Vulnerabilities / Threats
12/27/2012
12:47 PM
Dark Reading
Dark Reading
Products and Releases
Connect Directly
RSS
E-Mail
50%
50%
Repost This

Sophos Unveils Thirteen IT Security Trends For 2013

Report provides baseline of what all organizations should be prepared for in coming year

BOSTON, MA – December 21, 2012 – Sophos has released its Thirteen Trends for 2013 report, developed by James Lyne, director of technology strategy. Lyne anticipates the IT security industry will experience a continuation of trends present in 2012, and this report provides a baseline of what all organizations should be prepared for in the coming year.

Trends for 2013:

1. Attack toolkits will continue to proliferate

2. The modernization and hardening of operating systems

3. Cloud-based malware testing will change the threat protection model

4. An increased focus on layered security

5. One step forward, two steps back in technology adoption

6. Mobile attacks will become more advanced

7. Web servers will be back in the crosshairs

8. Further integration of devices, applications and networks

9. Increasingly diverse business models and irreversible malware

10. Skills problem will become more apparent

11. Cyber criminal anti-forensics will become more prevalent

12. More advanced hacktivism and political debate

13. Arguments will continue over big data vs. analytics and confusion

For more information about each trend, please see the full report on the Sophos website here.

Sophos recently released its Security Threat Report 2013, a comprehensive assessment of IT security happenings in 2012, including a look ahead at what's expected in 2013 including trends from bring your own device (BYOD) to the increasing adoption of and uncertainty around the cloud to countless other security challenges faced by organizations of all sizes. The full report is available for download here.

About Sophos

More than 100 million users in 150 countries rely on Sophos' complete security solutions as the best protection against complex threats and data loss. Simple to deploy, manage, and use, Sophos' award-winning encryption, endpoint security, web, email, mobile and network security solutions are backed by SophosLabs - a global network of threat intelligence centers.

Sophos is headquartered in Boston, US and Oxford, UK. More information is available at www.sophos.com.

Comment  | 
Print  | 
More Insights
Register for Dark Reading Newsletters
White Papers
Cartoon
Current Issue
Video
Slideshows
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2012-3946
Published: 2014-04-24
Cisco IOS before 15.3(2)S allows remote attackers to bypass interface ACL restrictions in opportunistic circumstances by sending IPv6 packets in an unspecified scenario in which expected packet drops do not occur for "a small percentage" of the packets, aka Bug ID CSCty73682.

CVE-2012-5723
Published: 2014-04-24
Cisco ASR 1000 devices with software before 3.8S, when BDI routing is enabled, allow remote attackers to cause a denial of service (device reload) via crafted (1) broadcast or (2) multicast ICMP packets with fragmentation, aka Bug ID CSCub55948.

CVE-2013-6738
Published: 2014-04-24
Cross-site scripting (XSS) vulnerability in IBM SmartCloud Analytics Log Analysis 1.1 and 1.2 before 1.2.0.0-CSI-SCALA-IF0003 allows remote attackers to inject arbitrary web script or HTML via an invalid query parameter in a response from an OAuth authorization endpoint.

CVE-2014-2391
Published: 2014-04-24
The password recovery service in Open-Xchange AppSuite before 7.2.2-rev20, 7.4.1 before 7.4.1-rev11, and 7.4.2 before 7.4.2-rev13 makes an improper decision about the sensitivity of a string representing a previously used but currently invalid password, which allows remote attackers to obtain potent...

CVE-2014-2392
Published: 2014-04-24
The E-Mail autoconfiguration feature in Open-Xchange AppSuite before 7.2.2-rev20, 7.4.1 before 7.4.1-rev11, and 7.4.2 before 7.4.2-rev13 places a password in a GET request, which allows remote attackers to obtain sensitive information by reading (1) web-server access logs, (2) web-server Referer log...

Best of the Web