#SecurityNews: “Forgotten risks hide in legacy systems”

#SecurityNews: “Forgotten risks hide in legacy systems”

These days, there’s no shortage of new business technologies and new threat vectors to the enterprise. But what many companies forget is that old technologies pose risks as well, and those risks aren’t going away. In fact, as your legacy systems continue to get more out-of-date while the world around them continues to evolve, the risks may be increasing.These days, there’s no shortage of new business technologies and new threat vectors to the enterprise. But what many companies forget is that old technologies pose risks as well, and those risks aren’t going away. In fact, as your legacy systems continue to get more out-of-date while the world around them continues to evolve, the risks may be increasing.

A few of the things that make legacy systems risky include unpatched software, hard-coded passwords, and a failure to draw any budget money for repairs.

Patch me, please!

There are many reasons that a company might not apply all the patches and other recommended fixes for a legacy system. Some software is too business-critical to mess with, and if a patch has the potential to break things, it might get postponed until it’s tested first…and that testing never happens.

Complete Article by CSO

#SecurityNews: “Forgotten risks hide in legacy systems”

#SecurityNews: “IAM resources are going to be in demand”

I am not sure what Nostradamus had predicted about IT Security and IAM but from Facebook to Adobe, 2013 was a tough year for companies looking to defend against cyber-crimes. There were hundreds of known data breaches in different organizations where billions of records related to personal and financial data were stolen or spilled due to security failures.

2014 would be even tougher as cyber security threats are increasing as quickly as organizations can implement measures against them. At the same time, they have to embrace virtualization and cloud, user mobility and heterogeneous platforms and devices. Protection of exploding volumes of sensitive data at cloud and smart devices would be a serious challenge for organizations of all type.

Complete article by Umer Aziz

#SecurityNews: “Forgotten risks hide in legacy systems”

#SecurityNews: “The NSA allegedly exploited the Heartbleed Bug for years”

The US National Security Agency reportedly took advantage of the vulnerability that has come to be known as the Heartbleed Bug long before the exploit was made public.

The NSA used Heartbleed «to gather critical intelligence,» Bloomberg reports.
The publication says a pair of people «familiar with the matter» revealed to the NSA not only know about Heartbleed for years, but used it to its advantage as well.

Allegedly the agency kept the exploit secret, endangering the online security of millions of people, so that it could continue using it to gather passwords and other types of data.

Complete article by Techradar

#SecurityNews: “Forgotten risks hide in legacy systems”

#SecurityNews: “Surprise! Gen X and millennials share similar views on security”

What do 40 percent of folks aged between 18 and 48 never do unless they don’t have a choice? Change their passwords.

It’s one of the many pieces of data uncovered by security outfit Fortinet after canvassing members of both Generation X (ages 33 to 48) and millennials (ages 18 to 32), half male and half female. The resulting poll assesses the generational differences in attitudes toward passwords, personal data security, and privacy.

But the results say at least as much about general attitudes on those subjects across generations as they do about specific differences between generations, especially since the cross-generational differences don’t vary as widely as might be believed.

Complete article by Infoworld

#SecurityNews: “Best and worst performing Cloud computing stocks”

#SecurityNews: “Best and worst performing Cloud computing stocks”

The five highest performing cloud computing stocks year-to-date in the Cloud Computing Index are Akamai (NASDAQ: AKAM), Juniper Networks JNPR +2.2% (NYSE:JNPR), F5 Networks FFIV +0.81% (NASDAQ: FFIV), Workday WDAY +3.63% (NYSE:WDAY), Fusion-IO (NYSE: FIO) and Riverbed Technology (NASDAQ:RVBD). $10,000 invested in Akamai on January 2nd of this year is worth $13,267 as of market close yesterday (2/21/14).

IBM, Microsoft, Oracle and SAP share prices are included for comparison.

Workday’s (NYSE:WDAY) share price is up 20.79% year-to-date, delivering $12,284 on a $10K investment on January 2nd. Salesforce (NYSE:CRM) is up 15.22%, delivering a return of $11,591 on $10K invested in the same time period. NetSuite (NYSE:N) is up 12.18% for the year, delivering $11,339 on $10K invested. Veeva Systems (NYSE:VEEV) is up 9.19% year-to-date, delivering $10,841 invested on $10K on January 2nd.

Complete article by Forbes