A browser configuration control that prevents accessing resources within a private network.

The Army's former head of computer science has been named as Rick Howard.

Het voormalige hoofd computerwetenschappen van het leger is genoemd als Rick Howard.

Rick Howard is CSO, Chief Analyst, and Senior Fellow at the CyberWire. Rick served 25 years in the Army, taught computer science at West Point, and edited two books. Rick is regularly joined by the CyberWire's Hash Table experts.

Rick Howard is CSO, Chief Analyst, en Senior Fellow bij de CyberWire. Rick diende 25 jaar in het leger, doceerde computerwetenschappen op West Point, en redigeerde twee boeken. Rick wordt regelmatig bijgestaan door de CyberWire's Hash Table experts.

Rick Howard is CSO, Chief Analyst, and Senior Fellow at the CyberWire. Past lives include CSO at Palo Alto Networks, TASC, iDefense GM, Counterpane SOC Director, and the Army's Computer Emergency Response Team (CERT) Commander. Rick served 25 years in the Army, taught computer science at West Point, and edited two books. Rick is regularly joined by the CyberWire's Hash Table experts.

Private Network Access (PNA) (noun)

Want to watch Netflix with Proton VPN? Use our troubleshooting guide to fix Proton VPN with Netflix. Watch more Netflix with Proton VPN.

If you have been using a VPN subscription for Netflix, you might have noticed that it doesn’t work with it.

Als je een VPN-abonnement voor Netflix hebt gebruikt, heb je misschien gemerkt dat het daarmee niet werkt.

Whether you want to access your Netflix account in school, at work, or on vacation – you may have purchased a Proton VPN subscription to get the job done. However, as you will see, there are a few reasons why Proton VPN may not be working with Netflix. That way you can get Proton working with Netflix and get back to streaming your favorite shows.

In werkelijkheid zou Proton VPN met Netflix moeten werken zonder al te veel werk van uw kant. Zoals je zult zien, zijn er echter een paar redenen waarom Proton VPN misschien niet met Netflix werkt. Op die manier kunt u Proton met Netflix laten werken en uw favoriete programma's weer streamen.

Whether you want to access your Netflix account in school, at work, or on vacation – you may have purchased a Proton VPN subscription to get the job done. Our VPN experts tested Proton VPN thoroughly here at Comparitech and found that it works perfectly to access multiple Netflix regions, including the US, Italy, Germany, Australia, Canada, and France.

If you are having trouble watching Netflix with Proton VPN, you may be wondering why you are having a different experience. In truth, Proton VPN should work with Netflix without too much work on your part. However, as you will see, there are a few reasons why Proton VPN may not be working with Netflix.

In this guide, we will help you to figure out what your problem is, and help you to fix it. That way you can get Proton working with Netflix and get back to streaming your favorite shows.

How does Proton VPN work to watch Netflix?

A VPN is an online privacy service that allows internet users to protect themselves against surveillance and tracking. It works by encrypting your traffic to prevent local network admins, Internet Service Providers, government agencies, hackers, and eavesdroppers from being able to track you online or engaging in data theft.

A VPN also conceals your IP address from the websites you visit, which prevents those sites from tracking you each time you return to their site or visit specific pages. A lucky by-product of how a VPN works is that you can pretend to be in a different location.

When you connect to a VPN server in the US, you will get an American IP address. This makes it seem like you are back home in the US when you travel abroad, which means you can watch shows that are exclusive to Netflix US. By connecting to a VPN server in another country – you can get an IP address there. This lets you watch that regional Netflix library, and any exclusive titles available there.

Not all VPNs work with Netflix. Netflix works hard to block VPNs and prevent people from accessing different regional catalogs. The good news is that Proton VPN has been tested, and is one of the few VPNs that have multiple server locations that work to stream Netflix.

We have tested over 59 popular VPNs to find services that work with Netflix. The good news is that Proton VPN is one of the few providers that still works. So, if you have a Proton VPN subscription you don’t need to worry – we can help you to get it working.

Before we look at the methods you can use to get Proton working with Netflix – let’s check out some of the reasons why Proton VPN might not be working:
• The Proton VPN server you are using has been blacklisted by Netflix.
• Netflix has stored a cookie in your browser that is giving away your real location.
• You are not connected to a Proton VPN server that is optimized for streaming.
• You are using an outdated version of the Proton VPN app and need to update it.
• Your mobile device is telling Netflix your GPS location; preventing Proton VPN from working.
• The country you are connected to is not supported.

Below, we will explain how to fix Proton VPN with Netflix. These tips and tricks should have you watching Netflix again in no time.

Here’s how to get Proton VPN working with Netflix:
• Restart your browser. It is possible that you simply haven’t restarted your browser in ages. This can sometimes cause conflicts, so we recommend restarting your computer, and restarting your browser to give it a refresh.
• Clear the cache and cookies in your browser. Previously-lodged trackers can give away your real location. This can prevent Proton VPN from working correctly, so be sure to clear them and relaunch your browser.
• Reinstall or update your version of Proton VPN. If you have been a Proton subscriber for some time, it is possible that your version of the app is out-of-date. Proton VPN could have updated its server list since the last time you installed the app, so it is worth checking for a new version.
• Try a different server. Proton VPN works with Netflix US, but it also has multiple US VPN servers and they don’t all work to watch Netflix. For this reason, it is worth testing a free different server. Alternatively, contact Proton’s live chat support to find out which server location is optimized for Netflix.
• Try a different country. ProtonVPN does not work with every Netflix region. If you are connected to a VPN server that is not supported, you may not be able to stream using your Netflix account. Try a different country, instead. We recommend trying the US, Italy, Germany, Australia, Canada, and France. These all worked during our tests.
• Turn off GPS. By switching off location services you can prevent Netflix from detecting your real location. Try turning off GPS on your mobile device or in your browser if you’re using a desktop or laptop computer.

How to securely access Netflix with Proton VPN

If you are still on the fence about purchasing a VPN subscription with Proton VPN – or you have a subscription but don’t yet know how to access Netflix with it – you can use our quick guide to learn everything you need to know.

Here’s how to use Proton VPN with Netflix:
• Begin by registering for ProtonVPN, if you haven’t already.
• Download the Proton VPN app for your device. Proton VPN has apps for Windows, MacOS, Linux, iOS, and Android.
• Connect to a ProtonVPN server in a country where Netflix is available.
• The Netflix catalog should now update automatically thanks to Proton VPN. Try streaming a show that is usually unavailable.

Please bear in mind that if you have not yet subscribed to a VPN for Netflix, we tend to recommend NordVPN over Proton! NordVPN is faster, it provides access to more Netflix regions, and it has better and more features than Proton VPN. This makes it an all-around better choice.

Can I use a free Proton VPN subscription to watch Netflix?

No. Although Proton VPN has free server locations available in the United States, the Netherlands, and Japan, these will not work to watch Netflix. Proton VPN provides a few free servers to let people gain online privacy and security.

Those free servers also allow people to access educational resources, news, and online services like social media that have been censored or blocked. This makes Proton VPN an excellent resource in countries with a lot of censorship, or in places where citizens require privacy for political reasons.

Although Proton is generous to provide a basic VPN service for consumers who can’t afford a premium VPN subscription, it does not consider accessing Netflix to be an essential service. For this reason, it does not provide access to Netflix on any of its free servers. Instead, it restricts Netflix access to its premium accounts; to encourage people to upgrade and start paying for a subscription.

Will Proton VPN affect my streaming speeds on Netflix?

Possibly. When you connect to a VPN your traffic must be encrypted and routed to the remote server location that you picked. This creates additional latency, which will slow down your internet connection slightly. As a result, you may find that the VPN causes buffering or a decrease in video quality when you watch Netflix.

The good news is that Proton VPN has very fast servers. As a result, you should not notice a perceptible drop in speeds. As long as your internet connection is relatively good to begin with, Proton VPN should allow you to continue using Netflix in exactly the same way as usual.

If, on the other hand, you are using a very slow wifi network – or are paying your ISP or mobile provider for a very slow internet connection – it is possible that your VPN will slow down your internet too much. This can make it hard to watch Netflix while connected to ProtonVPN.

Proton VPN not working with Netflix? Try this Fix

QuTech, de samenwerking tussen TU Delft en TNO op gebied van quantumtechnologie, heeft samen met Eurofiber en Juniper Networks een quantum-testbed gelanceerd. Daartoe worden meerdere ...

A project to develop a quantum key distribution system has been launched in the Netherlands.

In Nederland is een project gestart voor de ontwikkeling van een systeem voor de distributie van kwantumsleutels.

QuTech, de samenwerking tussen TU Delft en TNO op gebied van quantumtechnologie, heeft samen met Eurofiber en Juniper Networks een quantum-testbed gelanceerd. Centraal staat de toepassing van quantum-sleuteldistributie, een technologie die helpt om gegevens te beschermen tegen aanvallen door quantumcomputers. Volgens QuTech gaat deze zogeheten qkd-technologie een essentiële rol spelen bij de beveiliging van netwerken die waardevolle gegevens bevatten.

QuTech, the collaboration between TU Delft and TNO in the field of quantum technology, has launched a quantum testbed together with Eurofiber and Juniper Networks. Central to this is the application of quantum key distribution, a technology that helps protect data from attack by quantum computers. The collaboration with Eurofiber and Juniper Networks enables QuTech to integrate a proof of concept into a commercial fiber network.

QuTech, de samenwerking tussen TU Delft en TNO op gebied van quantumtechnologie, heeft samen met Eurofiber en Juniper Networks een quantum-testbed gelanceerd. Daartoe worden meerdere datacenters in Nederland met elkaar verbonden.

Het testbed biedt een omgeving waarin partners beveiligde communicatie kunnen onderzoeken op basis vane quantumfysica. Centraal staat de toepassing van quantum-sleuteldistributie, een technologie die helpt om gegevens te beschermen tegen aanvallen door quantumcomputers. Volgens QuTech gaat deze zogeheten qkd-technologie een essentiële rol spelen bij de beveiliging van netwerken die waardevolle gegevens bevatten. Te denken valt aan kritieke infrastructuur, overheid, politie en justitie en financiële gegevens.



De samenwerking met Eurofiber en Juniper Networks stelt QuTech in staat een proof of concept te integreren in een commercieel glasvezelnetwerk. Het systeem zal op meerdere Eurofiber-locaties worden ingezet. De partners in dit project gebruiken de routing-, switching- en beveiligingsoplossingen van Juniper Networks.



Als het project slaagt, zal QuTech een spin-out lanceren om de qkd-technologie verder te commercialiseren. Doel is te komen tot een volwaardig quantum-ecosysteem.



Marc Hulzebos, innovatiemanager Eurofiber, ziet kansen in deze nieuwe technologie. Hij heeft hoge verwachtingen van de voordelen die quantumbeveiliging en -connectiviteit kunnen bieden aan de data-infrastructuren van Eurofiber. Zodra de technologie rijp is, wil Eurofiber ‘quantum’ aan zijn klanten aanbieden.

Delfts QuTech richt quantum-testbed op

Attackers Search For Exposed "LuCI" Folders: Help me understand this attack, Author: Johannes Ullrich

I've been looking at some of the web's most popular web sites for the past few days.

Ik heb de afgelopen dagen een paar van de populairste websites van het web bekeken.

Scans for it are not specifically new. As with all perimeter security devices, they are significant targets, and simple vulnerabilities, as well as weak credentials, are often exploited. There appear to be three popular URLs among our honeypots:The scan seems to check if the directories are present by verifying the existence of specific files.

Scans daarvoor zijn niet specifiek nieuw. Zoals alle perimeterbeveiligingsvoorzieningen zijn zij een belangrijk doelwit, en eenvoudige kwetsbaarheden en zwakke inloggegevens worden vaak uitgebuit. Er blijken drie populaire URL's te zijn onder onze honeypots:De scan lijkt te controleren of de mappen aanwezig zijn door het bestaan van specifieke bestanden te verifiëren.

In the last couple of days, some of our web honeypots detected scans for "LuCI," LuCI is a user interface used by the widespread OpenWRT open-source router/firewall implementation. Scans for it are not specifically new. As with all perimeter security devices, they are significant targets, and simple vulnerabilities, as well as weak credentials, are often exploited.

There appear to be three popular URLs among our honeypots:

The scan seems to check if the directories are present by verifying the existence of specific files. A quick Google search shows plenty of exposed "/luci-static" folders. But I haven't found any "top-iot" subdirectories and wonder what exploits may be used against this feature.

Can you help? If you are running OpenWRT (or are more familiar with it ... I haven't used it in a few years), do you know what "top-iot" contains? The name suggests some kind of IoT subsystem. I am mostly wondering what the attacker is exploiting here and what they would get from this request (to possibly better implement the response in our honeypots)

and remember: Never ever expose an admin interface to the internet!

Attackers Search For Exposed "LuCI" Folders: Help me understand this attackAttackers Search For Exposed "LuCI" Folders: Help me understand this attack, Author: Johannes Ullrichisc, sans, internet, security, threat, worm, virus, phishing, hacking, vulnerability

Your data is at risk. Are you equipped to combat the risks posed by BlackGuard?

Blackguard Infostealer, a sophisticated cybersecurity tool designed to steal personal data from users, is being used by cybercriminals.

Blackguard Infostealer, een geavanceerd cyberbeveiligingsinstrument dat is ontworpen om persoonlijke gegevens van gebruikers te stelen, wordt door cybercriminelen gebruikt.

Blackguard Infostealer is a malware strain that was first discovered infecting Windows devices at the start of 2022. By understanding what types of data attackers want, we can better understand the value Blackguard offers its authors and writers, and therefore how malware fits into the broader cybercrime ecosystem. Once Blackguard Infostealer has infected a victim’s device, it initiates techniques such as system Application Programming Interface (API) hooking, Dynamic Link Library (DLL ) injection and resource hijacking to steal credentials from browsers, messenger clients, and other client-side software.

Blackguard Infostealer is een malware-stam die begin 2022 voor het eerst werd ontdekt bij het infecteren van Windows-apparaten. Door te begrijpen welke soorten gegevens aanvallers willen, kunnen we beter begrijpen welke waarde Blackguard zijn auteurs en schrijvers biedt, en dus hoe malware in het bredere ecosysteem van cybercriminaliteit past. Zodra Blackguard Infostealer het apparaat van een slachtoffer heeft geïnfecteerd, initieert het technieken zoals API (Application Programming Interface) hooking, DLL (Dynamic Link Library) injectie en resource hijacking om referenties te stelen van browsers, messenger clients en andere client-side software.

Blackguard Infostealer is a malware strain that was first discovered infecting Windows devices at the start of 2022. Other security researchers have already documented how the malware operates and its dissemination via underground Russian crimeware forums.1, 2 This article aims to expand on existing research by exploring its data exfiltration capabilities in greater detail. Blackguard is designed to steal a wide range of personal data, including credentials, cookies, messaging history, browsing history, cryptocurrency wallet information, and screenshots from the infected machine. By understanding what types of data attackers want, we can better understand the value Blackguard offers its authors and writers, and therefore how malware fits into the broader cybercrime ecosystem. Attackers distribute Blackguard using a variety of techniques, including drive-by downloads and phishing emails containing malicious attachments. Once Blackguard Infostealer has infected a victim’s device, it initiates techniques such as system Application Programming Interface (API) hooking, Dynamic Link Library (DLL ) injection and resource hijacking to steal credentials from browsers, messenger clients, and other client-side software. The stolen data is compressed and exfiltrated in the same HTTP-based communication channel that the attackers use for command and control (C&C). The exfiltrated credentials are stored on the C&C server and then used to conduct additional attacks such as credential stuffing, account creation, and online fraud. In our research of BlackGuard Infostealer we identified an exposed command and control (C&C) administrator panel (Figure 1) and analyzed the stolen data stored within.

The rest of the article will detail each of the major types of stolen data to examine what is stolen, how it is collected, and the impact of the theft. Stolen credentials, obtained by malware infections or website hacks, are often used by attackers for a number of purposes. These may include:
• Being sold in the underground community as part of crimeware services to earn money and enable additional adversaries to use the exfiltrated data.
• Using the stolen credentials to target applications using credential stuffing attacks to gain access as the compromised users.
• Conducting online fraud by impersonating victims and purchasing gift cards or performing financial transfers. Figure 4 shows the variety of credentials stolen by BlackGuard, including usernames and passwords from online ecommerce sites, email services, and even internal/intranet sites.

The stolen credentials are stored in a “password.txt” file on the C&C server which contains the usernames, passwords, and associated URLs. Web servers often use cookies to store session state; that is to say, they signal to the server that a user has already successful authenticated to the system. Stealing session cookies allows attackers to conduct session hijacking, allowing them to interact with the web server as the victim without ever having to provide credentials. Once that is accomplished, the attackers can inject malicious code into various web resources specific to the user account and injected code can be distributed to large sets of users by sharing tampered resources. BlackGuard Infostealer exfiltrates web session cookies from browsers such as Google Chrome, Microsoft Edge, Mozilla Firefox, and Apple’s Safari. Figure 5, shows how Blackguard Infostealer stores stolen cookies from the Chrome browser. The log file “Cookies_Chrome2.txt” contains the session cookie details along with the session key and the associated website.

As you can see in Figure 6, the browsing history reveals a lot about the user's preferences. Blackguard Infostealer logs the history data from the browser and stores the collected data in the “History.txt” file. The file also contains a counter highlighting the number of times the user has visited a specific website. BlackGuard Infostealer also captures screenshots from compromised systems at regular intervals. Screenshots of a user interacting with the system is common tactic used by attackers since they can reveal sensitive information about the user and present state of the system. This can result in personal information leakage, including addresses, credit card numbers, passwords, and more. One such example is presented in Figure 7 highlighting the user’s actions and their installed applications.

In Figure 8, we can see that BlackGuard Infostealer stole information about an Exodus crypto wallet and a Google Chrome wallet from the compromised system. Exodus provides desktop, mobile, and hardware-specific wallets that secure and manage cryptocurrency for the user. 1 BlackGuard Infostealer steals crypto information from all the active wallets on the compromised system. In the example, the “passphrase.json” file was extracted from the compromised system which reveals the passphrase that can be used to recover the Exodus wallet. In addition, the associated log files contain configuration-related information and other files containing transaction-specific details. Blackguard can also steal information from various messaging applications on the compromised system. Targeted applications include Telegram and Discord. The malware creates associated directories with the same name as the messaging application to hold the stolen data and then exfiltrates this data. Figure 9 highlights a directory structure of the stolen Discord data.

Note that the “Tokens.txt” file contains a long string of alphanumeric characters. Discord generates this token when the user logs into the Discord server and uses it as an authorization code which is passed by the Discord client application to the server. BlackGuard Infostealer steals the authorization token which is then used to log into the victim’s Discord account. In addition, the malware acquires all many other Discord files from the system, including logs, and local application database entries. Similarly, Figure 10 shows how the Telegram messaging application data is exfiltrated and stored on the C&C server.

BlackGuard Infostealer is a powerful crimeware tool designed to steal the widest possible variety of personal data from a victim’s device. The combination of stolen account credentials, cryptocurrency wallet information, session cookies, screenshots and messaging history indicates that the authors probably want to keep their options open in terms of monetizing the stolen data. In mid-June F5 Labs published Dor Nizar’s analysis of the Malibot Android malware, which also had the capability to exfiltrate a wide range of options and data types. These new malware strains stand in contrast to more specific forms of malware such as banking trojans, which tend to focus not just on a specific type of data, but on a specific set of banks (see, for example, the list of targets for Qbot). This raises questions about changing dynamics in the market for stolen data and monetization options for attackers. In the meantime, however, there can be no question that Blackguard Infostealer is not just a potent tool for cybercriminals, but also a quite versatile one. The implication is that defenders of all types need to understand its capabilities and how to detect it in order to manage the risk it presents.

BlackGuard Infostealer Malware: Dissecting the State of Exfiltrated Data

Ethisch hacker Thijs Alkemade heeft een groot lek gevonden in een functionaliteit van het Apple-besturingsysteem MacOS. Via die kwetsbaarheid konden kwaadwillenden met één applicatie toegang ...

A vulnerability in a MacOS operating system which allows malicious people to access the privileges of other applications has been discovered.

Er is een kwetsbaarheid in een MacOS-besturingssysteem ontdekt waardoor kwaadwillenden toegang kunnen krijgen tot de privileges van andere toepassingen.

De kwetsbaarheid zat in een tien jaar oude toepassing voor het opslaan van openstaande schermen. Het gaat om een zogenoemde ‘process injection vulnerability’ waarmee alle op MacOS AppKit-gebaseerde applicaties kwetsbaar waren en toegang boden tot andere applicaties en het systeem zelf. ‘Wat de kwetsbaarheid bijzonder interessant maakt, is dat deze universeel toepasbaar is op alle AppKit gebaseerde applicaties.’Alkemade trof de kwetsbaarheid op een onverwachte plek, want in een functionaliteit die al tien jaar geleden is ontwikkeld: de ‘saved state’-functie.

Ethical hacker Thijs Alkemade has found a major leak in a functionality of the Apple operating system MacOS. The vulnerability was in a decade-old application for storing open screens. Alkemade found the vulnerability in an unexpected place, because in a functionality that was already developed a decade ago: the 'saved state' function.

Ethisch hacker Thijs Alkemade heeft een groot lek gevonden in een functionaliteit van het Apple-besturingsysteem MacOS. Via die kwetsbaarheid konden kwaadwillenden met één applicatie toegang krijgen tot de rechten van andere applicaties en deze misbruiken. De kwetsbaarheid zat in een tien jaar oude toepassing voor het opslaan van openstaande schermen.

Het gaat om een zogenoemde ‘process injection vulnerability’ waarmee alle op MacOS AppKit-gebaseerde applicaties kwetsbaar waren en toegang boden tot andere applicaties en het systeem zelf.

In een persbericht schrijft Alkemades werkgever, ict-beveiliger Computest, dat ongemerkt de camera of microfoon was aan te zetten en na overname van het systeem ook eenvoudig malware te installeren was. ‘Wat de kwetsbaarheid bijzonder interessant maakt, is dat deze universeel toepasbaar is op alle AppKit gebaseerde applicaties.’

Alkemade trof de kwetsbaarheid op een onverwachte plek, want in een functionaliteit die al tien jaar geleden is ontwikkeld: de ‘saved state’-functie. Daarmee biedt het systeem bij het afsluiten aan om openstaande vensters opnieuw te openen zodra het systeem weer opstart.

Alkemade roept softwareleveranciers op om bij updates niet alleen te focussen op nieuwe functionaliteiten, maar ook te letten op kwetsbaarheden in oude toepassingen. ‘Bij de ontwikkeling van saved state was er nog geen kwetsbaarheid, omdat er destijds nog niet zo’n veelheid aan applicaties met allemaal verschillende rechten was. Dit verschil in permissies zorgt er ook voor dat de kwetsbaarheid mogelijk veel impact kan hebben.’

Hij vindt het begrijpelijk dat functies die lang geleden zijn ontwikkeld niet altijd zijn berekend op de technologie van vandaag. ‘Eigenlijk zou je ook regelmatig het systeem in zijn geheel moeten onderzoeken.’

De kwetsbaarheid is vorige week tijdens de elkaar opvolgende hackerconferenties Black Hat en Def Con in Las Vegas gepresenteerd. Alkemade ontving een niet nader bekend gemaakt bedrag voor het vinden van het lek (bug bounty).

Alkemade heeft al meerdere ontdekkingen van grote kwetsbaarheden op zijn naam. Samen met zijn collega Daan Keuper focust hij zich in een eigen lab bij Computest volledig op onderzoek. 



Alkemade en Keuper wisten al twee keer de internationale hackcompetitie Pwn2Own te winnen door Zoom te hacken en kwetsbaarheden in industriële systemen aan te tonen. Ook legden zij kwetsbaarheden bloot bij verschillende auto’s van de Volkswagen Groep. Hun speurwerk leverde in 2019 ook een nominatie voor de Computable Awards op.

Nederlandse hacker vindt lek in MacOS Apple

Looking for a new BI data storage solution? Compare today's top data storage platforms for business intelligence solutions now.

Data storage is a key part of the way businesses manage their data.

Gegevensopslag is een essentieel onderdeel van de manier waarop bedrijven hun gegevens beheren.

Read on to learn how the best data storage solutions function to address the BI needs for organizations in 2022.Business intelligence requires the use of raw data that is transformed into insights and actionable information, allowing organizations to make data-driven decisions. Therefore, organizations must store their BI data in accessible but secure locations. The software needs to be able to access the data from the data storage solution.

Business intelligence (BI)-oplossingen helpen besluitvormers bij het plannen van hun acties voor de best mogelijke resultaten op basis van hun organisatorische gegevens. Hoe kunnen organisaties hun gegevens goed opslaan, zodat ze gemakkelijk toegankelijk zijn voor analyse en rapportage, maar ook veilig en beschermd tegen gegevensverlies of beveiligingsinbreuken? Lees verder om te leren hoe de beste oplossingen voor gegevensopslag functioneren om te voldoen aan de BI-behoeften van organisaties in 2022.Business intelligence vereist het gebruik van ruwe gegevens die worden omgezet in inzichten en bruikbare informatie, waardoor organisaties datagestuurde beslissingen kunnen nemen.

Business intelligence (BI) solutions help business decision-makers plan their actions for the best possible outcomes according to their organizational data. So, how can organizations properly store their data, so it is readily accessible for analysis and reporting but also safe and secure from data loss or security breaches?

Read on to learn how the best data storage solutions function to address the BI needs for organizations in 2022.

Business intelligence requires the use of raw data that is transformed into insights and actionable information, allowing organizations to make data-driven decisions. Therefore, organizations must store their BI data in accessible but secure locations.

How are BI storage needs different from other storage needs?

BI operations depend upon software solutions to analyze data and transform it into actionable insights. The software needs to be able to access the data from the data storage solution. This data movement from the storage site into the BI solution is commonly referred to as the data flow. An organization’s BI data storage solution should support data flow into their analysis software solution.

Depending on the amount of data an organization needs to utilize, organizations may require much more storage space for their BI operations than they would need otherwise. Hence, scalability is a necessary feature of any BI data storage solution. Additionally, data stored within BI data storage solutions should be secure and address the appropriate compliance standards, as these locations will house important information that should not fall into the wrong hands.

The data stored within these solutions can come from multiple data sources and may be varying and complex. For this, storage solutions should also be able to organize and manage data in a way that allows it to be easily retrieved and used by other systems and for data queries.

What are the Key Features of BI Data Storage?

Organizations often require lots of space to store their data, which can add up. However, utilizing cloud-based or hybrid solutions often enables users to purchase only the amount of data they need and scale up as necessary.

Data held in these storage solutions should be easily accessible for use in the organization’s other BI analysis, reporting, and visualization solutions. In order for organizations to gain real-time analysis and insights from their data, the storage solutions should be able to allow quick access to support the necessary data flow for these operations.

The raw data that enters the BI data storage solutions may be unstructured and complex. Therefore, many data storage solutions provide ways for users to manage their data storage or will manage the data storage processing for users to ensure data is properly organized within the system.

These storage solutions should come with features to protect organizations against the risk of data loss. They should also provide end-to-end encryption and appropriately meet the organization’s compliance standards.

What are the Benefits of a BI Data Storage Solution?

BI data storage solutions can provide many benefits to the organizations that use them, allowing for fast and safe data use within their analysis systems. To appropriately discuss the various benefits of data storage solutions, let’s look at some advantages that different types of BI data storage solutions can offer their users.

Data warehousing solutions can provide users with more control over their data and can be a scalable option for BI data storage. They can help users maintain and clean up raw data from multiple disparate sources. The data is then stored within the data warehouses, which are an excellent interface for querying, transforming, and extracting data.

Data lakes can store all structured and unstructured data. This option is beneficial for performing machine learning, profiling, big data analysis, and real-time and predictive analytics on organizational data.

Cloud storage solutions are easily accessible for users at any place and any time, so long as they have internet access. They are also often an economical choice, as many cloud storage providers only allow users to pay for their required storage space. Storing organizational data in a single location through the cloud can also provide a single source of truth for users and lowers the likelihood of having duplicate datasets and data complexity.

Analytical databases are great for querying, BI analysis, and managing Big Data. They let users benefit from fast query response times and can handle high volumes of data. They are also highly scalable, SQL-compatible, and allow for efficient data compression.

This cross-cloud data storage solution lets users access all of their data on one platform, including their structured, unstructured, and semi-structured data. Many different workloads can be supported through the system using the user’s choice of language, making it an accessible choice for a variety of users.

The system allows organizations to query their semi-structured data with speed and flexibility. By running pipelines through Snowflake’s elastic processing engine and streamlining pipeline development through their language of choice, users can process their data without the need for excessive maintenance.

Data stored in the Snowflake Data Lake is secure, as users can protect their data across clouds with scalable role-based access policies. The system’s Classification feature lets it automatically identify sensitive data and enable secure collaboration with live, secure data sharing.

Oracle offers many different data solutions for business intelligence. The Autonomous Database is an excellent solution for organizations that desire fast data storage and processing with a low likelihood of human error. The cloud database is fully automated and formatted to support fast database provisioning, extracting, loading, and transforming data.

This is a nice choice for non-experts and experts alike, as it offers robust data management capabilities while being a hands-off, autonomous system. With auto-scaling, auto-securing, auto-tuning, auto-backups, auto-repairing, and auto-patching, organizations can manage their data while reducing their administrative costs.

The solution also provides self-service data management tools, enabling users to easily load and transform their data to generate actionable insights. Additional features include machine learning capabilities, graph analytics, and spatial analytics.

Google BigQuery is an enterprise data warehouse where organizations can store and analyze their data. The solution stores user’s data in a columnar storage format to support analytical queries. BigQuery automatically replicates its storage across multiple locations to provide high data availability.

BigQuery is designed to enable users to run analytic queries over large datasets. As a managed service, BigQuery automatically allocates storage for users as they move data into the system, so users only need to pay for the storage they utilize. The solution also protects users’ data from data loss by replicating it across multiple availability zones as well as encrypts all user data before it is written to disk.

Users can load their data into BigQuery through batch loading sets of data records, streaming individual records or batches of records, generating new data using queries or overwriting the results to a table, or by using a third-party application or service.

IBM’s Enterprise Data Storage Solutions are integrated data storage platforms that act as a single source of truth for users within an organization. They offer data storage software solutions for simplified management and secure data protection.

IBM provides a range of storage solutions for advanced data services, long-term data retention, artificial intelligence (AI), business continuity, and scalability. Users can choose between enterprise storage solutions designed to support the capabilities of IBM Z hybrid cloud environments, SAP HANA data demands, and self-service storage container environments.

The solutions are designed to manage storage networking challenges, so data is accessible across the user organization’s hybrid cloud infrastructure, with scalable AI and security features.

Amazon Simple Storage Service is just one of Amazon’s cloud storage solutions. This object storage service is a scalable and secure infrastructure for organizations looking to virtually store and protect their data. Users can use the solution for structured and unstructured data to create and scale their own data lake in a secure environment.

AWS provides services for AI, HPC (high-performance computing), machine learning, and media data processing that users can run on their data lakes, enabling them to gain insights and information about their stored data. The solution also supports integrations with many third-party service providers, so users can easily analyze and transform their data.

With data lakes, users can remove data silos and gain insights by analyzing diverse datasets. Transferring data to the Amazon Simple Storage Service is simple with the AWS data transfer services for hybrid cloud storage, online data transfer, and offline data transfer.

5 Best Data Storage Solutions for BI

Best 7 cyber security tools for threat hunters. The tools can be used for threat detection and response, threat hunting and more.

Cyber security is one of the biggest challenges of our time.

Cyberbeveiliging is een van de grootste uitdagingen van onze tijd.

This overview will highlight some of the best cyber security tools for threat hunters and anyone that works in the cyber security industry. In most cases, cyber security tools should speed up the process of performing:I have included the tools which I use myself. It is impossible to list all of the cyber security tools in the world, but I hope that this selection will help you forward.

De genoemde cyberbeveiligingsinstrumenten hebben eenvoudig te gebruiken dashboards, en de meeste ondersteunen API-toegang. In dit overzicht worden enkele van de beste cyberbeveiligingstools belicht voor threat hunters en iedereen die werkzaam is in de cyberbeveiligingsindustrie. In de meeste gevallen moeten cyberbeveiligingsinstrumenten het proces van uitvoering versnellen:Ik heb de hulpmiddelen opgenomen die ik zelf gebruik.

Cyber security demands that you remain on top, and by good fortune, there are some good cyber security tools which I will list down for you to try out. The mentioned cyber security tools have easy-to-use dashboards, and most of them support API access.

This overview will highlight some of the best cyber security tools for threat hunters and anyone that works in the cyber security industry.

In most cases, cyber security tools should speed up the process of performing:

I have included the tools which I use myself. I like the accessability of these tools and the fact that API requests is supported. This means that I can automate a lot of tasks and I can quickly get the info I want via these cyber security tools. It is impossible to list all of the cyber security tools in the world, but I hope that this selection will help you forward.

The Shodan.io search engine is a very powerful cyber security tool. It allows you to hunt with their massive list of available queries. You can quickly identify Cobalt Strike C2 servers, vulnerable systems, open directories and a lot more. In the best case, you can use Shodan to hunt and to monitor your IT infrastructure.

This is one of the biggest online malware repositories that you can find. Virustotal allows anyone to utilize the 50+ antivirus engines which they have included in their (malware) sandbox system. You can search for hashes, domains and URLs, and if there is a report available, you will get a lot of details that can help you to perform cyber security steps such as:

This online community by Alienvault shares details (pulses) on cyber attacks, these pulses contain IOC information and references to blogs and articles which discuss malware and cyber attacks. Alienvault is free to use and the community also allows API access.

Wireshark will come back in any list that you will find online. This network traffic analysis tool allows quick access to captured (or streaming) network data, it makes the data visible to the eye and it allows the user to create filters (these can be signature to detect malware).

A lot of XDR solutions and cyber security monitoring tools actually store network data in the form of a PCAP. These PCAP’s can be opened by Wireshark, so yes, this tool is a must have in any arsenal.

SNORT is a powerful intrusion prevention system (IPS). Once it is configured and used correctly SNORT can become part of your cyber security process. SNORT is open-source and the community behind it is very active. SNORT can detect various types of attacks, it works on any platform and is often used to perform real-time network traffic analysis. This is yet another great cyber security tool which has proven itself over the years.

Cyber security tools enable the usage of various checksums such as SHA1, SHA256, MMH3 and MD5. This tool focuses on getting the MMH3 checksum of Favicons.

Once the MMH3 favicon checksum has been found, the checksum can be used by cyber security engineers and threat hunters to create detection signatures and hunting signatures. For example, it can be used to find websites which are using the same Favicon.

TinEye allows anyone to search the web for an picture. Using TinEye to identify phishing attacks or fake profiles is a use-case. It has been created to try out different methods and techniques to identify matching images on the web, the counterpart is Google Image Search. The TinEye API is well documented and you can include it in any of your programs.

MXtoolbox is one of those sites that just won’t go away (thankfully). They provide a list of tools which allows anyone to perform active look-ups. The site has a tool that allows blacklist check-ups on IP addresses and domains, this allows any cyber security analyst to perform a quick external blacklist check.

The queries you can perform on MXtoolbox;

AIL is a modular framework made by CIRCL for analyzing potential information leaks from unstructured data sources. This means that you can add any feed or source and stream it towards AIL.The AIL framework is flexible and can be extended to other uses.

Cybersecurity is an ongoing task: you must constantly scan for threats, check for vulnerabilities in your network, and take corrective action. A proactive approach where you use the right cyber security tools to simulate attacks, patch vulnerabilities to prevent (network) breaches and quickly identify a will help you stay on top and move faster on threats.

Cyber security can be challenging, and the right tools and expertise can help you to configure your environment or task to be performed correctly, done right, it can completely change the way you do cyber security.

Best 7 cyber security tools for threat hunters

NetBSD Kernel stat System Call Uninitialized Memory Information Disclosure Vulnerability

A vulnerability in the net operating system has been identified as a flaw.

Een kwetsbaarheid in het net besturingssysteem is geïdentificeerd als een fout.

This vulnerability allows local attackers to disclose sensitive information on affected installations of NetBSD Kernel. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. An attacker can leverage this in conjunction with other vulnerabilities to escalate privileges and execute arbitrary code in the context of the kernel.

Deze kwetsbaarheid stelt lokale aanvallers in staat om gevoelige informatie vrij te geven op getroffen installaties van de NetBSD Kernel. Een aanvaller moet eerst de mogelijkheid krijgen om code met beperkte rechten uit te voeren op het doelsysteem om dit lek te kunnen misbruiken. Een aanvaller kan hier gebruik van maken in combinatie met andere kwetsbaarheden om privileges te laten escaleren en willekeurige code uit te voeren in de context van de kernel.

This vulnerability allows local attackers to disclose sensitive information on affected installations of NetBSD Kernel. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the stat system call. The issue results from the lack of proper initialization of memory prior to accessing it. An attacker can leverage this in conjunction with other vulnerabilities to escalate privileges and execute arbitrary code in the context of the kernel.

ZDI-22-1067

Apple macOS Remote Events Memory Corruption Remote Code Execution Vulnerability

A flaw in Apple's operating system is being exploited by remote attackers.

Een fout in het besturingssysteem van Apple wordt uitgebuit door aanvallers op afstand.

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Apple macOS. Authentication is not required to exploit this vulnerability. An attacker can leverage this vulnerability to execute code in the context of the AEServer process.

Deze kwetsbaarheid stelt externe aanvallers in staat om willekeurige code uit te voeren op aangetaste installaties van Apple macOS. Het probleem is het gevolg van het ontbreken van de juiste validatie van door de gebruiker ingevoerde gegevens, wat kan resulteren in een toestand van geheugencorruptie. Een aanvaller kan dit lek gebruiken om code uit te voeren in de context van het AEServer proces.

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Apple macOS. Authentication is not required to exploit this vulnerability.

The specific flaw exists within Apple Remote Events. The issue results from the lack of proper validation of user-supplied data, which can result in a memory corruption condition. An attacker can leverage this vulnerability to execute code in the context of the AEServer process.

Private Network Access (PNA) (zelfstandig naamwoord)

Vergelijkbare publicaties

BlackGuard Infostealer Malware: Ontleden van de status van ge-exfiltreerde gegevens

Nederlandse hacker vindt lek in MacOS Apple

5 beste oplossingen voor gegevensopslag voor BI

Beste 7 cyberbeveiligingstools voor bedreigingsjagers

ZDI-22-1067

ZDI-22-1065

Gevonden topics

Proton VPN werkt niet met Netflix? Probeer deze oplossing

Delfts QuTech richt quantum-testbed op

Aanvallers zoeken naar blootliggende "LuCI" mappen: Help me deze aanval te begrijpenAttackers Search For Exposed "LuCI" Folders: Help me deze aanval te begrijpen, Auteur: Johannes Ullrichisc, sans, internet, beveiliging, bedreiging, worm, virus, phishing, hacking, kwetsbaarheid