Connect with us

Technology

Trend Micro Warns Devices and Accounts are Highest-Risk Assets

Published

on

Cyber Risk Report highlights critical vulnerability, offers new ways to prioritize risk management

DALLAS, Sept. 25, 2024 /PRNewswire/ — Trend Micro Incorporated (TYO: 4704; TSE: 4704), a global cybersecurity leader, today urged network defenders to gain greater visibility into risk across their attack surface, after unveiling a new study* which provides granular metrics by region, company size, industry, asset type and more.

The report also uncovered many weak configurations that could lead to compromise, especially around security controls.

To read a full copy of the report, Intercepting Impact: 2024 Trend Micro Cyber Risk Report, please visit: https://www.trendmicro.com/vinfo/us/security/news/cybercrime-and-digital-threats/intercepting-impact-2024-trend-micro-cyber-risk-report 

Jon Clay, VP of threat intelligence at Trend Micro: “Trend’s cyber risk report shares key insights on where risks are greatest within organizations such as weak security controls, misconfigurations, and unpatched actively exploited vulnerabilities. Shifting towards a more risk-based approach to cybersecurity—discovering the entire attack surface, using AI to calculate the actual risk, and providing mitigating controls advice—allows an organization to improve its cybersecurity posture like never before. This is a game changer for the industry.”

Using a risk event catalog, the Trend Vision One™ platform calculates a risk score for each asset type and an index for organizations by multiplying an asset’s attack, exposure, and security configuration by impact. An asset with low business impact and few privileges has a smaller attack surface, while higher-value assets with more privileges have a larger attack surface.

The following assets are the most at risk:

Devices: 22.6 million total devices, with 877,316 classified as high-risk.Accounts: 53.9 million total accounts, with 12,346 classified as high-risk.Cloud Assets: 14.5 million total cloud assets, with 9,944 classified as high-risk.Internet-Facing Assets: 1.1 million total, with 1,661 classified as high-risk.Applications: 8.8 million total applications, with 489 classified as high-risk.

The number of high-risk devices is much higher than that of accounts, even though there are more accounts in total. Devices have a larger attack surface—i.e., they can be targeted with more threats. However, accounts are still valuable as they can grant threat actors access to various resources.

Elsewhere, the report also found:

Americas has the highest average risk index among regions, with an average risk index rating of 43.4, driven by vulnerabilities in the banking sector and critical infrastructure and the region’s attractiveness to profit-driven actors.Europe is the quickest region to patch vulnerabilities, indicating strong security practices.Mining has the highest risk score of any vertical due to its strategic position in global supply chains and large attack surface.Pharmaceuticals are the fastest sector to patch vulnerabilities by several days, reflecting the importance of protecting sensitive data.The top detected risk event is accessing cloud applications with a high risk level based on historical application data, known security features, and community knowledge.Old and inactive accounts, accounts with disabled security controls, and sensitive data being sent outside the network are other risk events with high event counts.

The report also uncovered many weak configurations that could lead to compromise, especially around security control settings.

As the threat landscape continues to evolve, organizations’ ability to identify and manage risks is becoming increasingly crucial. The Trend Vision One™ platform, with its integrated Attack Surface Risk Management (ASRM), provides the necessary tools for comprehensive threat visibility and effective risk mitigation.

The following steps are recommended to help mitigate cyber risk:

Optimize product security settings to get alerts on misconfigurations.When a risky event is detected, contact the device and/or account owner to verify the event. Investigate the event using the Trend Vision One™ Workbench search function to find more information about or check event details on the product management server.Disable risky accounts or reset them with a strong password and enable multi-factor authentication (MFA).Apply the latest patches or upgrade application and operation system versions regularly.

*The report is based on telemetry data from Trend Micro’s Attack Surface Risk Management (ASRM) solution in its flagship cybersecurity platform, Trend Vision One™, plus the native eXtended Detection and Response (XDR) tools. It’s divided into two sections: the user side covers risk in assets, processes, and vulnerabilities, while the adversary side maps adversary behaviors, MITRE, and TTPs. Data points are based on telemetry from December 25, 2023, to June 30, 2024.

About Trend Micro
Trend Micro, a global cybersecurity leader, helps make the world safe for exchanging digital information. Fueled by decades of security expertise, global threat research, and continuous innovation, Trend Micro’s AI-powered cybersecurity platform protects hundreds of thousands of organizations and millions of individuals across clouds, networks, devices, and endpoints. As a leader in cloud and enterprise cybersecurity, Trend’s platform delivers a powerful range of advanced threat defense techniques optimized for environments like AWS, Microsoft, and Google, and central visibility for better, faster detection and response. With 7,000 employees across 70 countries, Trend Micro enables organizations to simplify and secure their connected world. www.TrendMicro.com.

 

View original content to download multimedia:https://www.prnewswire.com/news-releases/trend-micro-warns-devices-and-accounts-are-highest-risk-assets-302258020.html

SOURCE Trend Micro Incorporated

Continue Reading
Click to comment

Leave a Reply

Your email address will not be published. Required fields are marked *

Technology

Orium and JIBE Partner to Bring Modern Commerce Solutions to More Businesses

Published

on

By

TORONTO, Jan. 8, 2025 /PRNewswire/ – Orium, the leading composable commerce specialist in the Americas, today announced a strategic investment in JIBE, a digital commerce agency known for its expertise in developing modern commerce solutions on the Shopify platform. This investment strengthens an already successful partnership, including shared clients like the fast-growing Leggings.com, and positions the two companies to expand their reach as sister firms. By combining Orium’s focus on complex enterprise clients with JIBE’s expertise in the mid-market, the two businesses will better support brands at any stage of their commerce journey, helping them adapt and scale with composable technologies.

“Orium and JIBE are united by a shared goal: helping businesses succeed with modern commerce technology,” said Jason Cottrell, CEO and Founder of Orium. “This partnership allows us to offer solutions that are flexible, scalable, and tailored to the unique needs of businesses at the mid-market and enterprise-level. Our shared expertise ensures we’re positioned to support clients in navigating the rapidly evolving commerce landscape.”

Orium and JIBE bring complementary strengths to their engagements, combining Orium’s deep expertise in modern headless and composable commerce architectures with JIBE’s specialized Shopify solution engineering. Together, they offer clients the proven ability to deliver tailored, scalable solutions. Their partnership leverages advanced modular and API-first technologies to drive innovation and help businesses achieve growth and agility, regardless of their starting point.

“This partnership enables us to address the unique needs of mid-market businesses, an often underserved segment that demands both expertise and agility,” said Steve Krueger, CEO of JIBE. “With Orium’s enterprise commerce expertise and JIBE’s proven strength in the mid-market, we’re enhancing our ability to serve both scale-ups and enterprise brands.”

By offering specialized services tailored to different business needs, Orium and JIBE are setting a new standard in modern commerce, empowering clients like Leggings.com to meet evolving customer expectations and achieve their goals.

About Orium

Orium is the leading composable commerce specialist in the Americas, helping businesses build flexible, future-ready technology architectures. Specializing in helping brands scale efficiently with deep capabilities in data-driven experience design, AI implementation, and platform engineering, Orium brings over a decade of award-winning experience to enterprise commerce engagements. Orium works closely with best-in-class technology partners to bring modern commerce experiences to life. Orium is a certified B Corp and part of Tercera‘s portfolio of leading professional services firms. More information can be found at www.orium.com.

About JIBE

Since 2009, mid-market brands and founders have entrusted JIBE to strengthen their ecommerce performance with expertise, dedication, and measurable success. By partnering with renowned brands such as Arc’teryx, 7mesh, Aspen Clean, Myodetox, Grouse Mountain, Nest Designs, and Organika, JIBE fosters true collaborations to plan, build, execute, and scale multi-channel, ecommerce-driven businesses. More information can be found at thejibe.com.

View original content to download multimedia:https://www.prnewswire.com/news-releases/orium-and-jibe-partner-to-bring-modern-commerce-solutions-to-more-businesses-302345933.html

SOURCE Orium

Continue Reading

Technology

Pikmykid Acquires Visitu to Enhance School Visitor Management Solutions

Published

on

By

TAMPA, Fla., Jan. 8, 2025 /PRNewswire/ — Pikmykid, the leading school safety platform, is proud to announce the acquisition of Visitu, a cutting-edge visitor management system. This strategic acquisition bolsters Pikmykid’s capabilities in visitor management while advancing its mission to enhance school safety and operational efficiency.

As schools increasingly focus on safety, the addition of Visitu’s visitor and attendance management tools enables Pikmykid to offer a comprehensive solution for managing every aspect of campus safety. From the moment staff, students, parents, volunteers, visitors, and contractors enter the campus to the time students leave safely at the end of the day, Pikmykid now provides an end-to-end platform that prioritizes safety and efficiency.

“Our school’s operations and facilities teams are excited for the potential of even smoother and more effective integration between Visitu and Pikmykid, two solid systems we use to enhance safety at our campuses,” said Eric Neumann, Sr Director of School Operations at Rocketship Charter Schools. “We look forward to continued partnership to further improve our school arrival and dismissal systems, campus security, and overall staff, family, and student experiences!”

“Acquiring Visitu is a transformative milestone in our mission to redefine school safety,” said Saravana Pat Bhava, CEO of Pikmykid. “With the power of one unified platform, we are now able to provide schools with an integrated solution that enhances security while elevating the visitor and community experience”

“Empowering schools with tools that enhance staff efficiency and parent engagement is critical to improving student outcomes,” added Chitra Kanagaraj, COO. “By uniting all safety and engagement tools, we enable schools and districts to focus on what matters most—student success.”

Visitu’s technology allows schools to easily track and manage visitors in real-time, ensuring that only authorized individuals are on campus. This integration will complement Pikmykid’s existing solutions for student drop-off and pick-up, creating a holistic approach to school safety and operations.

“Visitu’s vision to make safety seamless on campus aligns perfectly with Pikmykid,” said Aaron Larkins, CEO of Visitu. “Together, we will continue to invest in simplifying administrative processes.”

Todd Broyles, founder of Visitu, added, “This partnership will revolutionize how schools manage student safety throughout the entire school day, offering comprehensive solutions that address every aspect of campus security. We’re excited to join Pikmykid’s mission to provide innovative tools and enhance school safety.”

Schools can expect the rollout of enhanced features and functionalities in the coming months. Both teams are dedicated to fostering innovation in school safety and operational excellence.

For more information about the acquisition and the expanded offerings from Pikmykid, please visit pikmykid.com and visitu.com.

About Pikmykid

Pikmykid is a comprehensive, cloud-based platform revolutionizing school operations and student safety. Designed to address the diverse needs of modern schools, Pikmykid offers robust features including dismissal management, attendance tracking, hall pass solutions, real-time messaging, emergency response tools, and reunification processes. Trusted by schools nationwide, Pikmykid simplifies the complexities of daily and emergency operations, ensuring safety and efficiency are at the forefront of every interaction.

About Visitu
Visitu is a recognized leader in providing complete safe campus solutions for schools, offering a comprehensive suite of tools to enhance safety, efficiency, and communication. The safe campus platform includes solutions for visitor management, student attendance, emergency response, and school communication, all designed to create a secure and well-connected campus environment. Visitu’s solutions ensure compliance with safety standards while supporting seamless school operations.

Contact:
Michelle Kristoff
***@pikmykid.com

Photos:
https://www.prlog.org/13055630

Press release distributed by PRLog

View original content:https://www.prnewswire.com/news-releases/pikmykid-acquires-visitu-to-enhance-school-visitor-management-solutions-302345647.html

SOURCE Pikmykid

Continue Reading

Technology

Newsweek Ranks EPAM Among Top 5 in IT Services & Consulting on its 2025 Excellence 1000 Index

Published

on

By

NEWTOWN, Pa., Jan. 8, 2025 /PRNewswire/ — EPAM Systems, Inc. (NYSE: EPAM), a leading digital transformation services and product engineering company, today announced it has been recognized by Newsweek in its 2nd annual rankings for the Excellence 1000 Index—ranking #754 overall and in the Top 5 for IT Services and IT Consulting.

The 2025 Excellence 1000 Index is the result of a collaboration between Newsweek and the Best Practice Institute (BPI), a leadership development and benchmark research company. The Excellence 1000 Index is a list of the top 1000 companies that have demonstrated best practices in financial responsibility, stakeholder ratings and social responsibility ratings.

“We are honored to be acknowledged among the world’s most esteemed organizations for our unwavering commitment to our clients, employees, engineering & IT excellence, sustainability and social responsibility,” said Elaina Shekhter, SVP, Chief Marketing & Strategy Officer at EPAM. “As a trusted partner for clients globally, we are excited to continue delivering innovative and transformative solutions to our clients’ most challenging problems through our robust capabilities in digital, AI, GenAI, Data, cloud, and engineering to deliver business value.”

The results were determined after the Best Practice Institute analyzed over half a million data points and created a proprietary scoring system to measure everything from financial practices to customer reviews, ESG commitments and more.

“Corporate success today goes beyond financial performance,” said Nancy Cooper, Global Editor in Chief of Newsweek. “The Excellence 1000 Index honors companies that balance strategic growth with a deep commitment to ethics, social responsibility, and sustainability. Together with our partner Best Practice Institute, we are proud to recognize these organizations redefining leadership in the corporate world.”

Companies have been assessed on several pivotal criteria, including:

Employee Rating: How employees perceive their employer through sentiment and emotion analysis.Customer Rating: How clients view the Company’s products, services and ethics.ESG Risk Rating & Ethical Impact: A deep dive into a company’s environmental, social, and governance practices.ISO Standards Adherence: Compliance with international quality and safety standards.R&D Spending: Investment in innovation and the future.Global Compact Status: Alignment with the UN’s principles on human rights, labor, environment and anti-corruption.

“In an era where narratives often overshadow facts, the 2025 Newsweek Excellence 1000 Index stands as a testament to the importance of verified impact and ethical leadership,” said Louis Carter, CEO of Best Practice Institute. “This year’s honorees exemplify what it means to prioritize innovation, sustainability, and stakeholder value over tradition and superficial metrics. By recognizing these trailblazers, we aim to inspire a new standard for evaluating corporate success—one that values measurable progress and integrity above all.”

EPAM is considered a “Most Loved Workplace” by Newsweek, appearing on their list of Top 100 Most Loved Workplaces for the last four years. Additionally, the Company’s ESG initiatives have been recognized by many prominent global organizations, including the 2024 Inclusive Excellence Award, 2024 SEAL Sustainable Excellence Award and voted Top Most Loved Places for Volunteers®. In 2024, EPAM invested in innovation and the future with the acquisitions of First Derivative, Neoris, Odysseus Data Services and Vates—increasing delivery capabilities, enhancing AI and data-driven solutions and advancing cloud, engineering, testing and digital services for global clients.

For the full list of the 2025 Excellence 1000 Index, please visit here.

About EPAM Systems
Since 1993, EPAM Systems, Inc. (NYSE: EPAM) has used its software engineering expertise to become a leading global provider of digital engineering, cloud and AI-enabled transformation services, and a leading business and experience consulting partner for global enterprises and ambitious startups. We address our clients’ transformation challenges by focusing EPAM Continuum’s integrated strategy, experience and technology consulting with our 30+ years of engineering execution to speed our clients’ time to market and drive greater value from their innovations and digital investments.

We make GenAI real with our AI LLM orchestration, testing and engineering solutions, EPAM DIAL, EPAM EliteA™ and EPAM AI/RUN™, respectively.

We deliver globally but engage locally with our expert teams of consultants, architects, designers and engineers, making the future real for our clients, our partners, and our people around the world. We believe the right solutions are the ones that improve people’s lives and fuel competitive advantage for our clients across diverse industries. Our thinking comes to life in the experiences, products and platforms we design and bring to market.

Added to the S&P 500 and the Forbes Global 2000 in 2021 and recognized by Glassdoor and Newsweek as a Top 100 Best Workplace, our multidisciplinary teams serve customers across six continents. We are proud to be among the top 15 companies in Information Technology Services in the Fortune 1000 and to be recognized as a leader in the IDC MarketScapes for Worldwide Experience Build Services, Worldwide Experience Design Services and Worldwide Software Engineering Services.

Learn more at www.epam.com and follow us on LinkedIn.

Forward-Looking Statements
This press release includes estimates and statements which may constitute forward-looking statements made pursuant to the safe harbor provisions of the Private Securities Litigation Reform Act of 1995, the accuracy of which are necessarily subject to risks, uncertainties, and assumptions as to future events that may not prove to be accurate. Our estimates and forward-looking statements are mainly based on our current expectations and estimates of future events and trends, which affect or may affect our business and operations. These statements may include words such as “may,” “will,” “should,” “believe,” “expect,” “anticipate,” “intend,” “plan,” “estimate” or similar expressions. Those future events and trends may relate to, among other things, developments relating to the war in Ukraine and escalation of the war in the surrounding region, political and civil unrest or military action in the geographies where we conduct business and operate, difficult conditions in global capital markets, foreign exchange markets and the broader economy, and the effect that these events may have on client demand and our revenues, operations, access to capital, and profitability. Other factors that could cause actual results to differ materially from those expressed or implied include general economic conditions, the risk factors discussed in the Company’s most recent Annual Report on Form 10-K and the factors discussed in the Company’s Quarterly Reports on Form 10-Q, particularly under the headings “Management’s Discussion and Analysis of Financial Condition and Results of Operations” and “Risk Factors” and other filings with the Securities and Exchange Commission. Although we believe that these estimates and forward-looking statements are based upon reasonable assumptions, they are subject to several risks and uncertainties and are made based on information currently available to us. EPAM undertakes no obligation to update or revise any forward-looking statements, whether as a result of new information, future events, or otherwise, except as may be required under applicable securities law.

View original content to download multimedia:https://www.prnewswire.com/news-releases/newsweek-ranks-epam-among-top-5-in-it-services–consulting-on-its-2025-excellence-1000-index-302344574.html

SOURCE EPAM Systems, Inc.

Continue Reading

Trending