VietNet Distribution JSC Phnom Penh

22/03/2022

INFOBLOX - Protecting Organizations from Themselves

Ever heard of the joke that It’s a layer 8 issue? It’s funny because there are only 7 layers in the network model, and they are saying it’s the user’s fault to their IT buddies without the user knowing they are talking about them. While it may be a joke, I think many organizations find this is true more times than not. It’s so common that the first question many IT support agents ask is “is it plugged in?”. regardless of if you work in IT or not, almost everyone has run into issues like this in their profession.

One of the most attacked targets in network attacks is the end users themselves. This being considered that users are one of your biggest weak points in the network and security. So, the question comes to what organizations can do to help protect themselves?

https://blogs.infoblox.com/cloud-native/protecting-organizations-from-themselves/

Protecting Organizations from Themselves. Access Control. There are three types of controls, Physical controls (a locked door or fence), administrative controls (company policies and guidelines), and finally technical controls. That last security control with technical controls is what you can use t...

18/03/2022

INFOBLOX - Modern Security Defenses Need To Examine IPAM, DNS

The least surprising observation is that the 2021 security landscapes are far more complicated and attacker-friendly due to changes such as remote sites, IoT, soaring cloud use and partners demanding an ever-increasing amount of access to sensitive operational data.

What is, however, surprising is how many enterprises are not leveraging DNS, IPAM and related tools that already exist in their environments. Indeed, one of the most useful things about DNS and IPAM is that they can detect patterns of movement within the enterprise that many other tools miss.

The best cybersecurity word for today’s enterprise environments is porous. Make that really porous. Although there is far more risk everywhere in these environments, the biggest gaps in the security posture come from remote sites aka work-from-home situations. Those gaps come from inconsistent security arrangements made in almost every one of those locations, with an unlimited variety of different equipment and an at-whim approach to maintenance of patch implementations. (Some enterprises can strongly influence patches on some equipment, but others–such as employee-purchased routers–are the wild west.)

IoT is highly problematic as well, but the second-biggest element of network confusion (think of confusion as losing the battle of signal-vs-noise) are apps of all kinds flooding the network with overwhelming communications, right alongside millions of IoT and IIoT devices communicating to Lord knows who.

DNS and IPAM can cut through much of that confusion and immediately paint a more comprehensive and accurate view of what is going on in the network and especially what is going on that should not be going on.

IP Address Management (IPAM) is especially critical in the detection cycle. Anything that moves across the network needs to interact with IPAM and that leaves a footprint. IPAM doesn’t merely help detect malicious activity (along with non-malicious but still destructive unintentional behavior by employees/contracts/users), but it is also extremely helpful later on, when a forensic team is trying to figure out how the attacker gained access and exactly what the attacker did while inside.

DNS is also helpful with tracking aberrant behavior within the LAN, but cyberthieves and cyberterrorists have both been known to use DNS exfiltration, as a low-visibility way to steal the content and whisk it away to their hideout. That is why closely tracking DNS activity delivers multiple benefits. Many enterprises will get strong insights by monitoring DNS domain addresses to determine who was infected after an attack and how that progressed. This tells them many details about how much information the attacker accessed.

https://blogs.infoblox.com/security/modern-security-defenses-need-to-examine-ipam-dns/

Modern Security Defenses Need To Examine IPAM, DNS. The least surprising observation is that the 2021 security landscapes are far more complicated and attacker-friendly due to changes such as remote sites, IoT, soaring cloud use and partners demanding an ever-increasing amount of access to sensitive...

16/03/2022

PARASOFT - Measuring the Impact of Test Automation on Software Quality

A self-described “accidental technologist,” Justyn Trenner acts as the Corporate Development Director for QA Financial, a company focused on DevOps, automation, and AI technologies. Founded in 2015, the firm seeks to augment how e-commerce and financial firms monitor, discover, and address software development, testing, and delivery.

With such a focus, it’s no wonder that some of their partners include companies from across the globe including Eggplant, IBM, and Parasoft. Their partnership with the Bank of England focuses on digital resilience and the role of inspectable benchmarks in DevOps.

QA Financial recognizes that automation and automated testing are key tools in mitigating risk in the development process. After all, if you can catch issues early, you can better avoid deployment disasters and data breaches.

https://www.parasoft.com/blog/measuring-the-impact-of-test-automation-on-software-quality/

A self-described “accidental technologist,” Justyn Trenner acts as the Corporate Development Director for QA Financial, a company focused on DevOps, automation, and AI technologies. Founded in 2015, the firm seeks to augment how e-commerce and...

15/03/2022

PTC - Your Teammates and Company Will Thank You
Sometimes it seems like every time somebody wants to leverage your CAD model, it means extra work.
But that may not be necessary for Creo users.

“Make CAD Models Work for You” showcases Creo tools that save time and headaches in
• Design validation
• Mold analysis
• Design review
• Technical service
• Manufacturing
• Customer meetings
Plus, each capability is linked to in-depth information you need to get started. Find the best package for your unique products and processes.
See how it works. Download the flyer today to learn more!

https://vietnetco.vn/en/vendor/ptc-en

Giới thiệu về PTC (Prametric Technology, Corp) chuyên gia về CAD/CAM/CNC. Chuyển đổi dữ liệu cad, IOT sang AR, Note vẽ và tạo hướng dẫn qua video call

14/03/2022

ECLYPSIUM -THERE’S A HOLE IN THE BOOT

The vulnerability affects systems using Secure Boot, even if they are not using GRUB2. Almost all signed versions of GRUB2 are vulnerable, meaning virtually every Linux distribution is affected. In addition, GRUB2 supports other operating systems, kernels and hypervisors such as Xen. The problem also extends to any Windows device that uses Secure Boot with the standard Microsoft Third Party UEFI Certificate Authority. Thus the majority of laptops, desktops, servers and workstations are affected, as well as network appliances and other special purpose equipment used in industrial, healthcare, financial and other industries. This vulnerability makes these devices susceptible to attackers such as the threat actors recently discovered using malicious UEFI bootloaders.

Eclypsium has coordinated the responsible disclosure of this vulnerability with a variety of industry entities, including OS vendors, computer manufacturers, and CERTs. Mitigation will require new bootloaders to be signed and deployed, and vulnerable bootloaders should be revoked to prevent adversaries from using older, vulnerable versions in an attack. This will likely be a long process and take considerable time for organizations to complete patching.

Eclypsium Blog: https://eclypsium.com/2020/07/29/theres-a-hole-in-the-boot/

The BootHole vulnerability in the GRUB2 bootloader opens up Windows and Linux devices using Secure Boot to attack. The majority of laptops, desktops, servers and workstations are affected, as well as network appliances and other special purpose equipment

10/03/2022

VEEAM - Data Protection Trends in Public Sector

Veeam recently published the latest and largest research report on data protection, as surveyed by an independent research firm with nearly 3,400 responses from 28 countries. Among these responses were over 350 IT leaders from federal agencies, state and local governments, and educational institutions.

Veeam sponsors this research to fully understand how customer goals and challenges may differ across areas, organization sizes, and industries. It’s particularly important to explore the practices and challenges of public sector organizations, because their priorities often differ sharply from those of commercial organizations:

1/ Military branches: for warfighters, the consequences of mission downtime or data loss can literally be life and death, and data protection requirements often reflect that
2/ Civilian agencies and local government:
3/ Educators at all levels have made the transition to hybrid teaching and must maintain uptime while remaining compliant and safeguarding student data

https://www.veeam.com/blog/data-protection-trends-public-sector.html

Learn how IT leaders in the public sector cope with shifting requirements, increasing security risks, and budget constraints to protect their data in 2022.

07/03/2022

PARASOFT - Best Practices for Using Static Analysis Tools

As any coder and quality assurance tester will tell you, static analysis is a critical part of workflow. In the same way that vaccines require multiple trials, any project requires code quality analysis on multiple fronts.

To that end, Parasoft provides static analysis tools to help automate the process. This also augments best practices to become more agile in response to necessary changes and updates. But having a foundational understanding of static analysis, its tool, and the best practices is critical fundamental knowledge.

Educate or re-familiarize yourself with these concepts here. This blog answers the following questions:

1. What is static code analysis?
2. How do you perform static analysis?
3. What are code quality tools?
4. How do I check my code quality?
5. What are static code analysis best practices?
6. Can you automate static code analysis?

https://www.parasoft.com/blog/best-practices-for-using-static-analysis-tools/

As any coder and quality assurance tester will tell you, static analysis is a critical part of workflow. In the same way that vaccines require multiple trials, any project requires code quality analysis on multiple...

04/03/2022

INFOBLOX - Askari Bank Modernizes and Enhances Cyber Security Posture with Infoblox Threat Defense Advanced

Askari Bank opened for business in April 1992 and has grown to become one of Pakistan’s leading financial institutions. Askari offers a full range of personal and business banking services, ATM and mobile banking and credit and debit cards, and it maintains 537 branches across Pakistan. Since its inception, the bank has concentrated on growth through improving service quality, investing in technology and people and using its extensive branch network, which includes Islamic and agricultural banking.

Askari’s vision is to passionately support its customers’ success and delight them with the quality of its service. A key element of this dedication to service is to maintain the absolute highest levels of privacy and security for the bank’s customers.

https://www.infoblox.com/resources/case-studies/askari-bank/

Pakistan-based Askari Bank is strengthening its security posture with Infoblox technology: “BloxOne Threat Defense enables (us) to take faster decisions based on highly accurate contextual information."

01/03/2022

PTC - Make CAD Models Work Harder for You
Increase the value of all your hard design work. Find out how you can use the CAD models you already create today to seamlessly assist downstream teams—like sales, production, and service.
DOWNLOAD NOW
“Make CAD Models Work for You” highlights Creo’s tools for:
• Design validation
• Mold analysis
• Design review
• Technical service
• Manufacturing
• Customer meetings
Best of all? These Creo capabilities are fully associative, so changes you make to your CAD model automatically propagate to downstream deliverables.
See how it works. Download the flyer today to learn more!

https://www.ptc.com/en/products/creo/packages



📌 For detailed consultation and quotation, please contact us at:
☎️ Hotline: (+855)96 333 4000
📩 Email: [email protected]
🔮 Demo/ Quotation: https://vietnetco.vn/en/quotation

25/02/2022

NETSCOUT - Technologies at the Edge Create New Service Assurance Issues for Enterprises

Enterprises around the world continue to make adjustments to their corporate networks in response to the changes wrought by the global pandemic. As we pass the second anniversary of the first U.S. cases of COVID-19, countries throughout Europe have recently closed down for the third or fourth time, forcing enterprises that haven’t already done so to recognize a hybrid workforce model may be a long-term strategy necessary to support their employees, vendors, and customers. Labor economist Adam Ozimek goes so far as to predict that “remote work will transform economies, as companies must revise policies to accommodate remote employees.”

As such, enterprises increasingly are embracing the edge, deploying resources closer to clients, services, and server workloads to build more-responsive and secure networks. Moving resources to the edge enables enterprise IT to monitor users and behaviors closer to where the action takes place, with the added benefit of mitigating risks before they pe*****te deeper into networks. As resources are pushed nearer to the clients, more vendors are introduced into the ecosystem, which exponentially increases complexity and makes problem detection and resolution more challenging.

https://www.netscout.com/blog/technologies-edge-create-new-service-assurance-issues

Remote work and hybrid workforces are here to stay. Technology resources closer to the client edge for more responsive, secure networks need visibility to ensure quality end-user experience.

24/02/2022

MENLO SECURITY - What is a zero-day exploit and why should you care?

Zero-day exploits have been all over the news in recent years, and several foreign governments have been accused of enabling attacks on vulnerable network infrastructure in the U.S. and the European Union. Most recently, a critical Internet zero-day was discovered in Log4j, a Java library for logging error messages in applications. Given the library is developed by the open-source Apache Software Foundation, this is a ubiquitous piece of software, meaning the flaw likely impacts millions of computers.

But what exactly is a zero-day exploit, how does it work, and should you be concerned? It’s time to answer those questions and share what you can do to protect your organization from these types of web threats.

https://www.menlosecurity.com/blog/everything-you-need-to-know-about-zero-day-exploits/



📌 For detailed consultation and quotation, please contact us at:
☎️ Hotline: (+855)96 333 4000
📩 Email: [email protected]
🔮 Demo/ Quotation: https://vietnetco.vn/en/quotation

What exactly is a Zero-Day exploit? How do they work? Eric Schwake of Menlo Security explores what you can do to keep your organization safe from this cyber threat.

23/02/2022

D3SECURITY - SIEM vs. SOAR: How they Differ and Why they Work Well Together

There has always been some confusion around the distinctions between SIEM (security information and event management) and SOAR (security orchestration, automation, and response), which has been made worse in the past few years as some SIEM vendors have purchased SOAR companies in order to incorporate their features or sell SOAR as an add-on.

So, unless you’re an expert on the everchanging world of cybersecurity tools (and their corresponding acronyms), you might have wondered things like:

What’s the difference between SOAR and SIEM?
Why do I need SOAR if I have a SIEM?
Can SOAR work without a SIEM?

In this article, we’ll try to answer all of those questions, because, SIEM and SOAR aren’t at all redundant, despite some superficial similarities. In fact, SOAR works excellently alongside a SIEM, expanding the SIEM’s powerful capabilities to effectively analyze, investigate, and respond to alerts. A SIEM is a great alert source, with its ability to aggregate and detect anomalous activity. The addition of a SOAR tool for escalation of notable alerts gives security teams with a SIEM the ability to add automation to their workflows and much more.

D3 Blog: https://d3security.com/blog/siem-vs-soar/



📌 For detailed consultation and quotation, please contact us at:
☎️ Hotline: (+855)96 333 4000
📩 Email: [email protected]
🔮 Demo/ Quotation: https://vietnetco.vn/en/quotation

There has always been some confusion around the distinctions between SIEM (security information and event management) and SOAR (security orchestration, automation, and response), which has been made worse in the past few years as some SIEM vendors have purchased SOAR companies in order to incorporat...