Nexsan expanded the unification process of its Unity appliances to the cloud, as well the vendor's Assureon archive and legacy devices.

Nexsan's launch of its third-generation Unity storage appliances can connect to Assureon object-based archive appliances to make it harder for bad actors to introduce unwanted encryption. Nexsan also introduced Cloud Connector and Data Migration to Unity, allowing it to replicate between on premises and cloud and to migrate data off legacy systems to Unity.

The Unity series is designed for primary and backup storage, with support for hard disk drives and flash. Unity third-generation appliances come in a 3300 model and a 7900 model. The 7900 has more disk bays, raw capacity and system memory. Both models are priced by capacity. According to Nexsan CTO Surya Varanasi, the 3300 is typically a backup target, while the 7900 is geared toward customers looking for high-performance storage.

Nexsan described Unity's connection to Assureon as "unbreakable" backup. Nexsan's Assureon appliance is object storage with file fingerprinting and serialization, used for creating an immutable archive. Unity is certified to work with backup products from Veeam and Commvault, but Assureon adds immutability, making it harder for malware to cause any unwanted changes to the data. Because Assureon is a locked-down appliance serviced by StorCentric (Nexsan's parent company), it's an extra layer that cybercriminals have to penetrate in order to get to the data.

"To breach the Assureon, you also have to breach us," Varanasi said. "Everybody's getting smarter, but the more levels you have, the more difficult it is to breach."

Marc Staimer, president of Dragon Slayer Consulting, described Assureon as, "very viable immutable storage for backup." Assureon itself isn't a backup appliance, as it doesn't manipulate the backup data, but it can store backup data, encrypt it, put multi-factor authentication on it, and generally make it harder for bad actors to access it. Even if everything else is compromised, Assureon will have an untouched backup copy to restore from.

There has been a rising trend of ransomware going after backup systems, and backup vendors have been working together with security vendors in response. Staimer said this is just another step in the continuous arms race between IT and cybercriminals.

"Technology is always breakable. If it's built by humans, it has flaws," Staimer said.

Cloud Connector and Data Migration are two new features that are subsets of an upcoming Nexsan product called Data Mobility Suite, which is scheduled to launch in September. The Cloud Connector module links Unity to 18 public clouds, including AWS and Google Cloud, allowing the Unity appliance to back up to public cloud. Data Migration lets customers migrate data off legacy systems onto Unity and retire the old arrays.

Varanasi said Data Mobility Suite, which will be an entirely separate product from Unity, is designed to enable data sharing between heterogeneous devices, between cloud and on premises and from cloud to cloud. He said the reality is that organizations are using multiple products from multiple vendors, which leads to data silos and difficulty in sharing and moving data. Data Mobility Suite is meant to address that, and some of its functions are previewed in Unity.

"Managing a department with data spread between an Isilon and a NetApp is no fun at all. It's not easily shared, you need to log in multiple times, and so on," Varanasi said.

Staimer said adding the cloud and data mobility components to Unity was an important step for the product, putting them in competitive alignment with the capabilities of tiered storage vendors Hewlett Packard Enterprise Nimble and Infinidat. He said Nexsan Unity is much less expensive than its competitors, and the company has a few large customers under its belt already, including Caltech, NBC and the Australian Government Department of Defence.

View post:
Nexsan Unity taps into cloud and Assureon archive - TechTarget

US-based VPN stalwart IPVanish is well-known as one of the go-to providers for those who want to maintain true internet privacy. And now its offering a cracking deal on a short-term plan three months for the price of one, which works out at just $3.99 a month.

This comes not long after IPVanish also announced that it had lifted its ten-device limit to allow unlimited connections, meaning that for less than $4 a month you can cover pretty much every device in your household whether they belong to you or not.

However, if you want to bag this deal youll have to grab it soon, as the July sale ends exactly when youd expect it to at the end of July. So, for just seven days, youve got the chance to save 67% on a low-commitment, great-value VPN deal.

IPVanish VPN & SugarSync cloud storage | three months for the price of one | $11.99Save 67% New subscribers to IPVanish can bag a great deal this July by claiming three months for the price of one. That's just $3.99 a month the VPN's cheapest option. If you're not satisfied with the service you're covered by a 30-day money-back guarantee, and all you need to do is head over to the site to save big on a short contract.View Deal

A staple of our best VPN guide and regularly featuring in our other VPN countdowns, IPVanish is a tried and trusted VPN provider. It has apps for a huge range of devices, from Windows PCs and Macs to Android devices and iPhones, right down to you Amazon Fire TV or your router.

Also, IPVanish has long been partnered with secure cloud storage provider SygarSync, and every plan comes with a complementary 250Gb of storage. In fact, paying for IPVanish is actually cheaper than signing up to SugarSync on its own, so if youre looking for a safe repository for your sensitive files, you can kill two birds with one stone here.

If youre looking for the very best service on the market, wed recommend ExpressVPN. While its more expensive at $6.67 a month, the whole experience is a little more polished and its an excellent way to access blocked streaming services. If saving money is more important to you, Surfshark is an up-and-comer which offers a two-year plan for less than $2 a month.

However, if youre after a short plan whether youre going on holiday or just hate being tied to a provider for years this IPVanish deal offers serious value for money and a ton of flexibility. But remember, the sale ends July 31, so you might have to act quickly.

Compare the best overall VPN services spec-by-spec:

Everything - the #1 best VPN

Balance of options and ease of use

Torrenting and P2P traffic

Read more:
IPVanish July sale: three months of VPN cover for the price of one with this deal - Tom's Guide UK

Life around the world has significantly changed in the last three months. From job losses, homeschooling, and working from home, daily life is not the same as it was in February. The world of E-Discovery has not been immune. Law firms and service providers have been forced to adapt to a quickly changing environment. Here in North Carolina, our governor issued a statewide stay at home order effective on March 30. However, most of the people heeded the advice of firm management and began working from home several weeks earlier.

Since that time we have seen a flood of articles and news reports about how people are adjusting to using video conferencing and collaboration tools such as WebEx, Zoom, Skype, and Google Docs. These tools enable us to maintain invaluable connections with our colleagues and clients, but they also have an effect on discovery we might not have previously considered. From an E-Discovery perspective, the use of these remote working tools creates new data sources for preservation and collection. Diligent attorneys and clients would be wise to consider and discuss how these tools might impact the phases of E-Discovery moving forward. Below is a list of considerations to help get the conversation started.

Most workplaces probably have some type of work from home or telework policy. However, even the savviest employers likely did not foresee the world as we knew it coming to a screeching halt. I presume that these policies most likely pertain only to requests to work remotely versus in the office. As counsel, we should engage our clients in a discussion about whether their current policies sufficiently address the use of technology while working from home. For example, employers should consider which technology platforms are currently authorized and which are being utilized by the employees, such videoconferencing tools. Employers should consider whether to limit (or eliminate altogether) the use of unauthorized platforms. If an employer decides to limit the use of certain platforms for safety, privacy or other reasons, that message should be effectively communicated to the employees.

As stated above, an employer should inquire of its employees what tools they use and then consider the privacy and security implications of each. A work from home policy should identify which tools may be used for work purposes and which may not (since work inevitably includes handling private and protected information). While some employees may have already had access to their entire work environments on mobile devices or home computers, other employees may not. Employers may now be paying for or subsidizing mobile devices for employees that were solely personal prior to the pandemic. Employers will need to closely examine their BYOD policies and consider whether revisions to the policies are warranted. Enforcement of policies related to mobile device usage is more straightforward with employer-provided devices, but more difficult if employees use their own devices for remote work. For more information on BYOD policies, clickherefor an extremely informative article from my colleague Russ Beets on the advantages and drawbacks of a BYOD policy.

The remote work policy should reiterate that employees should continue to save all documents and information to a centralized, secure location, whether that location is on the organizations network or other centralized document management system. If employees regularly and consistently save documents to a centralized location, this lessens the need for the preservation and collection of data from employees' devices. While working remotely, employees should regularly be reminded to save documents to centralized, secure locations.

Employers may also need to remind employees that communication via a direct messaging platform utilized by the employer may be a more favorable means of communication over other nonstandard or non-enterprise communications such as text messages, etc. These direct messages are likely already addressed in an organizations data retention policy and, depending on an organizations storage capabilities, may be stored and preserved in a central location.

I suspect that most policies are broad enough to cover these tools, but organizations should review their data retention policies and determine whether the data generated by these remote working tools is adequately addressed. If it is not, the policy will likely need to be updated. In some cases, an organization may need to provide additional training to its internal IT team to ensure they will be able to preserve and collect the data generated should the need arise. The IT team should consider how the tool generates, organizes, indexes and saves data.

When it comes time to identify, preserve and collect data that might be relevant in a dispute, most litigation attorneys and E-Discovery professionals already have a few items in their toolbox to navigate this new world of remote work. The most important tool is the custodian questionnaire. You will need to know how the custodian was communicating and collaborating while working remotely. An existing custodian questionnaire may need to be revised to take into account the use of remote working tools, such as video conferencing and collaboration platforms that may have been utilized by the custodian. The custodian questionnaire should also consider whether the custodian generated any paper documents and the location of those paper documents to ensure they are also properly preserved.

In-person data collections are seemingly a thing of the past. Before COVID, while we conducted remote collections when it was necessary to do so, we preferred in-person collections because we found sitting face to face with an often anxious custodian to be the most effective means of garnering their trust and successfully drilling down to the heart of where relevant data is stored. In todays climate, however, almost all data collections are conducted remotely by accessing an individual employees computer, mobile device or cloud storage location, or an organizations network. Conducting collections from a distance comes with its own challenges, such as scheduling time to meet with custodians who are also trying to work from home, accessing various data sources, loading collection software and keeping a custodians attention. Thankfully, the remote collection tools and workflows we have used in the past are still ripe for todays new world and people are learning how to manage their time and space. With employer and state travel restrictions in place, as well as restrictive stay at home orders, we are actually learning how to successfully connect with our clients and custodians from afar. I believe that this is a lasting change and the majority of collections after the pandemic ends will be performed remotely.

Clients will almost inevitably have questions and concerns about safeguarding their private and confidential data during a remote document review. Truthfully, a remote document review comes with security challenges, simply because we cannot know with 100% certainty where the review is performed or who may have access to view an attorneys computer screen or who may have access to review protocols and case memos. However, a remote document review can be performed safely if certain precautions are taken.

The most secure means of performing a remote document review is to require contract reviewers to use a VPN tunnel or other type of secure portal when accessing the review platform. If a VPN tunnel or secure portal is not an option, two-factor authentication should be implemented for any person remotely accessing the review platform that is not connected via a VPN or secure portal. In addition, document review contract attorneys should be required to follow any remote document review policy in place by the law firm or vendor, such as:

Because contractors are remote, it is even more important that they attend regularly scheduled (even daily) meetings about ongoing reviews to discuss any issues that arise. Similarly, contractors should provide daily reports that provide an overview of the documents they reviewed and any hot documents they encountered. It will also be important to track review rates, including documents viewed and edited per hour, and then discuss how to address outliers.

When daily life has reached some type of stability and we have all adjusted to the new normal, companies will need to determine if their work environment has substantially changed, how long the change may last, and whether their internal policies need to be adjusted. Hopefully, this time comes soon and without additional disruption. Who knows maybe this will lead to more telework, more time with families, and a better quality of life.

Read more here:
Life After COVID 19: E-Discovery Considerations for Attorneys and Clients - JD Supra

Cloud Storage Market is analyzed with industry experts in mind to maximize return on investment by providing clear information needed for informed business decisions. This research will help both established and new entrants to identify and analyze market needs, market size and competition. It explains the supply and demand situation, the competitive scenario, and the challenges for market growth, market opportunities and the threats faced by key players.

Sample Copy of This Report: https://www.quincemarketinsights.com/request-sample-61968?utm_source=PF/komal

A 360 degree outline of the competitive scenario of the Global Cloud Storage Market is presented by Quince Market Insights. It has a massive data allied to the recent product and technological developments in the markets.

It has a wide-ranging analysis of the impact of these advancements on the markets future growth, wide-ranging analysis of these extensions on the markets future growth. The research report studies the market in a detailed manner by explaining the key facets of the market that are foreseeable to have a countable stimulus on its developing extrapolations over the forecast period.

Major Companies:AWS, IBM, Microsoft, Google, Oracle, HPE, Dell EMC, VMware, Rackspace, Dropbox

Table of Contents:

Get ToC for the overview of the premium report @ https://www.quincemarketinsights.com/request-toc-61968?utm_source=PF/komal

Market Segmentation: By Type (Solutions and Services), By Deployment Model (Public Cloud, Private Cloud, Hybrid Cloud), By Organization Size (Large Enterprises, Small and Medium-Sized Enterprises), By Vertical (Banking, Financial Services, and Insurance (BFSI), Healthcare and life sciences, Telecommunications, IT and Information Technology-enabled Services (ITES), Energy and Utilities, Education, Government and public sector, Manufacturing, Consumer goods and retail, Media and entertainment, Others)

A detailed outline of the Global Cloud Storage Market includes a comprehensive analysis of different verticals of businesses. North America, Europe, Asia Pacific, Middle East & Africa, and South America have been considered for the studies on the basis of several terminologies.

This is anticipated to drive the Global Cloud Storage Market over the forecast period. This research report covers the market landscape and its progress prospects in the near future. After studying key companies, the report focuses on the new entrants contributing to the growth of the market. Most companies in the Global Cloud Storage Market are currently adopting new technological trends in the market.

Finally, the researchers throw light on different ways to discover the strengths, weaknesses, opportunities, and threats affecting the growth of the Global Cloud Storage Market. The feasibility of the new report is also measured in this research report.

Reasons for buying this report:

Make an Enquiry for purchasing this Report @ https://www.quincemarketinsights.com/enquiry-before-buying-61968?utm_source=PF/komal

ABOUT US:

QMI has the most comprehensive collection of market research products and services available on the web. We deliver reports from virtually all major publications and refresh our list regularly to provide you with immediate online access to the worlds most extensive and up-to-date archive of professional insights into global markets, companies, goods, and patterns.

Contact:

Quince Market Insights

Ajay D. (Knowledge Partner)

Office No- A109

Pune, Maharashtra 411028

Phone: APAC +91 706 672 4848 / US +1 208 405 2835 / UK +44 121 364 6144

Email: [emailprotected]

Web: https://www.quincemarketinsights.com

Originally posted here:
Cloud Storage Market Is expected to Witness Significant Growth between 2020 to 2028| Top Key Players- AWS, IBM, Microsoft, Google, Oracle, HPE - Owned

Today, the U.S. District Court for the Eastern District of Virginia unsealed documents detailing Microsofts work to disrupt cybercriminals that were taking advantage of the COVID-19 pandemic in an attempt to defraud customers in 62 countries around the world. Our civil case has resulted in a court order allowing Microsoft to seize control of key domains in the criminals infrastructure so that it can no longer be used to execute cyberattacks.

Microsofts Digital Crimes Unit (DCU) first observed these criminals in December 2019, when they deployed a sophisticated, new phishing scheme designed to compromise Microsoft customer accounts. The criminals attempted to gain access to customer email, contact lists, sensitive documents and other valuable information. Based on patterns discovered at that time, Microsoft utilized technical means to block the criminals activity and disable the malicious application used in the attack. Recently, Microsoft observed renewed attempts by the same criminals, this time using COVID-19-related lures in the phishing emails to target victims.

This malicious activity is yet another form of business email compromise (BEC) attack, which has increased in complexity, sophistication and frequency in recent years. According to the FBIs 2019 Internet Crime Report, the most-costly complaints received by their Internet Crime Complaint Center (IC3) involved BEC crimes, with losses of over $1.7 billion, representing nearly half of all financial losses due to cybercrime. While most of the publics attention in recent years has justifiably focused on the malign acts of nation state actors, the increasing economic harm caused by cybercriminals must also be considered and confronted by the public and private sectors. For our part, Microsoft and our Digital Crimes Unit will continue to investigate and disrupt cybercriminals and will seek to work with law enforcement agencies around the world, whenever possible, to stop these crimes.

These cybercriminals designed the phishing emails to look like they originated from an employer or other trusted source and frequently targeted business leaders across a variety of industries, attempting to compromise accounts, steal information and redirect wire transfers. When the group first began carrying out this scheme, the phishing emails contained deceptive messages associated with generic business activities. For example, the malicious link in the email was titled with business terms such as Q4 Report Dec19, as seen below.

With these recent efforts, however, the phishing emails instead contained messages regarding COVID-19 as a means to exploit pandemic-related financial concerns and induce targeted victims to click on malicious links. For example, using terms such as COVID-19 Bonus, as seen here.

Once victims clicked on the deceptive links, they were ultimately prompted to grant access permissions to a malicious web application (web app). Web apps are familiar-looking as they are widely used in organizations to drive productivity, create efficiencies and increase security in a distributed network. Unknown to the victim, these malicious web apps were controlled by the criminals, who, with fraudulently obtained permission, could access the victims Microsoft Office 365 account. This scheme enabled unauthorized access without explicitly requiring the victims to directly give up their login credentials at a fake website or similar interface, as they would in a more traditional phishing campaign.

After clicking through the consent prompt for the malicious web app (pictured below), the victim unwittingly granted criminals permission to access and control the victims Office 365 account contents, including email, contacts, notes and material stored in the victims OneDrive for Business cloud storage space and corporate SharePoint document management and storage system.

Microsoft takes many measures to monitor and block malicious web apps based on telemetry indicating atypical behavior and has continued to enhance our protections based on this activity. In cases where criminals suddenly and massively scale their activity and move quickly to adapt their techniques to evade Microsofts built-in defensive mechanisms, additional measures such as the legal action filed in this case are necessary. This unique civil case against COVID-19-themed BEC attacks has allowed us to proactively disable key domains that are part of the criminals malicious infrastructure, which is a critical step in protecting our customers.

As weve observed, cybercriminals have been adapting their lures to take advantage of current events, using COVID-19-related themes to deceive victims. While the lures may have changed, the underlying threats remain, evolve and grow, and its more important than ever to remain vigilant against cyberattacks.

To further protect yourself against phishing campaigns, including BEC, we recommend, first, that you enable two-factor authentication on all business and personal email accounts. Second, learnhow to spot phishing schemesand protect yourself from them. Third,enable security alertsabout links and files from suspicious websites and carefullycheck your email forwardingrules for any suspicious activity. Businesses can learn how to recognize and remediate these types of attacks and also take these steps to increase the security of their organizations.

Tags: business, COVID-19, cyberattacks, cybercrime, Digital Crimes Unit, Office 365, phishing

More:
Microsoft takes legal action against COVID-19-related cybercrime - Microsoft on the Issues - Microsoft