Vulnerabilities / Threats
12/27/2012
12:47 PM
Dark Reading
Dark Reading
Products and Releases
Connect Directly
RSS
E-Mail
50%
50%

Sophos Unveils Thirteen IT Security Trends For 2013

Report provides baseline of what all organizations should be prepared for in coming year

BOSTON, MA – December 21, 2012 – Sophos has released its Thirteen Trends for 2013 report, developed by James Lyne, director of technology strategy. Lyne anticipates the IT security industry will experience a continuation of trends present in 2012, and this report provides a baseline of what all organizations should be prepared for in the coming year.

Trends for 2013:

1. Attack toolkits will continue to proliferate

2. The modernization and hardening of operating systems

3. Cloud-based malware testing will change the threat protection model

4. An increased focus on layered security

5. One step forward, two steps back in technology adoption

6. Mobile attacks will become more advanced

7. Web servers will be back in the crosshairs

8. Further integration of devices, applications and networks

9. Increasingly diverse business models and irreversible malware

10. Skills problem will become more apparent

11. Cyber criminal anti-forensics will become more prevalent

12. More advanced hacktivism and political debate

13. Arguments will continue over big data vs. analytics and confusion

For more information about each trend, please see the full report on the Sophos website here.

Sophos recently released its Security Threat Report 2013, a comprehensive assessment of IT security happenings in 2012, including a look ahead at what's expected in 2013 including trends from bring your own device (BYOD) to the increasing adoption of and uncertainty around the cloud to countless other security challenges faced by organizations of all sizes. The full report is available for download here.

About Sophos

More than 100 million users in 150 countries rely on Sophos' complete security solutions as the best protection against complex threats and data loss. Simple to deploy, manage, and use, Sophos' award-winning encryption, endpoint security, web, email, mobile and network security solutions are backed by SophosLabs - a global network of threat intelligence centers.

Sophos is headquartered in Boston, US and Oxford, UK. More information is available at www.sophos.com.

Comment  | 
Print  | 
More Insights
Register for Dark Reading Newsletters
White Papers
Flash Poll
Current Issue
Cartoon
Video
Slideshows
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2014-2963
Published: 2014-07-10
Multiple cross-site scripting (XSS) vulnerabilities in group/control_panel/manage in Liferay Portal 6.1.2 CE GA3, 6.1.X EE, and 6.2.X EE allow remote attackers to inject arbitrary web script or HTML via the (1) _2_firstName, (2) _2_lastName, or (3) _2_middleName parameter.

CVE-2014-3310
Published: 2014-07-10
The File Transfer feature in WebEx Meetings Client in Cisco WebEx Meetings Server and WebEx Meeting Center does not verify that a requested file was an offered file, which allows remote attackers to read arbitrary files via a modified request, aka Bug IDs CSCup62442 and CSCup58463.

CVE-2014-3311
Published: 2014-07-10
Heap-based buffer overflow in the file-sharing feature in WebEx Meetings Client in Cisco WebEx Meetings Server and WebEx Meeting Center allows remote attackers to execute arbitrary code via crafted data, aka Bug IDs CSCup62463 and CSCup58467.

CVE-2014-3315
Published: 2014-07-10
Cross-site scripting (XSS) vulnerability in viewfilecontents.do in the Dialed Number Analyzer (DNA) component in Cisco Unified Communications Manager allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCup76308.

CVE-2014-3316
Published: 2014-07-10
The Multiple Analyzer in the Dialed Number Analyzer (DNA) component in Cisco Unified Communications Manager allows remote authenticated users to bypass intended upload restrictions via a crafted parameter, aka Bug ID CSCup76297.

Best of the Web
Dark Reading Radio
Archived Dark Reading Radio
Marilyn Cohodas and her guests look at the evolving nature of the relationship between CIO and CSO.