More stories

  • in

    Own an iPhone, Android, laptop or desktop system? You need this $29 security key

    Need a security key to protect your online accounts? Need a security key that will work on iphone, Android, or pretty much any modern laptop or desktop system running Windows, macOS, or Google Chrome?Don’t want to spend any more than $30?You need the Yubikey Security Key C NFC.And there’s a lot to like about the Yubikey Security Key C NFC.

    Works out of the boxSupports both FIDO U2F and FIDO2/WebAuthn authentication protocolsCompatible with hundreds of popular websites and applications, including Gmail, YouTube, Dropbox, Twitter, Coinbase, Microsoft accounts (such as Office 365, Xbox live, etc.), and much more, as well as a huge range of password managersBuilt-in NFC supportTamper resistant, water resistant, and crush resistantSmall and highly portable

    Don’t feel left out! Yubico has a USB-A form-factor key that you can buy for $25. All the other benefits of the Security Key C NFC (including NFC!), just a different connector. More

  • in

    Deal alert: Get 3 years of Atlas VPN for just $1.39 a month

    Your internet privacy is invaluable, but keeping it safe and protected can cost you as little as a cup of coffee. A VPN, or virtual private network, is essential to have. Whether you own an online business or casually browse the web, it keeps your activities and information anonymous and contained. With Black Friday looming, Atlas VPN, one of ZDNet’s picks for best cheap VPN services, is looking to get ahead of the storm with a month-long offer you won’t want to pass on.

    36 months + 3 months free, $1.39 a month

    atlasVPN

    From now until November 30, you can subscribe to Atlas VPN for just $1.39 a month. The catch? This is a three-year subscription and you’ll be paying the discounted total upfront ($50.04). Still, we think the offer is very reasonable and of great value — especially with the additional three months bundled in for free. Included with the three-year plan are all the standard Atlas VPN fix-ins, like app support on Windows and MacOS, access to over 700 servers worldwide — a fair number at this price point, and data leak protection, among others. It may also bring you some peace of mind knowing that Atlas VPN recently completed an independent security audit and offers a 30-day refund guarantee policy.

    ZDNet Recommends More

  • in

    Can network-as-a-service handle emerging business needs?

    special feature

    AI and the Future of Business

    Machine learning, task automation and robotics are already widely used in business. These and other AI technologies are about to multiply, and we look at how organizations can best take advantage of them.

    Read More

    The chief reason IT teams would move to a network-as-a-service (NaaS) model would be to enable the latest networking technologies, according to a new survey from Cisco. The emerging networking consumption model promises to help organizations deploy technologies such as Wi-Fi 6, software-defined WAN (SD-WAN), secure access service edge (SASE), 5G, AI and more.At the same time, IT leaders and professionals are somewhat skeptical that NaaS with help them keep up with changing business demands, the Cisco report shows. While there’s still uncertainty and varying opinions on the value of NaaS, organizations are embracing it at a fast rate. NaaS adoption is expected to grow at a compound annual growth rate of 40.7% from 2021 through 2027. For that reason, Cisco focused its 2021 Global Networking Trends Report on NaaS adoption. The report is based on a survey of 20 IT leaders and 1,534 IT professionals in 13 countries.Network resiliency is top of mind for IT teams, the report shows: 45% say responding to disruptions is the top network challenge of 2021, while 40% cited accommodating new business needs.To some extent, NaaS is perceived as a way to accommodate new business needs: A plurality of respondents, 35%, said their top reason for embracing NaaS would be the requirement to continually deploy the latest networking technologies. 
    Cisco
    In line with their concerns about business resiliency, 30% cited the ability to defend against security threats, and 29% cited the need for greater network agility. However, when asked to name their main concerns with deploying a NaaS model, the top answer was whether it would offer the ability to support unexpected demands. As many as 30% of respondents questioned whether they will be able to meet future demands if they adopt NaaS.
    Cisco

    Meanwhile, 28% of respondents said the cost and disruption associated with changing their existing infrastructure and operations were concerns. Additionally, 26% cited losing control over security. When considering the services that come with NaaS, nearly half of respondents (48%) said it was most important for providers to deliver network lifecycle management. That was followed by network resiliency (42%), and monitoring and troubleshooting to meet SLAs (38%).

    Networking More

  • in

    Here's the world's first 5G Tri-band WiFi 6 mesh system

    Over the past few years, we’ve all come to realize just how important it is to have the best possible home Wi-Fi system. There’s nothing like signal drops of dead spots to bring the best Zoom of Teams meeting to a grinding halt.But what if your internet connection sucks? Well, if you’re living where there’s 5G coverage, this might be the solution that you need.Today sees Netgear unveil an industry-first — a 5G tri-band Wi-Fi 6 mesh system.The Netgear Orbi NBK752 mesh system combines 5G and mesh Wi-Fi into a single product that can blankets an entire home (up to 5,000 sq. ft.) in WiFi, no matter whether you live in a brick townhouse or a sprawling rural ranch.The tri-band WiFi is set up in a way to deliver a dedicated WiFi connection between the router and satellites, so that no matter how many devices are connected at the same time, you still get the best possible performance. The Netgear Orbi NBK752 works with most major mobile service providers, including T-Mobile and AT&T.Netgear Orbi NBK752, the first 5G Tri-band WiFi 6 mesh systemNetgear Orbi NBK752 highlights5G speeds in your home: 5G offers up to 10x the speed and capacity of 4G, with latency rates as low as 1ms.Next-generation WiFi: WiFi 6 allows multiple devices to connect simultaneously without impacting speed or reliability.Tri-band technology: Tri-band WiFi with a dedicated WiFi connection between the router and satellite delivers maximum speed and performance to all devices.Wireless network coverage: 5G is completely wireless, making it the perfect high-speed solution in areas that have access to strong mobile network coverage but lack a decent cable or DSL.Cellular network flexibility: The router accesses the LTE network in areas without 5G, so you can use it as a backup if your service fails. And when 5G does expand to your area, you’ll be ready to take advantage of it.Whole-home coverage: This mesh system includes a router plus a satellite unit, ensuring your home (up to 5,000 sq. ft) gets reliable WiFi coverage throughout. Need more coverage? You can purchase additional satellites to expand coverage.Easy setup and management: The Orbi App makes it easy to set up the router, manage your network remotely, pause the Internet on any device, track your Internet data usage, and more.”As the leader in the networking space, we continue to bring exciting new solutions to market that leverage state-of-the-art technology to meet the changing needs of our customers. And the Orbi 5G WiFi 6 Mesh System is no exception,” said David Henry, President & GM of Connected Home Products and Services at NETGEAR. “In a time when having reliable home WiFi is critical to not only work and learning, but to just about everything else we do, consumers can access the best Internet connection with this latest addition to our Orbi portfolio.”

    The system comes with a free 30-day trial of the NETGEAR Armor, a service designed to protect the connected home from online threats.The Netgear Orbi NBK752 5G WiFi 6 Mesh System is not cheap — the two-pack comes in at $1,099.99 — and is available for pre-order starting today. More

  • in

    Phishing attacks are harder to spot on your smartphone. That's why hackers are using them more

    There’s been a surge in mobile phishing attacks targeting the energy sector as cyber attackers attempt to break into networks used to provide services including electricity and gas. The energy industry is highly critical, providing people with vital services required for everyday use. That role makes it a prime target for cyber criminals.

    ZDNet Recommends

    That risk was demonstrated earlier this year when the Colonial Pipeline was hit with a ransomware attack, leading to the gasoline shortages across the Eastern United States. Colonial ended up paying cyber criminals almost $5m dollars for a decryption key to restore the network.SEE: A winning strategy for cybersecurity (ZDNet special report)    And it’s not just cyber criminals who have an interest in hacking into the networks of energy providers; they’re also a top target for nation state-backed hacking groups for whom breaching a network could be a path towards causing significant disruption.The desire to break into these networks has resulted in a sharp rise in phishing attacks against the energy sector, specifically cyberattacks targeting mobile devices, warns a report by cybersecurity researchers at Lookout.According to the paper, there’s been a 161% increase in mobile phishing attacks targeting the energy sector since the second half of last year. Attacks targeting energy organisations account for 17% of all mobile attacks globally – making it the most targeted sector, ahead of finance, government, pharmaceuticals, and manufacturing.

    “The energy industry is directly related to the wellbeing and safety of citizens, globally,” Stephen Banda, senior manager of security solutions at Lookout, told ZDNet.Remote working has increased considerably during the past 18 months. And while the rise in mobile working has allowed businesses to continue operating, the increase in the use of personal devices and remote working has also boosted security risks – according to Lookout, 41% of mobile devices in the energy industry aren’t managed by employers. That situation could put users at risk from cyberattacks including phishing and malware that could be used to help gain access to wider networks. The aim of the attackers is to steal usernames and passwords that could be used to gain access to cloud services and other parts of the network. SEE: Ransomware: It’s a ‘golden era’ for cyber criminals – and it could get worse before it gets betterTailoring phishing emails towards mobile devices can make them more difficult to spot because the smaller screen provides fewer opportunities to double check that links in messages are legitimate, while smartphones and tablets might not be secured as comprehensively as laptops and desktop PCs, providing attackers with a useful means of attempting to compromise networks.”Threat actors know that mobile devices aren’t usually secured in the same way as computers. For this reason, mobile phishing has become one of the primary ways threat actors get into corporate infrastructure,” said Banda.”By launching phishing attacks that mimic the context that the recipient expects, attackers are able to direct a user to a fake webpage that mimics a familiar application login page. Without thinking, the user provides credentials and data has been stolen,” he added.It’s likely that cyber criminals will continue to target mobile devices as organisations adopt hybrid-working practices – so researchers emphasise the importance of smartphones and tablets being part of the overall cybersecurity strategy, by ensuring that the operating systems they run on are up to date and that they’re using software to help protect against phishing, malware and other cyberattacks.”The majority of attacks start with phishing, and mobile presents a multitude of attack pathways. An anti-phishing solution must block any communication from known phishing sites on mobile devices — including SMS, apps, social platforms and email,” said Banda.MORE ON CYBERSECURITY More

  • in

    Toronto subways hit by ransomware as US lawmakers slam 'burdensome' cybersecurity rules

    Special feature

    Cyberwar and the Future of Cybersecurity

    Today’s security threats have expanded in scope and seriousness. There can now be millions — or even billions — of dollars at risk when information security isn’t handled properly.

    Read More

    The Toronto Transit Commission (TTC) — which runs the city’s public transportation system — reported a ransomware attack this weekend that forced conductors to use radio, crippled the organization’s email system and made schedule information on platforms and apps unavailable. In a statement on Friday, the TTC said it confirmed it was the victim of a ransomware attack after its IT staff “detected unusual network activity and began investigating.””Impact was minimal until midday Friday, October 29, when hackers broadened their strike on network servers. The incident did not cause significant service disruptions, and there is no risk to employee or customers safety,” the TTC said. Impacted services include the TTC’s Vision system, which is used for operators to communicate with Transit Control. Next vehicle information on platform screens, through trip-planning apps and on the TTC website, were unavailable and online wheel trans bookings were also unavailable. It is unclear which ransomware group attacked Toronto’s system on Friday.”The full extent of the attack is being looked into, and the TTC is working with law enforcement and cybersecurity experts on this matter. The City of Toronto’s IT services department has been consulted,” the TTC said in a statement. The Record noted that this is the third ransomware attack on a major Canadian city’s metro system in the last year. Montreal’s system was hit in October 2020, and Vancouver’s was attacked in December 2020.

    San Francisco, Sacramento, Fort Worth, Philadelphia and Ann Arbor have all seen ransomware attacks on their transportation systems over the last five years, and New York City’s MTA was hit with a cyberattack in April. A ransomware attack shut down ferry services in Cape Cod, Martha’s Vineyard and Nantucket in June.Despite the recent attacks, lawmakers in the US are continuing to fight cybersecurity regulations handed down by the Department of Homeland Security, the Transportation Security Administration and CISA.In a new letter to Department of Homeland Security inspector general Joseph Cuffari sent last Thursday, US Senators Rob Portman, Michael Rounds and James Lankford slammed the cybersecurity regulations again, calling them “unnecessarily burdensome requirements that shift resources away from responding to cyberattacks to regulatory compliance.”The TSA and DHS pushed the new regulations this summer because companies involved in critical industries like transportation and gasoline routinely flouted voluntary cybersecurity rules and inspections. Colonial Pipeline, which was hit with a ransomware attack in May that left millions without gasoline for about a week, repeatedly pushed back cybersecurity reviews before it was attacked. But now, the government agencies are facing backlash from these companies, cybersecurity experts and Republican leaders in the Senate, all of whom believe more time should have been spent working with those involved in cybersecurity before the new rules were handed down. “We have received reports that TSA and CISA failed to give adequate consideration to feedback from stakeholders and subject matter experts who work in these fields and that the requirements are too inflexible,” the senators wrote in their letter.”We are concerned that the recently issued security directives appear to depart from TSA’s historically collaborative relationship with industry experts.”They go on to ask that DHS review each new regulation and provide explanations and legal justifications for all of the cybersecurity rules. They demanded a response in 120 days. While some have questioned the partisan nature of the demands, many cybersecurity experts have also raised concerns about the rules from a technical standpoint, noting that they could have been more focused if TSA had worked with experts more closely.   More

  • in

    Industry 4.0 gets its first unicorn

    Augury
    Augury, an industrial AI + IoT company—with customers such as Colgate, Hershey’s and Pepsi – has raised $180M in Series E funding. The round, led by Baker Hughes, launches the company to unicorn status and makes it an important bellwether for Industry 4.0 transitions.The deal comes amidst a pandemic-driven disruption in manufacturing and supply chains, which VCs have taken keen notice of. Something on the order of $45.1B has been raised by industrial start-ups so far this year, compared with the $34B raised in all of 2020, according to PitchBook. Augury’s wireless sensors and cloud platform monitors the “vitals” (like temperature and vibration) of critical industrial equipment. AI is used to compare them to a database of over 80K+ machine sounds so that faults can be detected before they cause downtime. It does this at an accuracy rate of over 99%. This is especially important as automation and robotics become driving forces of global manufacturing and distribution.”We’ve spent the last decade building towards a future where we can always rely on the machines that matter, in the sectors that matter,” said Saar Yoskovitz, co-founder and CEO of Augury. “Today marks a significant step into that future since our industry’s leading organizations have recognized the importance of Machine Health to them and their customers, and trust Augury to be their Machine Health partner. I’m thrilled by the opportunity this funding, coupled with the market access our new investors provide, gives us to further fuel Augury’s exponential growth and bring the impact of Machine Health to new markets.” In many ways the technology specializes in increasing efficiency by decreasing the costs associated with downtime and catastrophic equipment failure. Examples abound, but three touted by Augury include one in which Colgate-Palmolive saved 2.8 million tubes of toothpaste by avoiding a single machine failure; another in which ICL saved a million dollars in downtime and production loss costs at a single facility in less than 10 months; and one in which PepsiCo has rolled out the tech on all North American Frito Lay plants after Augury saved them 1M+ pounds of snacks.Baker Hughes and SE Ventures are investing in Augury at a time of astonishing disruption for the supply chains. Global manufacturing is dealing with unprecedented uncertainty, and in that environment Augury’s pitch of shoring up owned infrastructure is landing on friendly ears.According to the company, proceeds will contribute to Augury’s over $200 million war chest as it expands globally in sectors like energy while strengthening its core manufacturing customer base. More