect digital enterprises from risks that can ruin the business, they must effectively sell it to corporate boards whose blessing is needed to authorize the plan, Gartner analysts told attendees at their Security and Risk Management Summit.With that in mind, three Gartner security specialists walked the roughly 3,400-person audience through how to create a plan to manage risk and minimize damage when – not if – an attack succeeds, and the strategy for buy-in from the board of directors.“One hundred percent protection should not be the goal,” Gartner analyst Peter Firstbrook told the gathering. “The goal should be resilience.”To read this article in full or to leave a comment, please click here

Secure and fast GitHub Pages with CloudFlare

Secure and fast GitHub Pages with CloudFlare

GitHub offers a web hosting service whereby you can serve a static website from a GitHub repository. This platform, GitHub Pages, can be used with CloudFlare whilst using a custom domain name.

In this tutorial, I will show you how to use CloudFlare and GitHub together. By taking advantage of CloudFlare’s global network, you can utilise our CDN service to improve your site's performance and security.

Whilst GitHub Pages doesn't ordinarily support SSL on custom domains, CloudFlare's Universal SSL allows your users to access your site over SSL, thus opening up the performance advantages of HTTP/2.

Secure and fast GitHub Pages with CloudFlare

GitHub Pages is designed to host sites that only serve static HTML. The ability to only host static content isn’t as big of a restriction as you might think.

Static site generators avoid repetitive update tasks of updating “latest posts” feeds, pagination or sitemaps; whilst generating static HTML that can be uploaded to any web hosting service without a scripting engine. Unlike ancient desktop tools like FrontPage and Dreamweaver which lacked a content model, modern static site generators have the design decisively separate from content.

Typically, CMS-based sites must query a database for content, then render the HTML to be served to the end Continue reading

10 questions about Apple’s WWDC announcements

Apple’s highly anticipated World Wide Developers Conference (WWDC) always delivers a strong shot of adrenaline to the company’s software and products. And those upgrades were present in abundance at the 2016 conference.In the past, though, Apple has sometimes used WWDC to introduce dramatic new products and services and address the biggest problems on users’ minds. I didn’t see much of that this time around.Don’t get me wrong. Apple did what it had to do at WWDC. The company addressed many of its competitive shortcomings and product lapses, upgrading key components across virtually its entire product line.+ More on Network World: FIRST LOOK: What happened at Apple’s WWDC +To read this article in full or to leave a comment, please click here

IDG Contributor Network: FedRAMP: A challenging path to operational excellence for cloud providers

“The Federal Risk and Authorization Management Program, or FedRAMP, is a government-wide program that provides a standardized approach to security assessment, authorization, and continuous monitoring for cloud products and services.”—FedRamp websiteThat sounds positive, but getting approved for the FedRAMP certification is far tougher than most cloud providers anticipated. In fact, few organizations are truly capable of making it through the process. As shared by an article in GCN:“Of more than 80 cloud providers who have applied to go through the FedRAMP certification, more than half are not yet ready to go through the process, according to Kathy Conrad, principal deputy associate administrator with the General Services Administration’s Office of Citizen Services and Innovative Technologies.”To read this article in full or to leave a comment, please click here

CCDE July 2016 Onsite Bootcamp in Las Vegas

I am glad to announce that next bootcamp of this year will be on July 2016 in Las Vegas , right after Cisco Live. Last day of Cisco Live will be the first day of my CCDE class. Extend your vacation 5 more days, inform your company by now, get approval and meet me there […]

The post CCDE July 2016 Onsite Bootcamp in Las Vegas appeared first on Cisco Network Design and Architecture | CCDE Bootcamp | orhanergun.net.

iPhones are about to get plugged into enterprises with Cisco’s help

Apple and Cisco Systems have fleshed out their plans to make iOS devices work better in enterprises and said the new capabilities will arrive in the fall.Voice calls on Cisco’s Spark collaboration app will act like regular phone calls, IT departments will be able to give Cisco apps priority on iOS devices, and iPhone calls will run over corporate networks. These are some of the ways the two companies’ technologies will mesh in enterprises.Cisco announced the coming features on Monday after Apple’s Worldwide Developer Conference keynote. They’ll ship in a version of Cisco Spark updated for iOS 10. Apple also touched on the news at WWDC as one of very few enterprise announcements at the show.To read this article in full or to leave a comment, please click here

iPhones are about to get plugged into enterprises with Cisco’s help

Apple and Cisco Systems have fleshed out their plans to make iOS devices work better in enterprises and said the new capabilities will arrive in the fall.Voice calls on Cisco’s Spark collaboration app will act like regular phone calls, IT departments will be able to give Cisco apps priority on iOS devices, and iPhone calls will run over corporate networks. These are some of the ways the two companies’ technologies will mesh in enterprises.Cisco announced the coming features on Monday after Apple’s Worldwide Developer Conference keynote. They’ll ship in a version of Cisco Spark updated for iOS 10. Apple also touched on the news at WWDC as one of very few enterprise announcements at the show.To read this article in full or to leave a comment, please click here

Automation, not cheap labor, is reshaping outsourcing

The offshore outsourcing of IT grew because of the cost of offshore labor. A software engineer in India is paid but a fraction of what a U.S. worker earns. Payscale puts the median salary for a senior software engineer in India at $10,000.When IT services firms bring in H-1B visa workers, these workers earn substantially more than their overseas counterparts, but often significantly less than American IT employees.This labor cost advantage has been a powerful lure for U.S. customers, but analysts see labor costs diminishing in importance. Customers want more automation, whether it's infrastructure management or business process outsourcing. IT services firms can no longer complete exclusively on lower cost labor.To read this article in full or to leave a comment, please click here

20 reasons to get excited about iOS 10

iOS 10: Major changes with every swipeImage by AppleApple’s latest iOS 10 is packed with new features, hidden functionalities, and third-party app integrations. Here are our favorite bells and whistles so far.Photos recognizes faces without being creepyImage by AppleTo read this article in full or to leave a comment, please click here

How to make security analytics work for your organization

Falling into the analytics trapImage by ThinkstockAs the latest buzzword in IT, analytics are increasingly spanning various components of IT systems. With use cases to gather analytics around data, networks and user behaviors, there are endless possibilities for utilizing this information. But, when looking to drill down this data to inform security decisions, is a massive amount of information, which could include fall positives, really that useful? To avoid falling into an analytics trap, security professionals provide suggestions for how to best configure security analytics so they drive meaningful and actionable insights for your organization.To read this article in full or to leave a comment, please click here

1 … 2,850 2,851 2,852 2,853 2,854 … 3,795