Cloud Hosting

Istanbul With cloud and software-as-a-service (SaaS) adoption continuing to accelerate across the Middle East, Trkiye, and Africa (META), annual spending on cybersecurity solutions in the region is set to grow at a CAGR of 9.3% over the coming years to cross the $6 billion mark in 2026. That's according to the latest forecast from International Data Corporation (IDC) as it prepares to host the Trkiye edition of its IDC Security Roadshow 2023 in Istanbul on Wednesday, March 22.

IDC's research shows that 70% of organizations across the META region are planning to invest in automated incident response over the course of 2023. Network security (56%), complete asset visibility (55%), and cloud security (52%) are set to be other major priorities as organizations work diligently to meet the challenges that come with massive technological leaps and the adoption of a digital-first approach to business.

"Over the coming few years, the pace of digital acceleration is expected to gain even more momentum, adding ever-greater layers of complexity to the threat landscape," says Nevin izmecioullar, IDC's associate vice president and country director for Trkiye. "Today, IT security professionals face numerous challenges such as the need to protect an increasingly distributed workforce, an internet that is faster than ever before, interconnectivity that is increasing in complexity, stricter government regulations, and customers looking for immersive experiences and greater security for their data.

"In an increasingly digital economy, the digital trust concept becomes paramount, and it is critical for business leaders, technology suppliers, organizations, and consumers to all understand the fundamental importance of risk, compliance, privacy, and business ethics. Traditional approaches to security, risk, and compliance are no longer enough, with issues such as data security, confidentiality, integrity, and availability all becoming key concerns."

Taking place at the Wyndham Grand Istanbul Levant, the Trkiye edition of the IDC Security Roadshow 2023 will bring together the country's foremost cybersecurity experts to showcase the very latest security innovations. The event will cover everything from threat intelligence, risk management, and digital resilience to the privacy and security implications of an increasingly remote and hybrid workplace, while also serving up essential guidance on building digital trust, automating security operations, and addressing the evolving nature of modern security challenges.

IDC's research manager for Trkiye, Yeim ztrk, will present the event's keynote, during which she will offer advice on how best to prepare for a new era of cyberthreats. "In Trkiye, companies continue to focus on data protection, data privacy, and regulatory compliance," says ztrk. "The relationship between data-driven insights and trust is critical, and companies looking to implement effective trust initiatives must aim to strengthen their overarching trust structures."

The agenda will also incorporate a series of fascinating end-user panel discussions, featuring first-hand insights from respected industry thought leaders such as:

Mahmut Kk, Cyber Security Director, Trk Telekom

Kenan Ylma, Information Security Group Coordinator, SOCAR Trkiye

Tark stner, Head of Global Information Security, Getir

Suzan Pekta Acar, Senior Security Risk Manager, Fibabanka

Nihan Namolu, Chief Information Security Officer, AgeSA Emeklilik ve Hayat

Mehmet Karadeniz, Network & Cyber Security Manager, CK Enerji

Emin slam Tatl, Cyber Security Director, Turkcell

Murathan Gemiciolu, Global Information Security Manager, Hayat Holding

Okan Erin, Information Security Director, Pazarama

Hakan Kanta, IT Director, Halkbank

smail zler, Director of Risk, Security & Compliance, Paynet

IDC would like to thank the following partners for their ongoing contribution to the 2023 edition of the IDC Security Roadshow in Trkiye: Platinum Partners: CrowdStrike, Fortinet, Check Point, KoSistem, Vodafone Business, Brandefense, Kaspersky; Gold Partners: Forcepoint, SentinelOne, Palo Alto Networks, vMind & IndeedID, Platin Biliim, Deepinfo, Mandiant & Google Cloud, Exclusive Networks, Barikat, Infosec, BGA; Silver Partners: Randori, Delinea, OpenText Cybersecurity, CyberArk, ImmuniWeb, Tenable & E-data, Cyberwise, Vectra, Demsistem & Keysight, Gatewatcher, Sonatype, Soitron & Proofpoint, Redington & Trend Micro; Networking Partner: Akamai.

To learn more the IDC Security Roadshow 2023, please click here or contact Sheila Manek at smanek@idc.com / +971 4 446 3154. You can also join the conversation on social media using the hashtag #IDCITSECURITY

About IDC

International Data Corporation (IDC) is the premier global provider of market intelligence, advisory services, and events for the information technology, telecommunications, and consumer technology markets. With more than 1,300 analysts worldwide, IDC offers global, regional, and local expertise on technology, IT benchmarking and sourcing, and industry opportunities and trends in over 110 countries. IDC's analysis and insight helps IT professionals, business executives, and the investment community to make fact-based technology decisions and to achieve their key business objectives. Founded in 1964, IDC is a wholly owned subsidiary of International Data Group (IDG), the world's leading tech media, data, and marketing services company. To learn more about IDC, please visit http://www.idc.com. Follow IDC on Twitter at @IDC and LinkedIn. Subscribe to the IDC Blog for industry news and insights.

IDC in the Middle East, Turkey, and Africa

For the Middle East, Turkey, and Africa region, IDC retains a coordinated network of offices in Riyadh, Nairobi, Lagos, Johannesburg, Cairo, and Istanbul, with a regional center in Dubai. Our coverage couples local insights with international perspectives to provide a comprehensive understanding of markets in these dynamic regions. Our market intelligence services are unparalleled in depth, consistency, scope, and accuracy. IDC Middle East, Africa, and Turkey currently fields over 130 analysts, consultants, and conference associates across the region. To learn more about IDC MEA, please visit http://www.idc.com/mea. You can follow IDC MEA on Twitter at @IDCMEA.

"); tb_show("Share the image", "#TB_inline?height=200&width=600&inlineId=embedDialog", null); } function calculateContainerHeight(attachmentId) { var img = $("img[src*=" + attachmentId + "]"); if (img === undefined) { return 600; } else { img = img[0]; } var iframeHeight; if (img.naturalWidth

Excerpt from:
IDC to Explore a New Era of Cyberthreats as It Hosts Security ... - IDC

The Windows Media Creation Tool is a user-friendly way to upgrade your Windows version from Windows 10 to Windows 11 or even upgrade older Windows versions. But the tool is known to suffer from the error code 0x80072F8F 0x20000, which leaves users scratching their heads over the cause of the problem. This guide sheds light on what could be behind this error and how you can fix it.

Tip: is the System Cooling Policy missing from your Windows computer? Learn what to do about it.

The 0x80072F8F 0x20000 error code is a fairly frequent occurrence when using the Windows Media Creation Tool, with the following prompt appearing on the screen: Were not sure what happened, but were unable to run this tool on your PC. If you continue experiencing problems, reference the error code when contacting customer support. Error code: 0x80072F8F 0x20000.

There can be various reasons for your system not being able to run the tool properly. These are:

Before implementing the fixes described below, make sure that your system meets the minimum requirements to upgrade to the next version. Additionally, your Internet connection needs to be stable, and you should run the Media Creation Tool as an administrator.

Transport Layer Security or TLS 1.1 and 1.2 are internet security protocols that ensure data is encrypted when transferred over networks. TLS was created as an upgrade to Secure Socket Layer (SSL) protocols but was later developed as a separate protocol. TLS 1.2 is the latest TLS version, but both TLS 1.2 and TLS 1.1 need to be enabled to make the Media Creation Tool work as intended.

Follow the steps below to ensure TLS 1.1 and TLS 1.2 are enabled in the registry:

Good to know: did the latest Windows update break some functionality on your PC? We can show you how to fix it.

Sometimes outdated Windows installations can be the reason youre experiencing issues with the Media Creation Tool. Another Windows update-related issue could be that important services are not running properly. Follow the steps below to resolve each of the these issues:

If the previous fixes didnt work, you can try eliminating any programs that are in conflict with the Media Creation Tool. For this, youll need to perform a clean boot to disable all non-necessary services, then run the Media Creation Tool again. Follow the steps below to do so:

Tip: learn how to add portable apps to your Windows startup for greater convenience.

The SoftwareDistribution folder is where Windows stores temporary Windows Update files. By emptying the folder and forcing Windows to update, you can sometimes fix issues that the system is having while accessing Windows Update files.

Another fix you can try is modifying the Auto Update folder in the registry by adding an entry that allows you to upgrade your Windows version. This fix has been known to resolve the 0x80072F8F 0x20000 error for many users. Follow the steps below to do so:

Good to know: fiddling with your registry often? It may be a good idea to learn how to back up your registry.

Yes, there are multiple other ways to upgrade to Windows 11 if youre having issues with the Media Creation Tool or dont prefer using it for some reason. You can download the Windows 11 Installation Assistant or the Windows 11 ISO from the Windows 11 download page. While the former can be run like an application in the Windows 10 environment, the latter can be used to create a bootable disc or mounted within the Windows 10 environment.

If youve tried several fixes with no success, you can reset your corrupted Windows 11 or 10 installation to get rid of persistent errors and issues. Our guide linked above will help you reset or reinstall Windows without losing your important data. You can choose to do a soft reset and keep your files while fixing most of the common issues. If a reset doesnt work, you can choose to reinstall Windows to resolve the most deep-rooted OS issues.

Windows 11 requires users to have TPM 2.0, a hardware-based security chip that protects the security and privacy of your data. Many users arent able to upgrade to Windows 11 due to this limitation and may be faced with errors because of it. Check whether your system has TPM 2.0 and enable it. Alternatively, bypass the TPM 2.0 requirement on Windows 11 entirely without compromising your system.

Image credit: Unsplash. All screenshots by Tanveer Singh.

Tanveer hunts far and wide for PC Hardware and Gaming ideas to write about. An MBA in Marketing, he has been writing on Technology, Gaming, and Marketing for over 5 years now. When not scouring the web, he can be found trying to identify the next big Altcoin, running for his life in GTFO, or wrecking karts in Smash Karts.

Subscribe to our newsletter!

Our latest tutorials delivered straight to your inbox

Read this article:
How to Fix the Windows Media Creation Tool Error Code ... - Make Tech Easier

Three years ago, during the global pandemic, businesses worldwide shifted their focus to delivering services digitally, supported by remote workforces and virtual environments. Many of these businesses hastily spun up cloud infrastructures to bolster critical aspects of their operations.

Threat actors saw an opportunity during this time and data breaches and cyberattacks targeting the cloud rose alongside cloud adoption. Now, leaders are shifting their focus again: This time to implement better strategies to secure the cloud infrastructures that carried them through the pandemic.

With so many myths and misconceptions surrounding cloud security, it is essential for business leaders to separate fact from fiction regarding how to secure the cloud. In this post, we debunk the top five myths about cloud computing security to help CISOs, CIOs, and other business leaders make informed decisions for their organization.

If one were to believe the stories and opinions circulating around many technical, business, and security-focused media, it might seem that the cloud is inherently insecure. These stories tend to zero in on one aspect of cloud computing: that because it is accessible from anywhere in the world with an internet connection, it is vulnerable to cyberattacks and data breaches.

It is impossible to guarantee complete security against cyber threats. Even with advanced security measures in place, such as encryption and firewalls, there is always a possibility that an attacker can bypass these defenses and gain unauthorized access to sensitive data.

While it is true that clouds can be vulnerable to cyberattacks, it is the responsibility of Cloud Service Providers (CSPs) to ensure that the underlying machines are consistently updated and hardened against possible threats. In addition, CSPs offer various built-in security features to simplify cloud security management, such as S3 Block Public Access. By leveraging such features, DevOps engineers can effectively mitigate risks and secure their cloud infrastructure.

In fact, CSPs invest heavily in security measures to protect their customers data. These measures include encryption, firewalls, and multi-factor authentication (MFA), among other tools. As a result, CSPs often employ more advanced security measures than the average organization. They have dedicated security teams whose sole focus is to detect and respond to security threats and continuously improve their security posture. These security teams have access to the latest threat intelligence and are constantly monitoring their clouds for potential security breaches.

One of the most persistent myths surrounding CSPs themselves is that they have unrestricted access to customer data. This myth has been fueled by examples of high-profile data breaches and incidents of unauthorized access, which have raised concerns about customer privacy and security in the cloud industry.

Though providers do need access to customer infrastructure to provide adequate services, they are bound by strict and extensive data privacy laws to ensure the confidentiality and security of that data. Cloud providers also proactively combat and mitigate risks by investing heavily in security measures and specialized teams to monitor and manage data security.

Despite the security measures, it is worth keeping in mind that customers have little control over their data once it is in the cloud, and although general malfeasance is unlikely given the obligations and regulations providers must adhere to, businesses should be aware that providers may be subject to government surveillance or other legal demands for customer data, which can compromise customer privacy and security.

The myth that cloud computing is too expensive is often perpetuated by those who focus solely on the initial costs of implementation.

Focusing on this initial, one-time cost, however, overlooks the long-term savings and benefits that cloud computing provides. By outsourcing infrastructure maintenance to cloud providers, companies can save money on hardware, software, and staffing.

CSPs also offer scalable infrastructure that can be easily adjusted to meet changing business needs, eliminating the need for companies to maintain large, unused infrastructure. Flexible pricing models allow companies to pay only for the services they use, resulting in significant cost savings.

When organizations partner with CSPs, they can rely on their expertise and resources to get top-notch security, disaster recovery, and backup services. These services are usually difficult and expensive for many organizations to evaluate, manage, and maintain on their own.

The reality of understanding and using technology like cloud computing is that there is a learning curve for small businesses. The misconception, though, is that cloud is only for big businesses. Cloud computing is frequently lauded for its elasticity and has become an important technology for businesses of all sizes. It offers numerous benefits, such as scalability and cost-effectiveness.

While it may be true that some small businesses with limited budgets can struggle to justify the ongoing costs of cloud services, most reliable CSPs now offer affordable pricing plans that can be scaled up or down as needed.

It is also important for small businesses to evaluate what exactly they are looking to gain from cloud computing. The cloud offers a wide variety of services, ranging from basic file storage to big data analysis, data security, testing and development, and more. The cloud also provides small businesses with data security and disaster recovery options previously only available to large companies. In short, small businesses can leverage the cloud to compete with larger enterprises on a level playing field.

Leveraging all cutting edge technologies may be too expensive for small businesses, but they can still use the cloud to access enterprise-level technology without investing heavily in hardware and infrastructure. They can leverage cloud-based software and applications to manage business operations such as accounting, inventory, and customer relationship management.

Despite its rapid adoption across all industry verticals in recent years, there is still a persistent myth that cloud computing is not compliant with industry regulations and standards. This misconception has led many businesses to avoid adopting cloud technology, fearing that it could put them at risk of non-compliance.

The truth is that cloud computing can actually enhance compliance to regulations and standards by providing robust security measures and data protection. CSPs have invested heavily in ensuring their systems comply with various regulations and standards, such as HIPAA and GDPR, to provide their clients with peace of mind.

Cloud technology enables businesses to easily track and monitor compliance with regulatory requirements by offering real-time visibility into data management and access. This feature allows businesses to easily identify and address any non-compliance issues, thus reducing the risk of penalties or legal consequences.

As organizations continue to adopt cloud technologies, they will need to implement the right security solution to defend against cloud-based risks and help protect the greater cloud surface and all data and assets connected to it.

Many organizations place their trust in SentinelOnes Singularity Cloud to ensure they can continue growing their business safely in the cloud. Singularity Cloud works by distributing autonomous endpoint protection across all environments, including public, private, and hybrid clouds to detect complex threats at the virtual machine (VM) level and Kubernetes pod level with no need for human detection. It also provides runtime protection of containerized workloads and kills unauthorized processes in real-time.

SentinelOne helps organizations improve their cloud security strategy without the risk of compromising agility or availability. Learn more about Singularity Cloud by booking a demo or contacting us today.

It is crucial for organizational leaders tasked with securing the cloud to understand the myths and misconceptions surrounding cloud computing security. Those who can separate fact from fiction are set up to gain far more from cloud computing and use it to accelerate their business and support their customers in a safe and sustainable way.

Now that digital transformation has become a keystone to staying competitive, cloud computing provides the foundation for this evolution and enables businesses to deliver a higher level of customer value in their industries. By demystifying the common misunderstandings surrounding cloud security, businesses make informed strategies and move towards an effective transformation effort.

Singularity Cloud

Simplifying security of cloud VMs and containers, no matter their location, for maximum agility, security, and compliance.

Link:
Demystifying the Top 5 Myths About Cloud Computing Security - SentinelOne

With mounting geopolitical tensions in Europe, Andy Norton, European cyber risk officer at Armis, uses data from the State of Cyberwarfare and Trends Report 2022-2023 to discuss the scope of the cybersecurity implications and how organizations can prevent attacks.

Over one year has passed since Russia announced the start of a special military operation on Ukrainian territory. Amid geopolitical tensions, economic problems, and social debates, major repercussions have arisen both in the Old Continent and in the rest of the world. Amidst this complex backdrop, another battle has also stealthily emerged: cyber warfare.

In fact, during the period from September to November 2022 alone, a 15% increase in suspicious activity by threat actorsOpens a new window was detected on the Armis Asset Intelligence and Security platform. The noteworthy uptick in threat activity fuelled by criminal groups such as Conti, Killnet, Energetic Bear and more is a clear indication that organizations need to take the threat of cyber warfare seriously.

Without a doubt, the risk is real and has been a catalyst to conversations about cybersecurity and potential risks from cyberwarfare in high places and entities. During the World Economic Forum in Davos, the Global Cybersecurity Outlook 2023Opens a new window report was released indicating that nearly half (45%) of business decision-makers and an almost equal number of cybersecurity executives (46%) believe that a catastrophic cyber event is very likely to occur in the next two years.

Though it might not make for optimistic reading, these results follow a similar pattern to those of the Armis State of Cyberwarfare and Trends Report: 2022-2023Opens a new window , which showed 57% of UK organizations have stopped or stalled digital transformation projects due to the threat of cyberwarfare. Perhaps this fear is justified since, as a result of the conflict on the continent, there has been a significant upturn in cyberattacks in the region, with 42% of companies claiming to have had to report an incident of cyberwarfare to authorities. These seem to affect public administration and healthcare institutions in particular.

Furthermore, Gartner analysts predict that by 2025, cyberattackers will have weaponized operational technology (OT) environments with the capability to harm or kill people. And while this may seem extreme to us, there is a perceived evolution from reconnaissance and espionage to the kinetic use of cyber warfare tools, which, while not yet deployed with lethal intent, have been detected.

The possibility that a national or even global cyber blackout could have a catastrophic impact on individual economies or the global economy has been hotly debated by experts since the Wannacry incident in 2017 and concern continues to rise due to the potential of these attacks as a strategic means in the context of cyber warfare. Indeed the ransomware attacks suffered by the NHS late last year and the attack that, up until recently, plagued the Royal Mail Postal Services rest of world services for months.

The effects of these attacks on critical services are still being felt, with the already stressed NHS struggling to catch up on missed appointments and rescheduling due to weeks of system downtime. Royal Mail, until recently, could not process any items to ship overseas and may feel the effects of the attack for some time to come, as the LockBit gang responsible has continued to leak documents containing employee personal information on the Dark Web.

From this data and other information, it can be concluded that the risk of companies falling victim to a cyberattack triggered in the course of a cyber war is increasing. Despite this, there are still many organizations worldwide one-third of the total, according to the study that do not take the threat of cyber warfare seriously.

In recent years, there have been an increasing number of attacks against business entities of all kinds, regardless of their size or the sector in which they operate. Numerous attacks on authorities or even companies by geopolitically motivated hacktivists show how the behaviors of cybercriminals are constantly evolving and that they are finding various ways to circumvent traditional detection and response systems.

In tandem with the increased threat activity of cybergangs, the attack surface is expanding since the incorporation of numerous connected devices into the environments of practically every industry sector. This digital transformation combined with the pandemic and the teleworking model has meant the deployment of all kinds of assets in enterprise networks, both managed laptops, smartphones, smartwatches, etc. and unmanaged Industrial Internet of Things (IIoT) devices, operational technology (OT), etc. Unfortunately, every connected asset is also a potential entry point into the enterprise network.

This increased attack surface requires the implementation of an effective cybersecurity strategy to protect the infrastructure and investments to drive these implementations.

See more: How to Ensure Security for IoT Edge Device Processors

Depending on the type of organization, enterprises should be mapping cybersecurity programs to a cybersecurity framework (CSF), such as NIS, Cyber Essentials, ISO 27001 and more. Whichever is chosen, a key element to compliance is to be able to prove the organization has an adequate risk analysis. This risk analysis should be based on an understanding of all the critical assets that comprise the essential function of the business.

For most organizations, this can be problematic, as an up-to-date and accurate asset register is either non-existent, out of date, maintained manually or partially at best. Having real-time visibility over these assets and their associated risks is therefore an essential first step to any security program, as it vastly reduces the number of entry points attackers can exploit to gain a foothold in an organization.

More than a year after the outbreak of war in the Ukraine, and in the midst of a growing number of threats, it is essential that companies not only invest in cybersecurity solutions, but also take steps to make cybersecurity a priority in their day-to-day work, spend time training their employees in this area and maintain an attitude of constant vigilance in the face of threats.

Using a CSF and industry-specific regulations to help guide this process ensures that cybersecurity programs can not only be validated by recognized best practices, but also inform business leaders on what measures are appropriate and proportionate when it comes to their risk appetites. This will be the most effective way to prepare, ensuring critical services dont become pawns in escalating instances of cyber warfare.

How are you strengthening your security posture to prepare for the cyber war we are amidst? Share with us on FacebookOpens a new window , TwitterOpens a new window , and LinkedInOpens a new window .

Image Source: Shutterstock

Link:
Cyber War: A Stealthy Contest - Spiceworks News and Insights