Game On: SafeDNS Launches Its Next-Gen Dashboard
A New Level of Convenience and Style
Get ready for a whole new level of convenience and style with our revamped dashboard! We have gone above and beyond to design a user-friendly interface that not only looks great but also operates flawlessly. Experience the difference with an intuitive menu structure and a vibrant new color scheme that reflects our innovative spirit. This redesign isn’t merely about aesthetics; it’s about enhancing functionality and improving user experience.
Revamped User Interface
Step into a new era of digital interaction with our modern and refined design. The reworked interface isn’t just a facelift—it’s about making every click and move effortlessly smooth and intuitive. We’ve focused on ensuring that the major upgrade provides a delightful and seamless experience as you navigate through your dashboard. The new interface is designed to reduce the learning curve, allowing you to get things done more efficiently. The emphasis on usability means that whether you’re a long-time user or new to SafeDNS, you’ll find the interface easy to understand and operate.
New Color Scheme
We’ve infused our dashboard with a fresh, lively look that underscores our dedication to staying ahead and thinking forward. The new color palette isn’t just about aesthetics—it’s a reflection of our strategic vision. These bold, eye-catching colors will energize your daily interactions and capture the dynamic, ever-evolving essence of SafeDNS. The new scheme is designed to reduce eye strain and enhance readability, making it easier to work for extended periods. Our goal is to provide an environment that is not only functional but also visually pleasing.
Redesigned Menu
Discover a whole new level of efficiency with our completely reorganized menu structure. We’ve thoughtfully placed everything to ensure that all crucial functions are at your fingertips. Whether you’re setting security parameters, checking your analytics, or exploring new functionalities, it’s all just one click away. Reimagine convenience and enjoy a smoother, more efficient workflow than ever before. The redesigned menu is structured to minimize the number of clicks required to access key features, saving you time and effort. This streamlined navigation is part of our broader effort to make SafeDNS as user-friendly as possible.
Enhanced Performance
Our redesign is not just about looks—it’s about performance. The new dashboard is optimized for speed and efficiency, ensuring that you can perform tasks quickly and without interruption. This performance boost is especially important for users managing large amounts of data or running complex queries. The new system architecture supports faster load times and more responsive interactions, enhancing your overall experience.
Improved Security Features
In addition to usability and aesthetics, we have also enhanced the security features of our dashboard. With cyber threats becoming increasingly sophisticated, it’s crucial to stay ahead of the curve. The new dashboard includes advanced security measures that provide robust protection for your data. We’ve implemented multi-factor authentication, improved encryption protocols, and more granular access controls to ensure that your information remains secure. These features are designed to give you peace of mind, knowing that your data is protected by the latest security technologies.
At SafeDNS, we’re always pushing the boundaries of what’s possible, and our journey doesn’t stop here.
What’s Coming Next?
We’re gearing up for a significant upgrade to our user experience (UX) and backend frameworks. Soon, we’ll be transitioning to a cutting-edge React + Ajax-based architecture.
Why Does It Matter?
These developments will bring you lightning-fast, ultra-responsive interactions, making our dashboard more powerful and user-friendly than ever before. This upgrade is a huge leap forward in our promise to offer exceptional, high-quality service. The new architecture will enable real-time updates and more dynamic interactions, allowing us to deliver features and improvements more rapidly. This is part of our commitment to continuous improvement and innovation.
Enhanced Customer Support
As part of our ongoing improvements, we are also upgrading our customer support capabilities. The new dashboard includes integrated support features, making it easier to get help when you need it. You can now access a comprehensive knowledge base, live chat support, and troubleshooting guides directly from the dashboard. These resources are designed to help you resolve issues quickly and get the most out of SafeDNS. Our support team is committed to providing timely and effective assistance, ensuring that you have the help you need to succeed.
The new dashboard is now live and ready for you! We’re thrilled to offer this upgraded experience to all our current users. Explore the new features and enhancements to make your SafeDNS journey even more enjoyable. We eagerly await your feedback, so dive in, explore, and enjoy the new SafeDNS dashboard!
We are committed to continually improving our services and providing you with the best tools to manage your DNS needs. Your feedback is invaluable in helping us achieve this goal. So, set forth, explore, and let us know how we can continue to improve your experience. Thank you for being a part of the SafeDNS community!
About Version 2 Limited
Version 2 Digital is one of the most dynamic IT companies in Asia. The company distributes a wide range of IT products across various areas including cyber security, cloud, data protection, end points, infrastructures, system monitoring, storage, networking, business productivity and communication products.
Through an extensive network of channels, point of sales, resellers, and partnership companies, Version 2 offers quality products and services which are highly acclaimed in the market. Its customers cover a wide spectrum which include Global 1000 enterprises, regional listed companies, different vertical industries, public utilities, Government, a vast number of successful SMEs, and consumers in various Asian cities.
About SafeDNS
SafeDNS breathes to make the internet safer for people all over the world with solutions ranging from AI & ML-powered web filtering, cybersecurity to threat intelligence. Moreover, we strive to create the next generation of safer and more affordable web filtering products. Endlessly working to improve our users’ online protection, SafeDNS has also launched an innovative system powered by continuous machine learning and user behavior analytics to detect botnets and malicious websites.
MES Spring 2024 Recap: Why the Cloud Isn’t Right for Everyone
Scale Computing CEO Explains Why the Cloud is Not For Everyone and Wins Four XCellence Awards at MES Spring 2024 Event
At the end of April, Scale Computing went to Orlando for the Midsize Enterprise Summit (MES) event, returning home with four XCellence Awards, including the XCellence in Solutions award, the XCellence in Solutions Pavilion Strategy, the Most Midmarket Friendly award, the XCellence in Boardroom Presentation award, and the Best in Show award. The XCellence in Boardroom Presentation award was presented to Scale Computing’s CEO, Jeff Ready, for his boardroom session on edge computing.
Jeff’s session wasn’t your typical product pitch; it was a direct challenge to the status quo and the blind faith too many IT leaders have placed in an all-cloud approach. “All cloud is bad,” he cautioned, going on to acknowledge that “the cloud is a powerful tool, but relying solely on it can leave you vulnerable and locked into expensive vendor contracts.” While the cloud offers scalability and flexibility, it can also lead to significant cost overruns and long-term financial commitments that are difficult to escape. Moreover, he explained that running resource intensive AI applications in the cloud can be exorbitantly expensive compared to on-premises solutions.
To illustrate this point, Jeff uses the example of running compute-intensive AI applications in the cloud, noting that such tasks, which require substantial GPU resources, can quickly become prohibitively expensive when operated in a public cloud environment. By contrasting the cost of running a GPU-intensive game on a PlayStation versus on AWS, he showed how running similar workloads on AWS would cost up to $3,000 per month, compared to a one-time $400 cost for a PlayStation. “This is literally the difference in cost for running AI applications in the cloud versus on-prem.”
To mitigate these risks, Jeff argues in favor of a hybrid approach, one that leverages the strengths of both cloud and on-premises solutions, as both a more strategically and economically sound long-term strategy. He also explains how edge computing, which brings processing power closer to the data source, can significantly reduce costs and improve performance. By deploying AI and other resource-intensive applications at the edge, organizations can not only achieve greater efficiency and control over their infrastructure but can do so in a more cost-predictive fashion.
Jeff also touched on the theme of vendor lock-in as it relates to VMware, detailing Scale Computing’s new Seamless Switch campaign. He explained that for organizations currently tied to VMware contracts, Scale Computing offers a seamless migration path that allows them to switch without immediate financial penalties. The campaign includes free Scale Computing services for the duration of any remaining VMware contract and a generous hardware trade-in program, making it an attractive option for businesses looking to modernize their IT infrastructure while avoiding the pitfalls of vendor lock-in and escalating costs associated with VMware.
These insights set the stage for a live demo of two of Scale Computing’s edge computing solutions: SC//FleetManager and SC//HyperCore. In the first demo, Jeff shows how SC//Fleet Manager acts as a virtual control center, allowing users to manage on-premises environments as a private cloud, eliminating many of the headaches that come with managing disparate systems.
He also showed how using SC//FleetManager’s integrated Secure Link feature simplifies remote access by offering a secure, user-friendly alternative to traditional VPNs, which not only serves to enhance an organization’s overall security posture but also streamlines the remote work experience for a distributed workforce.
In his SC//HyperCore demo, Jeff explains how its core SCRIBE technology ensures that data management is fast, efficient, and reliable, allowing customers to focus on their applications without having to worry about the underlying infrastructure. Jeff then goes on to show how SCRIBE provides multiple active copies of data, enabling rapid data access and seamless failover in case of hardware failures, which serves to not only accelerate data processing but also enhances the overall resilience of the system.
At the end of the demo, Jeff goes on to make a final key point about edge computing – that it’s not just about the physical location of the infrastructure, but rather offers a fundamentally different paradigm for deploying, managing, and integrating applications. “It’s a whole new way of thinking about IT – one that requires a more distributed and intelligent approach.”
To learn more about SC//FleetManager and SC//Hypercore, take a self-guided tour through our product videos or schedule a one-on-one demo.
About Version 2 Limited
Version 2 Digital is one of the most dynamic IT companies in Asia. The company distributes a wide range of IT products across various areas including cyber security, cloud, data protection, end points, infrastructures, system monitoring, storage, networking, business productivity and communication products.
Through an extensive network of channels, point of sales, resellers, and partnership companies, Version 2 offers quality products and services which are highly acclaimed in the market. Its customers cover a wide spectrum which include Global 1000 enterprises, regional listed companies, different vertical industries, public utilities, Government, a vast number of successful SMEs, and consumers in various Asian cities.
About Scale Computing
Scale Computing is a leader in edge computing, virtualization, and hyperconverged solutions. Scale Computing HC3 software eliminates the need for traditional virtualization software, disaster recovery software, servers, and shared storage, replacing these with a fully integrated, highly available system for running applications. Using patented HyperCore™ technology, the HC3 self-healing platform automatically identifies, mitigates, and corrects infrastructure problems in real-time, enabling applications to achieve maximum uptime. When ease-of-use, high availability, and TCO matter, Scale Computing HC3 is the ideal infrastructure platform. Read what our customers have to say on Gartner Peer Insights, Spiceworks, TechValidate and TrustRadius.
Understanding ISO 27001: Evolution & Alignment with Network Access Control (NAC)
ISO 27001 stands as a cornerstone in the realm of information security, providing a structured and comprehensive approach to managing sensitive company information. Today, we delve into what ISO 27001 is, its evolution over time, and how Network Access Control (NAC) aligns with its principles to fortify organizational security.
What is ISO 27001?
ISO 27001 is an international standard for Information Security Management Systems (ISMS). It is part of the ISO/IEC 27000 family of standards, which are designed to help organizations keep their information assets secure. The standard provides a systematic approach to managing sensitive company information so that it remains secure. It includes people, processes, and IT systems by applying a risk management process.
Core Elements:
- Risk Management: Identifying potential threats to information security and implementing measures to mitigate these risks.
- Leadership Commitment: Ensuring that top management is committed to information security and provides the necessary resources.
- Continuous Improvement: Regularly reviewing and updating security measures to address new threats and vulnerabilities.
- Context of the Organization: Understanding the internal and external issues that can affect the information security objectives.
- Support and Operations: Ensuring that sufficient resources are provided and that operations are managed effectively to support security measures.
Evolution of ISO 27001
The journey of ISO 27001 began in the 1990s, originating from the British Standard BS 7799, which was developed by the British Standards Institution (BSI). It was intended to provide a framework for managing information security and was published in two parts: BS 7799-1, which provided the implementation guidelines, and BS 7799-2, which specified the requirements for an ISMS.
Key Milestones:
- 1995: BS 7799 was first published.
- 2000: BS 7799-2 was introduced, focusing on the requirements for implementing an ISMS.
- 2005: The International Organization for Standardization (ISO) adopted BS 7799-2, leading to the publication of ISO/IEC 27001:2005.
- 2013: The standard was revised, resulting in ISO/IEC 27001:2013, which brought it in line with other management system standards and made it more flexible to align with organizational needs.
- 2017: Minor updates were introduced to clarify certain points in the standard.
- 2022: The latest revision, ISO/IEC 27001:2022, further refines the standard, incorporating new technologies and methodologies to enhance information security practices.
Each iteration of the standard has aimed to improve its applicability, making it more robust against emerging threats and more adaptable to the diverse needs of organizations across different industries.
Network Access Control (NAC) and ISO 27001
Network Access Control (NAC) is a security solution that manages and controls the access of devices to a network. It ensures that only compliant and trusted devices are allowed to connect, thereby maintaining the integrity and security of the network.
How NAC Aligns:
- Risk Assessment and Treatment:
- ISO 27001 Requirement: Organizations must identify risks and implement measures to mitigate them.
- NAC Alignment: NAC identifies devices attempting to access the network, assesses their security posture, and either grants or denies access based on compliance with security policies. This aligns with the risk assessment and treatment process by preventing potentially risky devices from compromising the network.
- Access Control:
- ISO 27001 Requirement: Organizations need to implement controls to ensure that only authorized individuals have access to information.
- NAC Alignment: NAC enforces access control by ensuring that only authenticated and authorized devices can access the network. This prevents unauthorized access and helps protect sensitive information.
- Asset Management:
- ISO 27001 Requirement: Organizations should identify and manage their assets to protect information.
- NAC Alignment: NAC provides visibility into all devices connected to the network, helping organizations maintain an accurate inventory of assets. This supports the asset management requirements of ISO 27001 by ensuring that all networked devices are accounted for and managed.
- Monitoring and Review:
- ISO 27001 Requirement: Organizations must monitor and review their information security management system to ensure its effectiveness.
- NAC Alignment: NAC continuously monitors network traffic and device compliance, providing real-time data and insights. This ongoing monitoring aligns with ISO 27001’s requirement for continuous review and improvement of security measures.
- Incident Management:
- ISO 27001 Requirement: Organizations need to establish a process for managing information security incidents.
- NAC Alignment: NAC helps detect and respond to security incidents by identifying anomalous behavior and unauthorized access attempts. This supports the incident management process by enabling quick identification and remediation of security breaches.
- Compliance:
- ISO 27001 Requirement: Organizations must comply with applicable legal, regulatory, and contractual requirements.
- NAC Alignment: NAC ensures that devices comply with organizational security policies and external regulations before granting access. This helps organizations maintain compliance with various standards and regulations, including ISO 27001.
Conclusion
ISO 27001 has evolved significantly since its inception, adapting to the changing landscape of information security. Its structured framework for managing information security risks is essential for organizations aiming to protect their sensitive data. Network Access Control (NAC) complements ISO 27001 by ensuring that only compliant and authorized devices can access the network, thus reinforcing the standard’s principles.
About Version 2 Limited
Version 2 Digital is one of the most dynamic IT companies in Asia. The company distributes a wide range of IT products across various areas including cyber security, cloud, data protection, end points, infrastructures, system monitoring, storage, networking, business productivity and communication products.
Through an extensive network of channels, point of sales, resellers, and partnership companies, Version 2 offers quality products and services which are highly acclaimed in the market. Its customers cover a wide spectrum which include Global 1000 enterprises, regional listed companies, different vertical industries, public utilities, Government, a vast number of successful SMEs, and consumers in various Asian cities.
About Portnox
Portnox provides simple-to-deploy, operate and maintain network access control, security and visibility solutions. Portnox software can be deployed on-premises, as a cloud-delivered service, or in hybrid mode. It is agentless and vendor-agnostic, allowing organizations to maximize their existing network and cybersecurity investments. Hundreds of enterprises around the world rely on Portnox for network visibility, cybersecurity policy enforcement and regulatory compliance. The company has been recognized for its innovations by Info Security Products Guide, Cyber Security Excellence Awards, IoT Innovator Awards, Computing Security Awards, Best of Interop ITX and Cyber Defense Magazine. Portnox has offices in the U.S., Europe and Asia. For information visit http://www.portnox.com, and follow us on Twitter and LinkedIn.。
Making sense of popular methods of authentication
)
They: Authenticate yourself! — You: But how?
Every time you log in to an account, you must first prove that you are who you say you are. It’s like entering a military base: no pass, no entry. But that’s what authentication is essentially about — verifying a user’s identity so that no unauthorized parties can get on the inside.
Depending on the platform, the methods used for authentication vary in complexity. Sometimes, a single password is enough to gain access. Other times, you must provide additional codes, click a link sent to you via email, or stare at your device’s camera so it can scan your face.
With so many methods of authentication available, we aim to help you navigate this landscape and understand why it’s important to authenticate and how to do so safely and conveniently. Let’s start with the “why.”
Why is user authentication important?
While we’ve already touched on the importance of authentication in the previous section, let’s delve deeper into why it’s so crucial.
Authentication serves as the gatekeeper to your online accounts and services. Its primary role is to ensure that only you — and authorized individuals — can access your financial records, personal messages, and other sensitive information.
Moreover, authentication helps prevent attempts to misuse your accounts for fraudulent transactions or nefarious activities under false identities. In other words, it ensures that you have control of your accounts and that no deceitful actions can be made in your name.
Needless to say, as a user, you are also more likely to engage with online services, share personal information, and conduct transactions when user authentication methods are in place. So, in a way, it is also a way to form and nurture trust between you, the user, and the service provider.
Types of authentication methods
Among the array of user authentication methods available today, six stand out as the most popular and crucial for cybersecurity. These include:
Token authentication
This form of authentication involves the use of a physical device, such as a USB token or smart card, to generate a one-time password or cryptographic key for accessing systems or services. The token authentication method provides an additional layer of security as the token must be in your possession.
Password authentication
Passwords are the most widely used method for user authentication, requiring individuals to provide unique combinations of characters to access their accounts or systems. Strong passwords should be complex and unique, incorporating a mix of letters, symbols, and numbers arranged randomly to thwart cybercriminals’ attempts at guessing them.
Biometric authentication
Biometric authentication utilizes unique physical or behavioral characteristics of individuals to verify their identity. This can include fingerprint recognition, facial recognition, iris scanning, or voice recognition. Biometric authentication offers a high level of security as it is difficult to replicate or fake these biological traits.
Multi-factor authentication
Multi-factor authentication (MFA) combines two or more authentication factors, such as something you know (password), something you have (token), or something you are (biometric), to verify a user’s identity. By requiring users to provide multiple identity proofs, MFA adds an extra layer of security, reducing the risk of unauthorized access — even if one factor is compromised.
A common implementation of MFA is two-factor authentication (2FA), which requires users to provide two different types of authentication factors before accessing their accounts
Certificate-based authentication
This method involves the use of digital certificates issued by a trusted authority to verify the identity of users or devices. The certificates are used in combination with public-key cryptography to authenticate users and encrypt data during transmission, ensuring secure communication between parties.
Passkey authentication
Passkeys are a new form of authentication where users are granted access without providing their password. Passkey technology combines biometric verification with cryptographic keys for a safer and easier way to log in. Each user has a unique pair of keys: a public one stored on the server and a private one on their device. When logging in, the server asks for the private key, which the device provides. If they match, you’re granted access.
Which authentication method is the safest one?
Naming just one of the secure authentication methods described above as the safest is not easy, especially since each method has its own strengths and weaknesses depending on the situation. For instance, while biometric authentication methods are highly effective, they are not immune to theft. So, if a cybercriminal gains access to someone’s fingerprint, that authentication method becomes compromised. After all, unlike a password, you cannot change your fingerprint.
So, if we were pushed to choose just one, we would say that passkeys are the safest authentication method because they help eliminate the risk of phishing, cannot be easily stolen or guessed (unlike weak passwords), and utilize strong cryptographic techniques to ensure the integrity and confidentiality of user credentials. Passkeys also avoid the pitfalls of traditional methods as they do not rely on something you need to remember, like a password, or something that can be physically stolen, like a security token.
In reality, however, the best approach is to use a combination of different methods tailored to the specific situation and required level of security. The best part is that you only need one tool to make this possible.
You don’t have to settle for just one authentication method
If you use NordPass, an advanced yet intuitive password manager designed by the team behind NordVPN, you gain immediate access to many of the best authentication methods available, allowing you to mix and match them for optimal security. How so?
First, NordPass can generate strong passwords on the spot and allows you to store your credentials safely in an encrypted vault that only you can access. It also enables you to implement multi-factor authentication for your online accounts, using the NordPass app as your authenticator to provide TOTP codes. Additionally, NordPass supports passkey technology, empowering you to effectively protect your accounts without passwords and access them instantly through methods such as biometric authentication.
With NordPass, authentication management becomes seamless and secure — get the 14-day free trial and see for yourself.
About Version 2 Limited
Version 2 Digital is one of the most dynamic IT companies in Asia. The company distributes a wide range of IT products across various areas including cyber security, cloud, data protection, end points, infrastructures, system monitoring, storage, networking, business productivity and communication products.
Through an extensive network of channels, point of sales, resellers, and partnership companies, Version 2 offers quality products and services which are highly acclaimed in the market. Its customers cover a wide spectrum which include Global 1000 enterprises, regional listed companies, different vertical industries, public utilities, Government, a vast number of successful SMEs, and consumers in various Asian cities.
About NordPass
NordPass is developed by Nord Security, a company leading the global market of cybersecurity products.
The web has become a chaotic space where safety and trust have been compromised by cybercrime and data protection issues. Therefore, our team has a global mission to shape a more trusted and peaceful online future for people everywhere.
How to disable Google Password Manager
)
Ready to make the next step in your password management journey and move on past the Google Password Manager? Well, you’re in the right place.
As much as Google’s password manager is convenient, some of you might be looking for higher levels of protection and flexibility. Be it more advanced encryption, in-depth insights on password strength, or the ability to handle your passwords seamlessly across any device, NordPass can serve as an excellent alternative. Let’s see why you may want to make the change and how you can disable Google’s password manager.
Important: Before you disable Google’s password manager
Before you disable the Google Password Manager, we highly recommend exporting all of your saved passwords. This step is critical in case something goes wrong during the transition to the new password manager. It also simplifies the process of importing all the login data into your next password manager such as NordPass, ensuring a seamless transition without the loss of any critical information. On top of that, having a copy of your stored passwords provides peace of mind; if you encounter any issues during the transition, you will still have a copy of your login credentials for your most important online accounts and services.
How to export your passwords from the Google Password Manager
Here’s a quick step-by-step guide for exporting your passwords from the Google Password Manager in Chrome:
Open Google Chrome and go to Settings.
Select the Autofill and Passwords tab and click Google Password Manager.
Open Settings and select Download File.
Enter your device’s password to export the passwords.
Save the CSV file to your device.
That’s it! You’ve successfully exported your password from the Google Password Manager.
How to turn off Google Password Manager in Chrome on desktop
The Google Password Manager is turned on by default in all Chrome browsers. Switching it off is quick and easy though. Here’s how you can do it:
Open Google Chrome and select your profile in the upper-right corner.
Select the key icon under the profile image.
Open Settings.
Now switch off the toggle next to Offer to save passwords and Sign in automatically.
That’s it! The Google Password Manager on Chrome is now disabled.
How to turn off Google Password Manager on Android
Here’s a quick rundown of how you can turn off the Google Password Manager on your Android device:
Open the Chrome app on your Android device.
Tap the three dots in the top-right corner.
Open Settings.
Tap Password Manager.
Select the gear icon next to Password Manager.
Turn off the toggle next to Offer to save passwords and Auto sign-in.
You’re all done, the Google Password Manager is now turned off on your Android device.
How to turn off Google Password Manager on iOS
Here’s how you can turn off the Google Password Manager on your iOS device:
Open the Chrome app on your iOS device.
Tap the three dots in the bottom-right corner.
Select Password Manager.
Turn off the toggle next to Offer to save passwords.
How to set up a third-party password management solution
Transitioning from the Google Password Manager to a dedicated password manager such as NordPass is a significant step towards enhancing your online security and simplifying your online interactions.
NordPass is designed with user convenience and security in mind and offers a more tailored and robust password management experience. By setting up NordPass as your dedicated password manager, you’ll get a more secure and efficient way of managing your login credentials, credit card data, personal information, and more. The switch to NordPass is seamless and can be done in just a few simple steps. Here’s how you can set up NordPass as your primary password manager:
Download and install NordPass
Visit the NordPass website to download the extension or go to the App Store (iOS) or Google Play Store (Android) to get the mobile app.
Follow the setup instructions provided on the website or app store.
Sign up for a new account.
Import your passwords on desktop
Once you have NordPass installed, the next step is importing your passwords. This process ensures that all your login credentials from Google Password Manager are transferred to NordPass without any data loss. Here’s a rundown of how to do it:
Open the NordPass extension on your browser.
Open Settings.
Navigate to the Import section.
Select Google Password Manager or Google Chrome from the list of options.
Click Import. (Alternatively, you can choose the Other option in the Import menu.)
Now, upload the CSV file you previously exported from Google Password Manager.
That’s it! Your passwords from Google Password Manager will now appear in your NordPass Vault.
Import your passwords on mobile devices
Open the NordPass application on your mobile device.
Open Profile.
Select the browser you want to import your login information from.
Follow the steps on exporting your passwords from the specific browser.
Once you complete these steps, all saved passwords will appear in your NordPass vault.
Set up NordPass as your default password manager
To make the most out of NordPass, setting it as your default password manager will ensure all your new passwords and changes are automatically saved. Here’s how you can do that:
For Desktop:
Download the NordPass browser extension from the Chrome Web Store or your preferred browser’s extension store.
Install the extension and log in with your NordPass account.
For Android:
Open the NordPass on your Android device.
Select Profile and open Settings.
Switch the toggle next to Turn on autofill.
Select Open Autofill Service.
Now select NordPass as the preferred autofill service in device settings.
That’s it! Now NordPass will allow you to autosave and autofill your credentials, which will essentially make NordPass your default password manager on your Android device.
For iOS:
Open your device’s Settings.
Go to Passwords.
Tap Autofill Passwords.
Select NordPass and disable any other services for the best autofill experience.
By following these steps, you will effortlessly transition to NordPass as your default password manager, enjoying a more secure, efficient, and comprehensive password management experience.
About Version 2 Limited
Version 2 Digital is one of the most dynamic IT companies in Asia. The company distributes a wide range of IT products across various areas including cyber security, cloud, data protection, end points, infrastructures, system monitoring, storage, networking, business productivity and communication products.
Through an extensive network of channels, point of sales, resellers, and partnership companies, Version 2 offers quality products and services which are highly acclaimed in the market. Its customers cover a wide spectrum which include Global 1000 enterprises, regional listed companies, different vertical industries, public utilities, Government, a vast number of successful SMEs, and consumers in various Asian cities.
About NordPass
NordPass is developed by Nord Security, a company leading the global market of cybersecurity products.
The web has become a chaotic space where safety and trust have been compromised by cybercrime and data protection issues. Therefore, our team has a global mission to shape a more trusted and peaceful online future for people everywhere.
The Evolution of Access Management & the End of MFA & SSO
Traditionally, technologies like Multi-Factor Authentication (MFA) and Single Sign-On (SSO) have been hailed as robust solutions to secure access. However, as cyber threats grow in complexity, these ubiquitous technologies reveal their flaws, prompting a significant evolution towards more comprehensive, identity, device, and risk-centric approaches.
The Limitations of MFA and SSO
Multi-Factor Authentication (MFA) has long been championed as a superior security measure, combining something you know (password), something you have (token), and something you are (biometrics). However, MFA is not foolproof. Cybercriminals have developed sophisticated methods to bypass MFA, such as phishing attacks that intercept one-time passwords (OTPs) or social engineering tactics that manipulate users into revealing their second factors. Furthermore, the usability of MFA can be cumbersome, leading to user resistance and potential security workarounds.
Single Sign-On (SSO), on the other hand, streamlines the user experience by allowing access to multiple applications with one set of credentials. While convenient, SSO presents a single point of failure. If an attacker compromises the SSO credentials, they gain unfettered access to all linked applications. This can lead to devastating breaches, as seen in several high-profile incidents.
The Shift to Identity-Centric Access
Recognizing the limitations of traditional methods, the cybersecurity community is pivoting towards more sophisticated, identity-centric approaches. Identity-centric access management revolves around the principle that access decisions should be based on the identity of the user, their role within the organization, and their behavior patterns.
Behavioral Analytics: By leveraging machine learning and artificial intelligence, organizations can analyze user behavior to detect anomalies. For example, if an employee typically logs in from New York but suddenly accesses the network from Europe, this discrepancy can trigger an alert or additional authentication requirements. This dynamic approach helps in identifying potential threats in real-time, enhancing security beyond static MFA and SSO measures.
Zero Trust Architecture: The Zero Trust model operates on the premise that no user or device should be inherently trusted, whether inside or outside the network. Every access request is meticulously verified, and users are granted the minimum necessary access for their roles. This reduces the risk of lateral movement within the network if credentials are compromised. Implementing Zero Trust requires continuous monitoring and validation of identities, ensuring that access decisions are always context-aware and risk-based.
Device-Centric Access: Emphasizing Endpoint Security
In addition to focusing on user identity, modern access management also places significant emphasis on the devices used to access corporate resources. The proliferation of remote work and BYOD (Bring Your Own Device) policies necessitates a comprehensive approach to endpoint security.
Device Posture Assessment: Ensuring that devices comply with corporate security policies is crucial. This involves checking for up-to-date operating systems, antivirus software, and encryption measures. Devices that do not meet these standards can be denied access or granted limited access until they comply. This approach minimizes the risk of compromised devices becoming vectors for attacks.
Mobile Device Management (MDM): MDM solutions allow organizations to enforce security policies on mobile devices, ensuring that they are properly configured and managed. Features such as remote wipe and device tracking enhance security, especially for lost or stolen devices. By integrating MDM with access management systems, organizations can create a seamless, secure environment for all endpoints.
Risk-Centric Access: Adaptive and Context-Aware
The evolution of access management also involves a shift towards risk-centric models, where access decisions are adaptive and context-aware. This approach ensures that security measures dynamically adjust based on the assessed risk level of each access request.
Risk-Based Authentication (RBA): RBA evaluates the risk associated with each login attempt based on factors such as location, device type, and user behavior. High-risk logins may require additional authentication steps, while low-risk logins can proceed with minimal friction. This balance enhances security without compromising user experience.
Context-Aware Policies: These policies take into account various contextual factors, such as the time of day, the sensitivity of the requested resource, and historical access patterns. For instance, accessing sensitive financial data from an unusual location or outside business hours might prompt additional verification. This granularity ensures that security measures are precisely tailored to the context of each access attempt.
The Future of Access Management
As cyber threats continue to evolve, access management must also advance to stay ahead. The future lies in integrating these identity, device, and risk-centric approaches into a cohesive strategy that adapts to emerging challenges.
Artificial Intelligence and Machine Learning: AI and ML will play increasingly vital roles in access management. These technologies can analyze vast amounts of data to identify patterns and predict potential threats. By continuously learning and adapting, AI-driven systems can enhance the precision and effectiveness of access controls.
Decentralized Identity: Blockchain technology offers the potential for decentralized identity management, where users have control over their digital identities. This can reduce the reliance on centralized systems, which are attractive targets for attackers. Decentralized identity solutions can provide more secure and privacy-preserving ways to manage access.
Collaboration and Information Sharing: The cybersecurity community must collaborate and share information about emerging threats and best practices. Industry standards and frameworks, such as those developed by NIST and ISO, provide valuable guidelines for implementing robust access management strategies.
The evolution of access management in cybersecurity is a response to the growing sophistication of cyber threats. Moving beyond traditional MFA and SSO, modern approaches emphasize identity, device, and risk-centric models. By leveraging advanced technologies and continuously adapting to new challenges, organizations can enhance their security posture and protect their critical assets in an increasingly complex digital landscape. As we look to the future, the integration of AI, decentralized identity, and collaborative efforts will be key to developing resilient access management solutions.
About Version 2 Limited
Version 2 Digital is one of the most dynamic IT companies in Asia. The company distributes a wide range of IT products across various areas including cyber security, cloud, data protection, end points, infrastructures, system monitoring, storage, networking, business productivity and communication products.
Through an extensive network of channels, point of sales, resellers, and partnership companies, Version 2 offers quality products and services which are highly acclaimed in the market. Its customers cover a wide spectrum which include Global 1000 enterprises, regional listed companies, different vertical industries, public utilities, Government, a vast number of successful SMEs, and consumers in various Asian cities.
About Portnox
Portnox provides simple-to-deploy, operate and maintain network access control, security and visibility solutions. Portnox software can be deployed on-premises, as a cloud-delivered service, or in hybrid mode. It is agentless and vendor-agnostic, allowing organizations to maximize their existing network and cybersecurity investments. Hundreds of enterprises around the world rely on Portnox for network visibility, cybersecurity policy enforcement and regulatory compliance. The company has been recognized for its innovations by Info Security Products Guide, Cyber Security Excellence Awards, IoT Innovator Awards, Computing Security Awards, Best of Interop ITX and Cyber Defense Magazine. Portnox has offices in the U.S., Europe and Asia. For information visit http://www.portnox.com, and follow us on Twitter and LinkedIn.。
Greener backup services with efficient code
The following is an abridged version of my recent article, “Tapping the potential of code for greener backup services,” which is published, in full, with Computer Weekly.
The language of sustainability
Sustainability goes beyond green energy; it includes building efficient, reliable, and adaptable systems. Using C++ as the primary programming language enables the development of storage systems that minimize resource usage while maximizing performance and reliability.
Efficient architecture and programming
Sustainability is about optimizing efficiency at every operational level to minimize resource consumption while maximizing performance and profitability. C++ helps create sustainable, scalable architectures, reducing environmental impact and avoiding legacy inefficiencies.
Purpose-built architecture
The key to sustainable data management is purpose-built architecture, tailored to address storage challenges efficiently. Deduplication, eliminating redundant data, is crucial. This approach streamlines operations, reduces complexity, and lowers resource consumption compared to virtual machines provided by third-party platforms.
Choosing efficient programming languages
Efficiency extends to programming languages. C++, known for its performance and low resource utilization, can yield significant energy savings compared to resource-intensive languages. Its versatility, low-level access to system resources, and support for high-level abstractions make it ideal for developing efficient and scalable software.
Avoiding legacy inefficiencies
Legacy systems introduce complexity and inefficiencies, increasing costs and energy consumption. By maintaining full ownership and control of the technology stack, companies can streamline operations and minimize resource overhead, prioritizing lean, purpose-built architectures that deliver long-term benefits.
Performance as a priority
Optimizing resource usage is essential for long-term sustainability, especially with the increasing volume of data. Meticulous design of storage architecture and code optimization are necessary. Off-the-shelf solutions may offer quick fixes, but efficient code is crucial for addressing core issues sustainably.
The impact of code on sustainability and cost
Adopting sustainable practices in architecture design and programming languages reduces energy consumption, predicts costs, and simplifies compliance. Techniques like incremental backup and deduplication enhance efficiency, sustainability, and profitability. C++ enables the creation of resource-efficient, fast, and environmentally sustainable storage systems.
Conclusion
Prioritizing responsible resource consumption and operational efficiency allows technology companies to lead in environmental stewardship without compromising profitability. By integrating sustainable practices, we can foster a more environmentally conscious tech industry for future generations.
About Version 2 Limited
Version 2 Digital is one of the most dynamic IT companies in Asia. The company distributes a wide range of IT products across various areas including cyber security, cloud, data protection, end points, infrastructures, system monitoring, storage, networking, business productivity and communication products.
Through an extensive network of channels, point of sales, resellers, and partnership companies, Version 2 offers quality products and services which are highly acclaimed in the market. Its customers cover a wide spectrum which include Global 1000 enterprises, regional listed companies, different vertical industries, public utilities, Government, a vast number of successful SMEs, and consumers in various Asian cities.
About Keepit
At Keepit, we believe in a digital future where all software is delivered as a service. Keepit’s mission is to protect data in the cloud Keepit is a software company specializing in Cloud-to-Cloud data backup and recovery. Deriving from +20 year experience in building best-in-class data protection and hosting services, Keepit is pioneering the way to secure and protect cloud data at scale.
Amid Warren Buffet’s Dire Warning: Why Cyber Insurance is Crucial for SMBs
Key Takeaways:
- Cyber Threats on the Rise: Small and medium businesses, are increasingly targeted by cyberattacks, making cyber insurance essential.
- Widespread Underinsurance: Despite the rising risks, many SMBs remain underinsured or not insured at all against cyber threats.
- Guardz’s Pioneering Solution: Guardz has launched a new offering to help secure and insure small & medium businesses against growing cybersecurity threats, making insurance accessible to previously ineligible companies.
In today’s digital world, the importance of cybersecurity cannot be overstated. Businesses of all sizes face increasingly sophisticated and frequent cyberattacks. SMBs are particularly vulnerable due to limited resources and inadequate cybersecurity measures. Despite the clear risks, many of these businesses are not adequately insured against cyber threats, leaving them exposed to potentially catastrophic losses.
Warren Buffett’s Warning: Huge Losses Looming
A stark reminder of this issue comes from Warren Buffett, who recently expressed his concerns about huge losses in the booming insurance market. In a CNBC article, it was reported that at an annual shareholder meeting, Buffett highlighted the significant financial impact of cyberattacks and the urgent need for businesses to protect themselves through comprehensive insurance policies. His warning underscores the necessity for MSPs to re-evaluate their cybersecurity strategies and ensure they have robust cyber insurance coverage to provide the adequate protection to their SMB clients.
The Rising Threat of Cyberattacks
Cybercriminals are increasingly targeting SMBs because they often have weaker security infrastructures compared to larger corporations. According to a report by the Ponemon Institute, the average cost of a data breach for SMBs is $3.9 million, a figure that can be devastating for smaller enterprises. Additionally, 60% of small businesses go out of business within six months of a cyberattack. These statistics highlight the severe financial losses, data breaches, and reputational damage that can result from a cyberattack. Businesses face legal liabilities, regulatory fines, and the costly process of restoring their operations, all of which underscore the critical need for cyber insurance.
Widespread Underinsurance
Despite the clear and present dangers, many SMBs are underinsured or not insured at all against cyber threats. The Hiscox Cyber Readiness Report 2023 found that 64% of small businesses lack cyber insurance. This lack of coverage can be attributed to several factors, including a lack of awareness about the risks, perceived high costs of insurance premiums, and a misconception that cyberattacks are only a concern for large corporations. However, the reality is that cyberattacks can affect any business, regardless of its size, and the financial fallout can be crippling.
The Role of Cyber Insurance
Cyber insurance plays a crucial role in mitigating the financial impact of cyberattacks. It provides businesses with the necessary coverage to recover from data breaches, ransomware attacks, and other cyber incidents. A comprehensive cyber insurance policy can cover various costs, including legal fees, customer notification expenses, and the cost of restoring compromised data. Additionally, cyber insurance can help businesses demonstrate compliance with regulatory requirements and build trust with their customers by showing that they are taking proactive steps to protect sensitive information.
The Challenge for SMBs
For SMBs, the challenge lies in finding the right cyber insurance policy that meets their specific needs and budget constraints. The National Cyber Security Alliance reports that 88% of small business owners feel their business is vulnerable to a cyberattack, yet many smaller businesses find it daunting to navigate the complex landscape of cyber insurance options. However, the cost of not having adequate insurance far outweighs the premiums paid for comprehensive coverage.
Guardz: A Pioneering Solution for Cyber Insuring Previously Ineligible SMBs
Recognizing the urgent need for accessible and effective cyber insurance solutions, Guardz has recently launched a pioneering offering specifically designed for SMBs. Guardz’s solution not only helps businesses secure their digital assets but also provides the necessary insurance coverage to protect against the financial fallout of cyber incidents. What sets Guardz apart is its focus on making insurance accessible to businesses that were previously ineligible due to inadequate cybersecurity measures.
Guardz’s new offering addresses the unique challenges faced by SMBs in today’s cyber threat landscape. The solution includes robust cybersecurity measures to prevent attacks and insurance coverage to mitigate the financial impact if an incident occurs. By implementing Guardz’s security solution, SMBs can meet the criteria required for cyber insurance, which was previously unattainable for many.
For more information about Guardz’s innovative solution, visit our insurance page.
Conclusion
The increasing frequency and sophistication of cyberattacks make it imperative for MSPs to invest in robust cybersecurity measures and comprehensive cyber insurance. Warren Buffett’s concerns about huge losses in the insurance market serve as a stark reminder of the financial risks posed by cyber threats. By securing adequate insurance coverage, businesses can protect themselves against the potentially devastating consequences of cyber incidents and ensure their long-term resilience and success. Guardz’s pioneering solution offers a lifeline to previously ineligible businesses, helping them secure their digital assets and obtain crucial insurance coverage.
About Version 2 Limited
Version 2 Digital is one of the most dynamic IT companies in Asia. The company distributes a wide range of IT products across various areas including cyber security, cloud, data protection, end points, infrastructures, system monitoring, storage, networking, business productivity and communication products.
Through an extensive network of channels, point of sales, resellers, and partnership companies, Version 2 offers quality products and services which are highly acclaimed in the market. Its customers cover a wide spectrum which include Global 1000 enterprises, regional listed companies, different vertical industries, public utilities, Government, a vast number of successful SMEs, and consumers in various Asian cities.
About Guardz
Guardz is on a mission to create a safer digital world by empowering Managed Service Providers (MSPs). Their goal is to proactively secure and insure Small and Medium Enterprises (SMEs) against ever-evolving threats while simultaneously creating new revenue streams, all on one unified platform.
ESET Threat Report: Infostealers using AI & banking malware creating deepfake videos to steal money
- ESET has released its latest Threat Report, which summarizes threat landscape trends seen in ESET telemetry and from the perspective of ESET experts, from December 2023 through May 2024.
- Infostealers started to impersonate generative AI tools such as Midjourney, Sora, and Gemini.
- New mobile malware GoldPickaxe is capable of stealing facial recognition data to create deepfake videos.
- RedLine Stealer saw several detection spikes in ESET H1 2024 telemetry, caused by campaigns in Spain, Japan and Germany.
- Balada Injector, a gang notorious for exploiting WordPress plugin vulnerabilities, continued to run rampant in the first half of 2024, compromising over 20,000 websites as ESET telemetry detected 400,000 hits.
BRATISLAVA — June 27, 2024 — ESET has released its latest Threat Report, which summarizes threat landscape trends seen in ESET telemetry and from the perspective of both ESET threat detection and research experts, from December 2023 through May 2024. These past six months painted a dynamic landscape of Android financial threats, malware going after victims’ mobile banking funds – be they in the form of “traditional” banking malware or, more recently, cryptostealers. Infostealing malware can now be found impersonating generative AI tools, and new mobile malware GoldPickaxe is capable of stealing facial recognition data to create deepfake videos used by the malware’s operators to authenticate fraudulent financial transactions. Video games and cheating tools used in online multiplayer games were recently found to contain infostealer malware such as the RedLine Stealer, which saw several detection spikes in H1 2024 in ESET telemetry.
“GoldPickaxe has both Android and iOS versions and has been targeting victims in Southeast Asia through localized malicious apps. As ESET researchers investigated this malware family, they discovered that an older Android sibling of GoldPickaxe, called GoldDiggerPlus, has also tunneled its way to Latin America and South Africa by actively targeting victims in these regions,” explains Jiří Kropáč, Director of ESET Threat Detection.
In recent months Infostealing malware also began to utilize the impersonation of generative AI tools. In H1 2024, Rilide Stealer was spotted misusing the names of generative AI assistants, such as OpenAI’s Sora and Google’s Gemini, to entice potential victims. In another malicious campaign, the Vidar infostealer was lurking behind a supposed Windows desktop app for AI image generator Midjourney – even though Midjourney’s AI model is only accessible via Discord. Since 2023, ESET Research has increasingly seen cybercriminals abusing the AI theme – a trend that is expected to continue.
Gaming enthusiasts who ventured out of the official gaming ecosystem were attacked by infostealers, as some cracked video games and cheating tools used in online multiplayer games were recently found to contain infostealer malware such as Lumma Stealer and RedLine Stealer. RedLine Stealer saw several detection spikes in H1 2024 in ESET telemetry, caused by campaigns in Spain, Japan, and Germany. Its recent waves were so significant that RedLine Stealer detections in H1 2024 surpassed those from H2 2023 by a third.
Balada Injector, a gang notorious for exploiting WordPress plug-in vulnerabilities, continued to run rampant in the first half of 2024, compromising over 20,000 websites and racking up over 400,000 hits in ESET telemetry for the variants used in the gang’s recent campaign. On the ransomware scene, former leading player LockBit was knocked off its pedestal by Operation Chronos, a global disruption conducted by law enforcement in February 2024. Although ESET telemetry recorded two notable LockBit campaigns in H1 2024, these were found to be the result of non-LockBit gangs using the leaked LockBit builder.
The ESET Threat Report features news about recently released deep-dive investigation into one of the most advanced server-side malware campaigns, which is still growing – Ebury group, with their malware and botnet. Over the years, Ebury has been deployed as a backdoor to compromise almost 400,000 Linux, FreeBSD, and OpenBSD servers; more than 100,000 were still compromised as of late 2023.
For more information, check out the ESET Threat Report H1 2024 on WeLiveSecurity.com. Make sure to follow ESET Research on Twitter (today known as X) for the latest news from ESET Research.
About Version 2 Limited
Version 2 Digital is one of the most dynamic IT companies in Asia. The company distributes a wide range of IT products across various areas including cyber security, cloud, data protection, end points, infrastructures, system monitoring, storage, networking, business productivity and communication products.
Through an extensive network of channels, point of sales, resellers, and partnership companies, Version 2 offers quality products and services which are highly acclaimed in the market. Its customers cover a wide spectrum which include Global 1000 enterprises, regional listed companies, different vertical industries, public utilities, Government, a vast number of successful SMEs, and consumers in various Asian cities.
About ESET
For 30 years, ESET® has been developing industry-leading IT security software and services for businesses and consumers worldwide. With solutions ranging from endpoint security to encryption and two-factor authentication, ESET’s high-performing, easy-to-use products give individuals and businesses the peace of mind to enjoy the full potential of their technology. ESET unobtrusively protects and monitors 24/7, updating defenses in real time to keep users safe and businesses running without interruption. Evolving threats require an evolving IT security company. Backed by R&D facilities worldwide, ESET became the first IT security company to earn 100 Virus Bulletin VB100 awards, identifying every single “in-the-wild” malware without interruption since 2003.