How can you protect yourself from hackers and more specifically, DDOS attacks? DDOS attacks are growing in both size, sophistication and occurrence – meaning that if you don’t have a strong data protection system in place, you need to hurry up.
DDOS stands for Distributed Denial of Service and is one of the most serious threats to companies and organizations today. Due to their new level of sophistication, attackers are able to attain a higher capacity at a lower cost, meaning they can afford to make their attacks bigger. Although different sources report various growth numbers, we can expect to see a 20-30% rise in attacks this year, in comparison to last year.
However, times are changing and so is cybercrime. DDOS is now also a common weapon of choice for criminals. They use it as a tool for extortion. Nonetheless, if you become desperate enough and pay them, they will see you as a source of income and repeat the attack later on. Repeat attacks are standard so you should never give in to the extortion.
Different types of tools for DDOS attack are widely spread through different hacker forums, meaning the knowledge about and accessibility of the attacks are just growing. Since more and more attacks are targeting devices that are connected to the Internet of Things, we also believe that cloud-based service attacks are going to become more common.
There are different types of technologies and services to alleviate the effects of DDOS attacks, but they’re usually only efficient against one type of attack. In order to stop a multi-sector attack, you will need more than one anti-DDOS service. So, multiple layers of protection is the best solution. Talk to your Internet Service Provider and your other cloud vendors about data protection today!
Read full blog post ”WARNING! DDoS attacks are a growing threat” here!
Security Software & Tools Tips – February 2019
In this monthly post, we try to make you aware of five different security related products. This is a repost from my personal website Ulyaoth. This month we have chosen for the following: * IBM QRadar * Snyk * Haven * HashiCorp Vault * Nikto IBM QRadar Information from the IBM Qradar website: QRadar Community […]
Microsoft IIS DoS, patch install not enough
This blog post is a summary of this week’s Information Security News put together by our Security Incident Response Team (SIRT). Microsoft announced a bug in the Internet Information Services (IIS) where malicious HTTP/2 packets would consume 100% CPU until restarted. Microsoft have published patches that would allow a MS IIS administrator to mitigate this […]
Downgrade Attack on TLS 1.3 and Vulnerabilities in Major TLS Libraries
This blog post is a summary of this week’s Information Security News put together by our Security Incident Response Team (SIRT). On November 30, 2018. nccgroup disclosed CVE-2018-12404, CVE-2018-19608, CVE-2018-16868, CVE-2018-16869, and CVE-2018-16870. These were from vulnerabilities found back in August 2018 in several TLS libraries. Read more Top 5 Security News MacOs Zero-day exposes […]
Multi-factor authentication time?
This blog post is a summary of this week’s Information Security News put together by our Security Incident Response Team (SIRT). With billions of user credentials being freely distributed online it’s high time to implement multi-factor authentication as the default way to authenticate. Wired has written an article about the magnitude of leaks: ”Earlier this […]
How to improve control and save cost with Service Organization Controls (SOC) reports.
All types of outsourcing of IT services, whether it’s to a local service provider or a global hyperscale cloud provider, have this in common: You can outsource a business process, but you cannot outsource the ownership to your business’s risk. That is why most companies that outsource must find ways to ensure their service providers […]
Unprotected Government Server Exposes Years of FBI Investigations
This blog post is a summary of this week’s Information Security News put together by our Security Incident Response Team (SIRT). ”A massive government data belonging to the Oklahoma Department of Securities (ODS) was left unsecured on a storage server for at least a week, exposing a whopping 3 terabytes of data containing millions of […]
Give Up the Ghost: A Backdoor by Another Name
This blog post is a summary of this week’s Information Security News put together by our Security Incident Response Team (SIRT). Government Communications Headquarters (GCHQ), the UK’s counterpart to the National Security Agency (NSA), has fired the latest shot in the crypto wars. In a post to Lawfare titled Principles for a More Informed Exceptional Access Debate, […]
Security Software & Tools Tips – January 2019
In this monthly post, we try to make you aware of five different security related products. This is a repost from my personal website Ulyaoth. This month we have chosen for the following: * Elastic Stack * Security Onion * Wireshark * Cuckoo * BeEF Elastic Stack Information from the Elastic Stack website: Threats don’t […]
EU launches bug bounty programs for 15 software
This blog post is a summary of this week’s Information Security News put together by our Security Incident Response Team (SIRT). The European Commission decided to launch its bug bounty initiative, the Free and Open Source Software Audit (FOSSA) project. Starting in January, the European Commission is going to fund bug bounty programs for a […]
