Welcome to our new and improved Daily Roundup where we quickly summarize the news you missed today. Make sure to subscribe to our daily newsletters to get these stories and more in your inbox.
SDxCentral Quick HitHackers Impersonate Popular Brands via Google Cloud — Hackers are “piggybacking” off popular brands to appear more legitimate to victims and security scanners to send phishing emails via Google Cloud Storage. Through this exploitation, hackers are deploying phishing campaigns and accessing victims’ email inboxes.
“Popular brands are more likely to be accepted by security scanners into the inbox. Because they are used so often, they are unlikely to be blocked. You can’t block Google, so hackers look to exploit that,” wrote Jeremy Fuchs of Avanan via an SDxCentral email exchange. “Furthermore, end-users are accustomed to getting emails from these brands and may not think something is amiss. A non-popular brand entering your inbox may be more cause for suspicion.”
Hackers use several tactics to get into users’ emails. In addition to impersonating users or brands, hackers are “leveraging sophisticated obfuscation techniques that confuse security scanners or dumping spam, and are finding incredible success at getting into user inboxes,” Fuchs wrote.
Multiple layers of security are needed for companies to skew these attacks. “[Companies] should also implement a preventive posture that takes the idea that once a malicious email or file enters an environment, it’s too late,” Fuchs continued.
Artificial intelligence (AI) and machine learning (ML) also prove essential to preventing attacks such as brand impersonations and phishing schemes. 51% of attacks require advanced AI and ML, Fuchs cited from Avanan research. “By understanding the content and context of an email, and looking for indicators of attacks, AI and ML can automatically determine if an email is malicious or not.”
SDxCentral Top Stories Splunk: Zero Trust 'Critical' in a Permissionless WorldGovernance is one of the most important components of automation in a zero-trust landscape, said Splunk during a keynote at Black Hat USA. Read more.
Cisco Talos Warns of Small-Time Cybercrime Ramp UpCisco Talos intelligence group cautions that we aren’t ready to deal with the snowballing small-time cybercrime trend. Read more.
Blippar Creates Free AR Creation Platform TierAugmented reality content platform company Blippar made a version of its no-code AR creation tool free to use. Read more.
Telco Giants Eye Regulatory Edge Vs. Tech Giants, CCS SaysAnalysts remain unmoved by poverty claims from European telecommunications operators that have claimed large tech companies. Read more.
Expereo Acquires Breeze Networks to Expand SASE, SD-WAN ReachManaged network provider Expereo has acquired British service provider Breeze Networks to expand its range of services across the globe. Read more.
2022 Consumer AR Device Market Revenue Hikes 308%The consumer AR device market tripled from 2020-2021, with AR revenues outpacing the overall market and growing over 300% year-over-year. Read more.
Money Moves: July 2022SRG predicts record-breaking data center M&A; Ericsson's Vonage acquisition was approved; and Deutsche Telekom sold 51% of GD Towers. Read more.