Новости за 15.02.2017

The Windows Insider program has been an important program for Microsoft, soliciting feedback from thousands of individual customers to help with the development and debugging of Windows 10. Now the company has launched an equivalent program for corporate users.

Ransomware is increasingly becoming a problem for companies, and the CEO of a leading computer security company says he fears 2017 could see entire companies shut down until they pay up, or risk losing all their data.

The responsibilities of information security are rapidly changing as enterprises digitize. Technology now enables business strategy and is transforming product, channels, and operations. In this new context, information security is expected to take a strategic role by helping business leaders understand the security implications of their digital strategies; support a quicker pace of technology exploitation and experimentation; and govern a larger, more varied project portfolio.

Amazon Web Services got off to a slow start in January, taking its time to sleep off the New Year’s festivities. But the cloud provider got up to speed by the end of the month, launching a handful of new products for its customers to work with.

SAN FRANCISCO -- In some ways, Google is like every other large enterprise. It had the typical defensive security posture based on the concept that the enterprise is your castle and security involves building moats and walls to protect the perimeter.

Yahoo has begun warning individual users that their accounts with the service may have been compromised in a massive data breach it reported late last year.

The open compute project (OCP) means you can get the designs that Microsoft, Facebook and (to a lesser extent) Google use for their data centers.  The goal is to get original design manufacturers (ODMs) to build them for you rather than buying standard servers and switches from original equipment manufacturers (OEMs).

Facebook’s Boston-area outpost is in Cambridge, close to MIT – they’ve just expanded from a smaller site and annexed a whole floor of a well-kept office building near Kendall Square Station. The first thing you see when you get off the elevator is a floor-to-ceiling pattern of blue lines that are meant to spell out the words “Ship Love” (Facebook’s unofficial motto) in binary.

India’s space agency said today it had launched 104 satellites from a single rocket, crushing the previous record of 37 satellites from a single rocket by the Russian space agency in 2014.

Gamalon is a Cambridge, MA-based startup that has received $7.7 million from DARPA to create an advanced machine learning and artificial intelligence platform that the company says is more time and computationally efficient than others on the market.

Researchers have devised a new attack that can bypass one of the main exploit mitigations in browsers: address space layout randomization (ASLR). The attack takes advantage of how modern processors cache memory and, because it doesn't rely on a software bug, fixing the problem is not easy.

U.S. Attorney General Jeff Sessions’ call for a way to “overcome” cryptography met with scorn from a panel of elite cryptographers speaking at this week’s RSA Conference 2017 in San Francisco.

My clients have started asking questions about a new industry catch phrase that they've started to hear coming from suppliers of cloud-based computing services. The phrase is "serverless" computing. They've also run into a related phrase, "Function as a Service." Is this really a new idea or a new implementation of an older one?

As you may have guessed from my blogs, I was really excited about the year’s RSA Security Conference.  At the end of January, I wrote a blog about my expectations for endpoint security at RSA.  I followed up with another ditty about network security banter at this year’s show and concluded the series with a blog about security analytics and operations talk at RSA. 

Advanced endpoint security products don’t do you much good if they can be evaded or eat your time by consistently throw false positives. Since enterprises are expected to defend against sophisticated threats and money in the security budget only goes so far, you might be interested in the results from NSS Labs’ testing of 13 security vendors AEP solutions. The results were released during the RSA conference.

Businesses targeted in email scams don’t always have to play the victim. They can actually fight back.

As tens of thousands of the world’s top security pros gather at RSA Conference 2017 they are being called upon to watch out for a new threat: their own data.

The AARP, a nonprofit organization that advocates for Americans over 50 years of age, has launched its search for nominees for its Innovation Champion Awards to recognize providers of technology-powered products and services that focus on caregivers.

The home security camera market has taken a big hit in recent months, becoming the poster child for “bad security behavior” when people talk about the security (or lack thereof) of Internet of Things. Last year’s highly publicized DDoS attack on Dyn highlighted insecure cameras being used as part of a botnet; vulnerabilities were also found in Chinese-based security cameras and at least one Samsung SmartCam product. In the U.S., the FTC filed a complaint against D-Link over claims that their webcams were “secure”. Читать дальше...

For IT leaders, it's a bit of déja vú: for the fifth straight year, the Tech Hiring and Retention Survey from executive search and technology firm Harris Allied shows that management's top concern is finding and hiring elite tech talent.

Google has been trying for years to get businesses to abandon Microsoft Office in favor of what it now calls G Suite, the collaboration-oriented trio of Google Docs, Sheets, and Slides, plus companion apps Gmail and Drive. Microsoft has long been the productivity standard-bearer, with Word, Excel, and PowerPoint, supplemented by Outlook and most recently OneDrive.

This should be the year your organization looks to dump its consumer file-sharing software. Don't get me wrong -- many of those services are great for individuals, but they're not really suitable for enterprises. There are other products, however, that offer the file sync that Dropbox and Box and others do so well and so seamlessly, while also providing enterprise-level controls around access, encryption, identity, and more.

Unlimited data plans, like the one announced this week by Verizon, are mostly irrelevant to large businesses that negotiate lower prices with carriers for large pools of data, voice and text for hundreds of workers.

If you are a victim of ransomware, don’t pay!

That has been the mantra of the FBI for several years now – one that was forcefully echoed by one of the nation’s highest-profile security bloggers – Brian Krebs – in a recent post.

But based on the statistics, either a lot of people aren’t listening, or it’s a bit more complicated than that. The reality is that the success of ransomware isn’t just increasing. It’s exploding.

To read this article in full or to leave a comment, please... Читать дальше...

It is easier than ever, or so it seems, to open a new business, especially an ecommerce or tech business. But getting money to fund your startup, especially with so many new businesses competing for the same pool of seed money, can be tough. So which methods, or sources, are the most likely to get or give you the money you need to grow your business? Following are nine of the best, according to entrepreneurs and investors.