Barracuda

Security, Access and Reliability for Cloud-Connected Networks and Applications

Header Right

Main navigation

Barracuda

Cybersecurity Has Become a Major Liability for Online Retailers

by

Once again cybersecurity issues pertaining to online retailers are back in the spotlight. Newegg, an online retailer, reported this week that credit card data it collected had been compromised. That breach follows similar attacks against online sites operated by British Airways and Ticketmaster that are being attributed to a team of cybercriminals known as Magecart that injected malicious JavaScript code that skimmed credit card data into the Newegg website.

It’s still anybody’s guess just how widespread these types of attack have become. But a report published this week by SecurityScorecard, a provider of cybersecurity rankings, finds that over 90 percent of the retail domains analyzed indicated non-compliance with the Payment Card Industry Data Security Standard (PCI DSS) standard. Based on an analysis of 1,444 domains in the retail industry that digital footprints consisting of more than 100 IP addresses, the 2018 SecurityScorecard Retail Cybersecurity Report also notes that in terms of application security the retail sector ranks second to last among all the vertical industries tracked.

'Web application attacks are becoming more sophisticated and harder to detect.' ~@mvizard Click To Tweet

Barracuda Vulnerability Manager and Remediation Service
The Shortest Path to Protecting Your Web Applications

[Read more…] about Cybersecurity Has Become a Major Liability for Online Retailers

Mike Vizard

Mike Vizard has covered IT for more than 25 years, and has edited or contributed to a number of tech publications including InfoWorld, eWeek, CRN, Baseline, ComputerWorld, TMCNet and Digital Review. He currently blogs for IT Business Edge and contributes to CIOinsight, The Channel Insider, Programmableweb and Slashdot. Mike also blogs about emerging cloud technology for SmarterMSP.

Connect with Mike on LinkedIn, Twitter, and Google+.

https://www.linkedin.com/in/michaelvizard

Total Email Protection Bundle Now Available

by

We are pleased to announce that Barracuda’s Total Email Protection bundle is now available to partners worldwide. The bundle brings together our full email security portfolio — Barracuda Essentials, Barracuda Sentinel, and Barracuda PhishLine — in a single SKU, making it simpler for partners to provide their customers with a layered defense against email-borne threats.  You can read the press release here.

When purchased together, Barracuda Essentials, Barracuda Sentinel, and Barracuda PhishLine offer a 360-degree view of email security by providing gateway security, data protection, AI-based targeted threat protection, and user awareness training.

Simplifying sales conversations

The Barracuda team developed this bundle in direct response to requests from our partners. We understand that you’re always looking for ways to simplify sales conversations and close deals faster, and this bundle helps make that possible. Combining these complementary services in a single SKU lowers deal friction, reduces administration, speeds up your sales cycle, and simplifies the purchase process for you as a channel partner.

[Read more…] about Total Email Protection Bundle Now Available

Ezra Hookano

As VP, Channels at Barracuda Ezra is responsible for the direction of Barracuda's channel sales organization and its channel community. He has 25 years of indirect sales experience and a strong record of success growing channel organizations for multiple companies.

http://www.barracuda.com

Threat Spotlight: Barracuda study finds account takeover incidents widespread, most commonly used for phishing campaigns

by

This Threat Spotlight was authored by Asaf Cidon with research support from Grant Ho of the Barracuda Sentinel team.

Account takeover incidents, where attackers steal the credentials of employees and use them to send emails from the user's real account, are increasing in frequency and magnitude.  In this Threat Spotlight, we take a closer look at the motives and demographics behind these attacks.

Highlighted Threat: 

Account Takeover – attackers attempt to steal user credentials in order to launch attacks from an internal account. 

The Details:

Account takeover (ATO) attacks have multiple objectives.  Some attackers try to use the hacked email account to launch phishing campaigns that will go undetected, some attackers steal credentials of other employees and sell them in the black market, and others use the account to conduct reconnaissance to launch personalized attacks. The most sophisticated attackers steal the credentials of a key employee (e.g., CEO or CFO), and use them to launch a Business Email Compromise attack from the real employee's email address.

[Read more…] about Threat Spotlight: Barracuda study finds account takeover incidents widespread, most commonly used for phishing campaigns

Asaf Cidon

Asaf Cidon is vice president of content security services at Barracuda Networks. In this role, he is one of the leaders for Barracuda Sentinel, the company's AI solution for real-time spear phishing and cyber fraud defense. Barracuda Sentinel utilizes artificial intelligence to learn the unique communications patterns inside customer organizations to identify anomalies and guard against these personalized attacks. Asaf was previously CEO and co-founder of Sookasa, a cloud storage security startup that was acquired by Barracuda. Prior to that, he completed his PhD at Stanford, where his research focused on cloud storage reliability and performance. He also worked at Google’s web search engineering team. Asaf holds a PhD and MS in Electrical Engineering from Stanford, and BSc in Computer Engineering from the Technion.

Connect with Asaf on LinkedIn.

http://www.barracuda.com

Now Available for MSPs: Barracuda Content Shield

by

We are delighted to introduce Barracuda Content Shield, the most recent addition to the Barracuda MSP portfolio of security and data protection solutions.

Barracuda Content Shield is a web threat protection and content filtering solution specifically designed to help MSPs protect their customers against malicious sites and the risks associated with inappropriate content. It’s a cloud-based solution that relies on Barracuda’s extensive threat intelligence network to provide timely, up-to-date protection, even against threats that may be lying dormant.

[Read more…] about Now Available for MSPs: Barracuda Content Shield

Chris Crellin

Chris Crellin is Senior Director of Product Management for Barracuda MSP, a provider of security and data protection solutions for managed services providers, where he is responsible for leading product strategy and management.  Connect with him on LinkedIn here.

https://www.barracudamsp.com

Cybersecurity and Business Leaders Need to Find Better Way to Communicate

by

Given the number of security breaches making headlines these days, cybersecurity professionals might legitimately be wondering if anybody is really listening to them. The news on that front is decidedly mixed.

On the plus side a survey of over 450 companies conducted by the Economist Intelligence Unit (EIU) on behalf of Willis Towers Watson, a global advisory, broking and solutions company, finds almost 40 percent of business executives surveyed felt that the board should oversee cybersecurity, compared with 24 percent who felt it should be the role of a specialized cybersecurity committee. A small portion of respondents surveyed believed it should be the responsibility of audit, risk or some other subgroup.

[Read more…] about Cybersecurity and Business Leaders Need to Find Better Way to Communicate

Mike Vizard

Mike Vizard has covered IT for more than 25 years, and has edited or contributed to a number of tech publications including InfoWorld, eWeek, CRN, Baseline, ComputerWorld, TMCNet and Digital Review. He currently blogs for IT Business Edge and contributes to CIOinsight, The Channel Insider, Programmableweb and Slashdot. Mike also blogs about emerging cloud technology for SmarterMSP.

Connect with Mike on LinkedIn, Twitter, and Google+.

https://www.linkedin.com/in/michaelvizard

Barracuda WAF recognized as a Challenger in 2018 Gartner Magic Quadrant

by

We are pleased to announce that the Barracuda Web Application Firewall (WAF) has been recognized as a Challenger in the 2018 Gartner Magic Quadrant for Web Application Firewalls.  We have details in the press release here.

What is the Gartner Magic Quadrant?

The Gartner Magic Quadrant (MQ) is an enterprise-focused and easily recognizable, graphical representation of an IT market or segment and is one of the most influential analyst reports published today. It allows for a vendor landscape to be consumed “at a glance” and it is generally the report of choice for many, from c-suite executives to product managers, to quickly gain insight into who the major players are. Vendors are ranked on two axis: Completeness of Vision (solution strategy, roadmap, and future potential) and Ability to Execute (how does the vendor perform against that strategy, including revenue and market share totals) and placed into one of four quadrants ranging from Leaders (upper right) to Niche (lower left).

Download a complimentary copy of the Gartner Magic Quadrant for Web Application Firewalls

[Read more…] about Barracuda WAF recognized as a Challenger in 2018 Gartner Magic Quadrant

Anthony Kros

Anthony (Tony) Kros is the Analyst Relations Manager for Barracuda.  Connect with him on LinkedIn here.

https://www.barracuda.com

Gaining ‘The Attacker Perspective’

by

It may seem counter-intuitive to place the motives and methods of attackers on a pedestal, but there is immense value in doing so. Today’s threat landscape demands an ongoing role reversal; which is the ability and desire to emulate the thought process and real-world methodologies of attackers in order to gain visibility and an advantage over the countless “what-if” scenarios that we face.

'The motives of an attacker will have a strong influence on the methods they employ to get what they want.' Click To Tweet

Visualizing what it is that an attacker wants is an important step because it provides us context into the motives portion of an attack. Many people still think that motives are purely financial or one-dimensional, but modern attacks are driven by a wide range of evolving motives. Let’s position our discussion around just a few of these:

[Read more…] about Gaining ‘The Attacker Perspective'

Dennis Dillman

Dennis Dillman is VP of Product Management at Barracuda.

https://www.barracuda.com

Free webinar series – Comprehensive Security for K-12 – Reserve Your Place Now

by

Happy Back-to-School! Make sure your IT security and compliance investments are up to date and ready for this year’s trending threats. Join us for a pair of webinars and get the info you need to harden your school’s IT against the newest threats targeting K-12 organizations—using real-world case studies that show you just how your peers are creating safer, more enriching IT environments for enhanced learning.

Webinar #1: Network and Web Security for the 2018-19 School Year

Enjoy a deep dive into the emerging challenges you face around ensuring student safety and regulatory compliance—including advanced threats, escalating costs, and limited resources.

See for yourself how to:

  • Protect against advanced threats including ransomware
  • Enforce content policy on all devices including Chromebooks
  • Reserve bandwidth for critical applications such as testing apps
  • Secure data privacy for students, faculty, and staff

Date: September 18 at 11am PDT

Register here.

[Read more…] about Free webinar series – Comprehensive Security for K-12 – Reserve Your Place Now

Jennifer Braun
http://www.barracuda.com

Migrating Websites and Applications to the Public Cloud — is that Secure?

by

In this customer story, we show you how Barracuda helped a global food producer and processor migrate to the cloud.

Customer: Smithfield Foods is the world's largest producer and processor of pork products. They have been in business for over 80 years and now employ 52,000 people worldwide.

Customer Challenge: To migrate all external-facing websites and applications to the public cloud while ensuring security against cyber threats

Public Cloud Platform: Amazon Web Services (AWS) for scalability and rapid provisioning

Barracuda Solution: Barracuda Web Application Firewall, for its features, simplicity, native integration with AWS, and cost-effectiveness

[Read more…] about Migrating Websites and Applications to the Public Cloud — is that Secure?

Christine Barry

Christine Barry is chief blogger and social content manager at Barracuda.