Tag Archive for: shift

SD Times news digest: The Hacker Gamers by Veracode, GrammaTech Shift Left Academy, and Talend to be acquired by Thoma Bravo

/in


Veracode has introduced a secure coding competition, The Hacker Games, which aims to challenge university students to hack and patch real-life apps online to win individual prizes, plus $15,000 in charitable donations for the top universities.

“Training around secure coding is almost absent at the university level. We’ve launched The Veracode Hacker Games to help universities make secure coding a core part of their computer science and cybersecurity curriculum, while giving students an edge when it comes to putting their skills to the test in a real-world environment,” said Chris Wysopal, the founder and CTO of Veracode.

Writing secure code is especially important now as a recent study by the University of Maryland showed that hackers attack every 39 seconds and the average cost of a data breach for a company is nearly $4 million, Veracode explained.

GrammaTech Shift Left Academy
GrammaTech’s Shift Left Academy was created to provide actionable advice on integrating security earlier into development and DevOps pipelines.

The site features interviews with industry experts, technical “how to” advice and other actionable information for the DevOps and security community.

“Developers are being asked to integrate security best practices earlier in the development cycle, or what is commonly known as ‘Shift Left’, however there is resistance to implement these large-scale initiatives since they can be disruptive to their workflows and release schedules,” said Andrew Meyer, the CMO of GrammaTech. “Shift Left Academy provides practical advice and content, versus theoretical resources. Our goal is to give the DevSecOps community tools they can use to immediately improve outcomes.”

Talend to be acquired by Thoma Bravo
The data integration and data integrity provider Talend is set to be acquired by Thoma Bravo.

Talend would become a private company and continue investing in its cloud transition as well as products and solutions that serve the evolving data needs of its customers.

“Data has become critical to every facet of the world, and Talend’s data fabric empowers organizations to operationalize their data,” said Chip Virnig, a partner at…

Source…

WatchGuard: Hackers Target Corporate Networks Despite Shift to Remote Work

/in


by DH Kass • Dec 28, 2020

Despite the shift to remote work, hackers continue to aggressively target corporate networks. Moreover, the rise of COVID-19-related malicious domains and phishing campaigns continues, WatchGuard said in its recent Internet Security Report for Q3 2020.

Key findings from the report include:

Network attacks. Rose by 90% from Q2 to 3.3 million, the highest level in two years. Unique network attack signatures also hit a two-year high in Q3. Takeaway: Businesses must prioritize maintaining and strengthening protections for network-based assets and services even as work forces become increasingly remote.

COVID-19. In Q3, a COVID-19 adware campaign running on websites used for legitimate pandemic support made WatchGuard’s list of the top 10 compromised websites. WatchGuard also uncovered a phishing attack hosting a bogus login page with an email lure around small business COVID-19 relief from the United Nations. Takeaway: Attackers will continue to exploit fear, uncertainty, and doubt from the pandemic to victimize organizations.

Phishing attacks and malicious links. In Q3, WatchGuard’s DNSWatch service blocked a combined 2.8 million malicious domain connections, or roughly 500 blocked connections per organization in total. Takeaway: A closer look shows that each organization would have reached 262 malware domains, 71 compromised websites, and 52 phishing campaigns.

Industrial control systems. In Q3, attackers exploited a previously-patched authentication bypass vulnerability in a popular supervisory control and data acquisition (SCADA) control system. Takeaway: Attackers targeted nearly 50% of U.S. networks with SCADA threats in Q3, a sign that bad actors could focus on industrial control systems in 2021.

LokiBot look-a-like. Farelt, a password stealer that resembles LokiBot was one of the most widespread malware detections in Q3. It’s not clear if the Farelt botnet uses the same command and control structure as LokiBot but it’s likely the SilverTerrier malware group created both malware variants. Takeaway: WatchGuard found solid evidence that Farelt has likely targeted many more victims than the data shows.

Emotet. The infamous banking…

Source…

Google Pixel Phones Start Receiving January 2020 Android Security Patch, Pixel 4 Gets Fix for Colour Shift Issue – Gadgets 360

/in
  1. Google Pixel Phones Start Receiving January 2020 Android Security Patch, Pixel 4 Gets Fix for Colour Shift Issue  Gadgets 360
  2. January security patch rolling out to Google Pixel, factory images & OTAs live  9to5Google
  3. Smartphone Security Surprise As Samsung Shows Google How Android Updates Can Be Done  Up News Info
  4. Google Pixel smartphones get January 2020 security patch | BGR India  BGR India
  5. Google Pixel phones start receiving the Android security patch from January 2020, Pixel 4 is solved for the problem of color change  NewsDio
  6. View full coverage on read more

“android security news” – read more

Gibson Guitar Declares Shift In IP Enforcement After Most Recent Public Backlash

/in

Our past posts on Gibson Guitar, the famed guitar-maker, have revealed roughly a decade of strict IP enforcement and other busuiness challenges. Between waffling on its support for SOPA and its own failures to properly innovate in a direction that met its customers’ demand, never mind its odd legal trouble over “illegal” wood used in its guitars and the bankruptcy it underwent a few years back, we’re not left with a picture of a well-oiled business. Despite that, emerging from bankruptcy, Gibson has continued its IP maximilist ways, most notably in the past few weeks with a lawsuit against the owner of Dean and Luna Guitars for trademark infringement and counterfeiting over several guitar body designs that the defendants claim aren’t protectable.

There are two important aspects of that specific dispute to note here. First, the public backlash against Gibson over the lawsuit was firm and swift. Second, this specific dispute originated with cease and desist notices sent out by Gibson’s legal team back in 2017. That is particularly notable as it was only in November of 2018 that Gibson brought on a new CEO, James Curleigh. In the wake of the backlash over the past few weeks, Curleigh has gone out of his way to promise the public that Gibson is going to quickly move on from its IP maximilist ways.

Regarding criticism Gibson has faced for its legal actions, the company said in a statement that the past few weeks “have provided a ‘real time’ opportunity to start making the pivot from less legal leverage to more industry collaboration, with appropriate levels of awareness.” Furthermore, the company clarified that the recent attention on the lawsuits in process stem from several years of legal action initiated prior to the new leadership, headed by CEO and President James “JC” Curleigh, arriving in November of 2018. With regard to the inherited and ongoing legal dynamic with Dean Guitars, Gibson says its team has made attempts to directly communicate to “avoid a prolonged legal battle.”

Said Curleigh, “I am proud of the progress we have made with our attention to quality, with the launch of the new collections, and with our renewed engagement to our Gibson authorized dealer base. At the same time, we acknowledge there are still legacy challenges to solve going forward, especially around brand protection and market solutions.”

On the one hand, it feels somewhat lame to let a company off the hook for filing a lawsuit two weeks ago just because the cease and desists were sent out two years prior to the current CEO’s tenure. You’re the CEO, dude. Tell the legal team to not file the suit if that’s what you think it should do.

All that being said, the words coming out of Curleigh’s mouth are the right ones, as are those coming from the Gibson PR team. It’s gratifying to watch a company bow to public backlash over an overtly aggressive IP enforcement stance. And hearing the company use language that used to be reserved for the craft beer industry, back before that industry was similarly ravaged by IP enforcement, is encouraging.

He continued, “It is time to make the modern-day shift from confrontation towards collaboration, whilst still protecting our brands, and we are committed to making this happen starting now.”

What remains is seeing just how Curleigh’s Gibson Guitar wants to balance that equation. If he can shift the culture of the company towards one that is human and awesome, all while giving fans of Gibson guitars what they want, it could be a major win for a company that recently looked quite lost.

Permalink | Comments | Email This Story

Techdirt.