Vulnerabilities / Threats
12/27/2012
12:47 PM
Dark Reading
Dark Reading
Products and Releases
50%
50%

Sophos Unveils Thirteen IT Security Trends For 2013

Report provides baseline of what all organizations should be prepared for in coming year

BOSTON, MA – December 21, 2012 – Sophos has released its Thirteen Trends for 2013 report, developed by James Lyne, director of technology strategy. Lyne anticipates the IT security industry will experience a continuation of trends present in 2012, and this report provides a baseline of what all organizations should be prepared for in the coming year.

Trends for 2013:

1. Attack toolkits will continue to proliferate

2. The modernization and hardening of operating systems

3. Cloud-based malware testing will change the threat protection model

4. An increased focus on layered security

5. One step forward, two steps back in technology adoption

6. Mobile attacks will become more advanced

7. Web servers will be back in the crosshairs

8. Further integration of devices, applications and networks

9. Increasingly diverse business models and irreversible malware

10. Skills problem will become more apparent

11. Cyber criminal anti-forensics will become more prevalent

12. More advanced hacktivism and political debate

13. Arguments will continue over big data vs. analytics and confusion

For more information about each trend, please see the full report on the Sophos website here.

Sophos recently released its Security Threat Report 2013, a comprehensive assessment of IT security happenings in 2012, including a look ahead at what's expected in 2013 including trends from bring your own device (BYOD) to the increasing adoption of and uncertainty around the cloud to countless other security challenges faced by organizations of all sizes. The full report is available for download here.

About Sophos

More than 100 million users in 150 countries rely on Sophos' complete security solutions as the best protection against complex threats and data loss. Simple to deploy, manage, and use, Sophos' award-winning encryption, endpoint security, web, email, mobile and network security solutions are backed by SophosLabs - a global network of threat intelligence centers.

Sophos is headquartered in Boston, US and Oxford, UK. More information is available at www.sophos.com.

Comment  | 
Print  | 
More Insights
Register for Dark Reading Newsletters
White Papers
Cartoon
Current Issue
Dark Reading Tech Digest, Dec. 19, 2014
Software-defined networking can be a net plus for security. The key: Work with the network team to implement gradually, test as you go, and take the opportunity to overhaul your security strategy.
Flash Poll
Video
Slideshows
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2014-5208
Published: 2014-12-22
BKBCopyD.exe in the Batch Management Packages in Yokogawa CENTUM CS 3000 through R3.09.50 and CENTUM VP through R4.03.00 and R5.x through R5.04.00, and Exaopc through R3.72.10, does not require authentication, which allows remote attackers to read arbitrary files via a RETR operation, write to arbit...

CVE-2014-7286
Published: 2014-12-22
Buffer overflow in AClient in Symantec Deployment Solution 6.9 and earlier on Windows XP and Server 2003 allows local users to gain privileges via unspecified vectors.

CVE-2014-8015
Published: 2014-12-22
The Sponsor Portal in Cisco Identity Services Engine (ISE) allows remote authenticated users to obtain access to an arbitrary sponsor's guest account via a modified HTTP request, aka Bug ID CSCur64400.

CVE-2014-8017
Published: 2014-12-22
The periodic-backup feature in Cisco Identity Services Engine (ISE) allows remote attackers to discover backup-encryption passwords via a crafted request that triggers inclusion of a password in a reply, aka Bug ID CSCur41673.

CVE-2014-8018
Published: 2014-12-22
Multiple cross-site scripting (XSS) vulnerabilities in Business Voice Services Manager (BVSM) pages in the Application Software in Cisco Unified Communications Domain Manager 8 allow remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug IDs CSCur19651, CSCur18555, CSCur1...

Best of the Web
Dark Reading Radio
Archived Dark Reading Radio
Join us Wednesday, Dec. 17 at 1 p.m. Eastern Time to hear what employers are really looking for in a chief information security officer -- it may not be what you think.