Google has revealed a new security feature for its Gmail in the companys annual cloud computing showcase Google Cloud Next. The new feature will help users all around the world to block the attackers who can get access to the data. The client-side encryption will be applied to Gmail by the start of next year.

Client-side encryption was previously only available for Google Meet and Docs data. The company is now extending this functionality to other tools in its Workspace productivity suite. Stores encrypted data on the end-user device before it is sent to our data center servers. This means that even Google doesn't have the encryption keys needed for access.

After Google enables client-side encryption next year, only the user who has sent the mail and the user who has received the mail can read it. This feature will also limit others to read messages that are going in the mail.

CSE allows every user including businesses to have direct control of the encryption keys. Google says it uses "modern encryption standards",to encrypt data sent to its servers, making it impossible for hackers to access sensitive information.

The tech giant aims to help users with enhanced data confidentiality while meeting data sovereignty and compliance requirements.

On the other hand, Google Chat is also expected to get this data loss prevention feature to protect the data from real-time leaks. Moreover, the tech giant also mentioned that it will look for data-sharing options for Google Drive that will let businesses decide how to share their files.

Read the original here:
Google To Enable 'Client-Side Encryption' In Gmail By 2023 | All You Need To Know - Jagran English

Data-processing and network function monitoring can now be performed in the cloud, thanks to an industry first solution fromEricsson,Swisscom and NETSCOUT that providesautomatic access to packet data and the ability to analyze raw packet data.

With the established approach to data collection being unsustainable, the updated network solution will overhaul the traditional virtualised mobile network function (where data traffic is routed from the cloud and processed physically in a conventional manner). Instead, cloud-based packet data processing and network function monitoring are enabled dramatically increasing network service assurance, analytics and cybersecurity.

The solution has been introduced to Swisscoms newly deployed cloud-native, TLS-encrypted 5G network, and integratesEricssons dual-mode 5G Core with built-in software (SW) probes and NETSCOUTs vSTREAM.

Ericssons SW probe is a built-in virtual network probe solution for cloud native architecture thats specifically designed to enable the monitoring and troubleshooting of cloud native functions (CNFs) and provide data streams for analytics. It provides two data sources: virtual tapping (virtual terminal access points vTap) and event reporting. The vTAP makes packets available to third-party instrumentation like NETSCOUTs vSTREAM, which turns the packet data into smart data extensible to service assurance, analytics and cybersecurity providing actionable intelligence for operations and engineering. The event reporting provides metadata content on signaling procedures ready to be used for monitoring and troubleshooting purposes.

This groundbreaking solution gives Swisscom better visibility into their cloud network, and the ability to capture network packets from inside a network at strategic points.Continuous monitoring and deep analysis of networks are essential for guaranteeing network and subscriber assurance, troubleshooting and security monitoring.In turn, this will help Swisscom secure 5G customer experience, significantly reduce total cost of ownership (TCO), secure sensitive data, and deliver new and existing 5G mission-critical services within the cloud, including automatic access to packet data and RAW data in clear.

Michael Berger,Director of SRE & Tooling, Swisscom, says:To improve the user experience and offer new and enhanced services, we needed a network that offers faster and more reliable access. As part of our 5G journey, we chose to work with best-of-breed partners to future-proof our architecture, simplify our operations, and improve our ability to innovate.We have worked closely with our partnersEricssonand NETSCOUT to drive this solution forward. Swisscom is thus ensuring the quality of the network for Switzerland, which will optimise the network and, consequently, the performance of services.

Martin Brki, Managing Director Switzerland,Ericsson, says: Swisscom,Ericsson, and NETSCOUT have addressed the industry challenge of providing end-through-end visibility in 5G networks handling cloudification and encryption. With this visibility, Swisscom can now assure the delivery of new and existing innovative mission-critical services with 5G.

Here is the original post:
Swisscom, NETSCOUT and Ericsson enabling 5G packet data processing in the cloud - Ericsson

Data breaches. The term itself can ring alarm bells in most organizations, and for good reason. A data breach usually means thousands spent on remedial measures, millions in regulatory fines and the invaluable loss of customers' trust and confidence. (Also read: Massive Data Breaches: The Truth You Might Not Know About.)

There have been numerous data breaches in modern times, forcing other organizations to undertake adequate data privacy and protection measures.

Here are the top 10 such breaches, and how to keep your organization from landing on a list like this:

There's really no other way to start a list of the biggest data breaches ever than with the 2013 Yahoo breach, which affected almost three billion users.

The breach's impact was a rapid $350 million reduction in Yahoo's market value -- while they were in the middle of a Verizon acquisition. The cyberattack's perpetrators were never identified, but Yahoo issued a statement asserting it believed "state-sponsored actors" may have been responsible.

Almost all Yahoo users' real names, email addresses, dates of birth, telephone numbers, authentication questions and other sensitive information was leaked in what is still considered the biggest data breach of all time.

Nearly a billion records were compromised when the First American Financial Corporation faced a data breach that led to bank account numbers, mortgage and tax records, social security numbers, wire transfer receipts and bond transaction receipts being compromised.

What sets this breach apart from the rest on this list is that it wasn't a breach in the traditional sense of the word. Rather than hackers breaking into the databases, the First American Financial Corporation failed to implement a secure authentication protocol which meant no one had to prove their identity to view the aforementioned documents. Once they accessed the documents, hackers used Advanced Persistent Bots (APBs) to collect, catalog and copy all data they had access to.

This glaring error went unnoticed for years. The New York State Department Financial Services (NYDFS) claimed the First American Financial Corporation did very little to ensure it had appropriate security measures to protect its critical data.

Marriott is not a typical digital service provider, which sets it apart from some of the other names on this list. However, the international hotel chain suffered a breach in 2018 that affected more than 500 million users.

The affected users' contact information, passport numbers, travel history, credit card information, social security details and Starwood Preferred Guest numbers were among the sensitive data that was breached.

Marriott faced a PR catastrophe, as it was slapped with a $24 million fine in the UK, hundreds of class action lawsuits and calls for its senior management to resign.

Following an internal audit, Marriott's use of outdated encryption protocols to store and secure its databases was the primary cause of the breach. The audit concluded the breach was carried out using a Remote Access Trojan (RAT) and Mimikatz. (Also read: Encryption Just Isn't Enough: Critical Truths About Data Security.)

MySpace may not have been as popular as some of the other social networking sites in 2016, but it wasn't any less shocking when the company announced to its users that their old information may be available for sale online -- or, more accurately, that it had been up for sale online for at least three months.

Time Inc., which acquired MySpace, reported a data breach had left 360 million accounts compromised, with their usernames and passwords available to be used to access users' information on other sites. The hackers behind the data breach were thought to be responsible for similar data breaches at Tumblr and LinkedIn.

When Adult FriendFinder suffered a data breach, there was absolute pandemonium all around. This was owed to the nature of the data breach, with information about users' casual hookups and other adult content being made public.

More than 400 users' the names, email addresses, passwords, pictures and other personal details were leaked online and freely available on leaksource.com. The databases compromised had 20 years' worth of information, with the users' credentials also available online. The site's use of SHA-1 hashing algorithm -- a fragile protocol by modern standards -- was the primary reason the database was so easily breached.

How a company the size of Twitter managed to commit such a gaffe will forever remain a mystery. In May 2018, the company sent an email to its 330 million users urging them to change their passwords, since some of them passwords had been stored on its internal computer system in readable text format.

Twitter reassured its users that the glitch had been identified before any data breach, so none of their information had been compromised. However, a 2010 Federal Trade Commission inquiry revealed that there had been at least two data breaches at Twitter where users' private data had been compromised due to lapses in Twitter's security protocols. (Also read: Uncovering Security Breaches.)

Compared to some others on this list, the Equifax data breach is fairly mild. However, the fact that the organization had to spend upwards of $700 million in remedial measures to help affected users made it a cautionary tale for other organizations.

Approximately 150 million users had their social security numbers, dates of birth, home addresses, driver's license numbers and credit card information stolen. The people responsible for the breach were never identified, even after lengthy congressional inquiries.

The inquiries did discover, however, that a vulnerability within the Equifax website had been exploited for months by those responsible for the breach. Other inadequate measures, such as the lack of database system segmentation, made the attacks even easier to carry out.

Facebook was already facing a public relations nightmare in 2019 over its less-than-adequate data protection practices when news of the 2019 breach broke. It was, and remains, the most significant breach in the company's history, affecting up to 540 million users globally. The perpetrators were never identified or caught, but it did reveal just how vulnerable Facebook's databases were.

How did it happen? Facebook had failed to adequately protect its global databases with the appropriate levels of encryption, and these databases were easily searchable online as a result. Users' phone numbers, genders and geolocation in the United Kingdom, United States and Vietnam databases were particularly vulnerable. This is precisely why it proved impossible to identify the perpetrators, since the databases were literally available via a simple Google search with no appropriate security measures to protect them.

The eBay breach came a few months after the Yahoo breach, with similar cases of compromised user data. While the 145 affected users (by some estimates) comes nowhere near Yahoo's numbers, the impact was not any less severe. Internal investigations revealed three of eBay's employees had been socially engineered, and their compromised credentials were used to gain access to the main eBay database. (Also read: Insider Threat Awareness: Avoiding Internal Security Breaches.)

The company informed all affected users and advised them to change their passwords, since attackers had accessed encrypted passwords as well. This led to New York's Attorney General calling on eBay to provide free credit monitoring services to users, which the company refused, citing a lack of financial fraud.

One of the most recent major data breaches, what makes the SolarWinds data breach so notorious is that there still isn't a reliable number of how many records may have been compromised. However, more than 18,000 organizations and government agencies globally are said to have been affected. The United States Attorney General at the time stated that the attack may have been Russian-backed.

The attackers got insider access to SolarWinds update packages and placed malware into the next scheduled update. These updates contained the necessary e-signatures, so whichever networks accepted the updates were compromised. The hidden malware spread throughout the entire SolarWinds supply chain, with at least 50 United States government agencies facing a "grave impact" since the attackers gained a foothold within their networks.

The aforementioned list should be reason enough for most organizations to consider a robust data protection and governance framework that can minimize the chance of a data breach occurring.

Here are five some steps most organizations can undertake to do so:

By far, the most fundamental measure an organization can take to minimize the risk of a data breach is to limit the number of people who have access to the data in the first place -- which is known as access governance. Theres no shortage of effective solutions that can help organizations address this issue.

For example, Securitis access intelligence via its Unified Data Controls allows organizations to identify which employees need access to what data and grant it to them on a strictly "needs-based" basis while also keeping detailed records to help with future assessments if necessary.

This may seem rather obvious, but many organizations make the mistake of not appropriately training their employees about just how easily hackers may gain access to the company's databases by exploiting careless employee behavior online.

Regular workshops and training can educate your team on best practices to ensure they follow adequate security protocols online. This could also include anti-phishing training on adequately securing their footprint online via cybersecurity tools such as anti-virus software, VPNs or proxies like IPRoyal and Avast. (Also read: VPNs vs Proxies: What's Best for Business.)

Yet another example of a relatively minor mistake that can lead to significant damage: Far too often, hackers exploit glitches in the software.

If an organization does not update its software regularly, the glitch will likely be present for that entire duration and can be exploited more easily.

Often, organizations are too rattled and disorganized if they do find themselves victims of a data breach. It's worth mentioning that, if proper measures are taken in the immediate aftermath of a data breach, the impact of the breach can be drastically reduced.

You should have protocols in place that can give real-time insights into exactly what data was compromised, how the damage can be limited and the remedial measures most necessary.

Last, but probably the most important, is to know precisely how to leverage encryption to your benefit. Organizations that have an old-fashioned approach to encryption fail to maximize the security encryption has to offer.

With lattice-based encryption and quantum computing now gathering steam, organizations can afford to ensure the best possible protection for all their data. Doing so guarantees that, if all else fails, your data is so well-protected that hackers gain nothing by breaking into the company's internal database.

Data breaches can happen to anyone -- even the largest, most well-established organizations. And often, they're the result of simple, easily solvable data management mistakes. By implementing proper data breach prevention practices beforehand, you can drastically reduce the likelihood of your organization suffering a data breach and recover more efficiently in the worst-case scenario. (Also read: What Is an Air Gap Backup and Why Do You Need One?)

Read the original:
10 Biggest Data Breaches Ever - And How to Prevent Them - Techopedia

WASHINGTON, Oct. 06, 2022 (GLOBE NEWSWIRE) -- Virtru, a global leader in data protection, has been selected as the winner of the Overall Encryption Solution of the Year'' award in the 2022 CyberSecurity Breakthrough Awards. The CyberSecurity Breakthrough Awards aim to perform the most comprehensive evaluation of cybersecurity companies and solutions on the market today.

Virtrus end-to-end encryption solutions span across Google Workspace, Google Cloud, Microsoft 365, and data flowing through SaaS apps like Salesforce and Zendesk. Virtrus easy-to-use data protection enables secure, compliant information sharing to unlock digital workflows and protect organizations most sensitive data at all times, even after it leaves their network. Virtru encryption holistically protects data of all kinds, wherever its stored and shared, with granular access controls, self-hosted key management options, data loss prevention, audit, and more.

The Virtru team is thrilled to be recognized for our versatile encryption solutions that help businesses work smarter and faster every day, said Virtru CEO John Ackerly. "Our end-to-end encryption technology safeguards essential data for more than 7,000 global organizations. By securing that vital data, we equip our customers to securely collaborate, innovate, and grow.

Judges for the CyberSecurity Breakthrough Awards are senior-level, experienced cybersecurity professionals, including journalists, analysts, and technology executives. Judges evaluated entrants based on product innovation, performance, ease of use and manageability, functionality, value, and impact.

About VirtruAt Virtru, we empower organizations to easily unlock the power of data while maintaining control everywhere its stored and shared. More than 7,000 global customers trust Virtru to power their Zero Trust strategies and safeguard their most sensitive data in accordance with the worlds strictest security standards. Creators of TDF (Trusted Data Format), the open industry standard for persistent data protection, Virtru provides encryption technology for data shared through email, collaboration tools, cloud environments, and enterprise SaaS applications. For more information, visit https://www.virtru.com or follow us on Twitter at @virtruprivacy.

Contact

Phil TortoraREQ on behalf of Virtruptortora@req.co

A photo accompanying this announcement is available at https://www.globenewswire.com/NewsRoom/AttachmentNg/28da3ffd-2b2f-4a28-a9e3-3c2a2d4e12a5

Go here to read the rest:
Virtru Named 'Best Overall Encryption Solution' in the 2022 - GlobeNewswire

Unhackable communications devices, high-precision GPS and high-resolution medical imaging all have something in common. These technologies some under development and some already on the market all rely on the non-intuitive quantum phenomenon of entanglement.

Two quantum particles, like pairs of atoms or photons, can become entangled. That means a property of one particle is linked to a property of the other, and a change to one particle instantly affects the other particle, regardless of how far apart they are. This correlation is a key resource in quantum information technologies.

For the most part, quantum entanglement is still a subject of physics research, but its also a component of commercially available technologies, and it plays a starring role in the emerging quantum information processing industry.

The 2022 Nobel Prize in Physics recognized the profound legacy of Alain Aspect of France, John F. Clauser of the U.S. and Austrian Anton Zeilingers experimental work with quantum entanglement, which has personally touched me since the start of my graduate school career as a physicist. Anton Zeilinger was a mentor of my Ph.D. mentor, Paul Kwiat, which heavily influenced my dissertation on experimentally understanding decoherence in photonic entanglement.

Decoherence occurs when the environment interacts with a quantum object in this case a photon to knock it out of the quantum state of superposition. In superposition, a quantum object is isolated from the environment and exists in a strange blend of two opposite states at the same time, like a coin toss landing as both heads and tails. Superposition is necessary for two or more quantum objects to become entangled.

Quantum entanglement is a critical element of quantum information processing, and photonic entanglement of the type pioneered by the Nobel laureates is crucial for transmitting quantum information. Quantum entanglement can be used to build large-scale quantum communications networks.

Story continues

On a path toward long-distance quantum networks, Jian-Wei Pan, one of Zeilingers former students, and colleagues demonstrated entanglement distribution to two locations separated by 764 miles (1,203 km) on Earth via satellite transmission. However, direct transmission rates of quantum information are limited due to loss, meaning too many photons get absorbed by matter in transit so not enough reach the destination.

Entanglement is critical for solving this roadblock, through the nascent technology of quantum repeaters. An important milestone for early quantum repeaters, called entanglement swapping, was demonstrated by Zeilinger and colleagues in 1998. Entanglement swapping links one each of two pairs of entangled photons, thereby entangling the two initially independent photons, which can be far apart from each other.

Perhaps the most well known quantum communications application is Quantum Key Distribution (QKD), which allows someone to securely distribute encryption keys. If those keys are stored properly, they will be secure, even from future powerful, code-breaking quantum computers.

View post:
Nobel-winning quantum weirdness undergirds an emerging high-tech industry, promising better ways of encrypting communications and imaging your body -...