• Search for:
    20Apr, 2023
    Augmented Reality Stats You Need To Know in 2023

    Virtual reality is everyone’s favorite futuristic technology, but the augmented reality (AR) market is not far behind. While the former can temporarily transport you into another realm altogether, augmented reality aims to enhance your existing natural environment.

    With AR cameras, information about the world around you becomes digitally manipulated but, more importantly, interactive. This technology creates an overlay of virtual content in the real world through computer vision and object recognition.

    In short, any artificial experience that complements our existing reality represents AR. If you’re just hearing about it, you may be wondering how many people know about this technology, its useful purposes, and what we can expect from this market.

    To answer these questions, let’s see what augmented reality stats say on the topic and find out where the AR industry is at the moment and where it is going.

    General Augmented Reality Market Stats

    How large is the augmented reality market? Is it just a fad or a rising giant? Let’s check what the stats on augmented reality have to say on the topic.

    The Augmented Reality Market is estimated to exceed $50 billion by 2024.

    (Global Market Insights)

    In 2016, the AR market was worth a mere $1 billion, but its growth rate between 2013 and 2016 can serve as an excellent benchmark for future predictions. The compound annual growth rate (CAGR) for the AR industry between 2017 and 2024 should be around 65%, reaching $50 billion by 2024.

    However, these estimates are currently underestimating the AR market. In 2017, it was worth a whopping $3.5 billion, and the newest augmented reality market forecast places its value at $198 billion in 2025.

    In 2022, mobile augmented reality revenue is estimated to reach $12.8 billion.

    (Statista)

    Augmented reality complements mobile devices impeccably, as can be seen through the remarkable growth of the industry in this sector. With the announcement of the Metaverse, and the growing number of other AR-related options, even the doubling of revenue expected by 2025 might prove to be a serious underestimation.

    Investments in AR technology are growing, and $18.8 billion was invested in AR in 2020.

    (Threekit)

    The $18.8 billion invested in the augmented reality industry in 2020 marks a 78.5% increase compared to 2019.

    In 2020, the world invested $12 billion into VR/AR gaming.

    (IDC)

    Gaming holds the most potential for VR investment, as well as AR; right below this industry, $4.1 billion was invested in AR training, and the same amount was invested in industrial maintenance. AR statistics the same year show that $2.7 billion was invested in AR-powered retail showcasing.

    The AR and VR consumer segment had the majority spending share in 2020, at 53%.

    (IDC)

    The next segment to mark the highest spending was distribution and services at  15.8%, followed by manufacturing and resources at 13.8%, the public sector at 12.7%, and infrastructure at 3.2%. The other sectors shared the remaining 1.6%.

    The latest wave of augmented reality hype can be credited to the reappearance of Pokémon Go in 2016.

    (Nikkei Asia)

    The Pokémon Go craze played an essential part in raising awareness about this new technology and is often credited as one of the pioneering augmented reality products. With over 800 million downloads, this game was heavily rewarded for its efforts, as Niantic and Nintendo pocketed around 1.92 billion U.S. dollars in revenue from the joy it brought players.

    The AR glasses market is expected to be worth $883.4 million by 2025.

    (GlobeNewswire)

    The $143.8 million these gadgets provided in revenue in 2017 prove that there is a significant, but as of yet not fully tapped market, for these goods. The estimates expect its CAGR between 2021 and 2025 to reach 17.8%.

    The AT and VR adoption rate is projected to result in almost 19 million units sold annually by 2023.

    (Statista)

    Facebook’s recent renaming and metaverse announcement raised expectations for the sale of AR and VR headsets. Due in no small part to that, the sales of VR and AR headgear nearly doubled from 2020 to 2021, and are expected to double again in 2023.

    In 2008, BMW used AR to advertise the MINI.

    (BMW AG)

    BMW’s MINI advertising campaign in 2008 was one of the first ones to use augmented reality marketing. The German company designed a printed ad published in magazines, which would generate a virtual model of the car on the page if it was held in front of a computer camera.

    Since the virtual model was connected to markers in the magazine, users could change their point of view and control the car by manipulating the paper. It was also one of the first campaigns that allowed real-time interaction with a digital model.

    AR Adoption by Industry

    AR has numerous potential applications outside of the gaming world that have yet to be tested and explored. Let’s see which industries are recognizing AR’s value.

    88% of medium-sized businesses are already using or testing AR for some purposes.

    (Deloitte)

    Research shows that many growing enterprises are leveraging AR to assist them in different aspects of running their business. This technology has proven very useful in assisting product development, but also fostering collaboration, more effective training, and communication.

    In 2020, only 1% of retailers used AR or VR to enhance their customers’ shopping experience.

    (Threekit)

    As shopping moves further and further online, the demands from users for more convenient processes grow, especially for trying out clothes. Unfortunately, only 1% of retail companies were using augmented reality to assist users in their shopping in 2020. AR can help customers understand what they are buying better, significantly increase retailer sales and customer satisfaction in the process, and reduce returns and the costs associated with them.

    AR in the gaming industry reached $6.39 billion in value in 2021.

    (IMARC)

    In the next five years, with an estimated CAGR of 33.8%, this section of the AR market is predicted to reach $38 billion.

    Gaming, healthcare, and engineering have the most use cases for AR.

    (Statista)

    These three fields benefit the most from implementing augmented reality products. Compared to that, 5% of AR use would be in retail. On the other hand, 67% of advertising agencies already say they are making use of AR; for comparison, in 2017, just 29% of marketing agencies had invested in augmented reality ads.

    The global automobile AR/VR market will reach $673 billion by 2025.

    (Statista)

    The automotive market is another one that benefits from implementing augmented reality. Implementing this type of technology into cars by adding it to the cameras can help display hazards, historical landmarks, and other vital markings. Augmented reality market research estimates that this application will reach over $673 billion, with a CAGR of over 175% from 2018 to 2025.

    (GlobeNewswire)

    The importance of AR technology in the healthcare industry will only increase. This is not surprising, as it has great potential to introduce valuable changes to diagnostics, surgery, and education of new healthcare professionals, among other benefits. 

    Augmented Reality Consumer Stats

    While AR is slowly finding its way into many industries, how familiar is the average person with its benefits? Are they interested in virtual reality whatsoever, or do they think this is something only gamers would understand – just another fad? 

    Let’s check what the consumer demographic statistics have to say on the topic.

    In 2017, only 31% of Americans knew what augmented reality is.

    (IBTimes)

    Five years ago, this was a discouraging number. However, on the bright side, 70% had heard about it but were unsure of what it was. In 2022, knowledge about this technology is more pervasive, but it hovers between 70% to 75% for people between the 16-44 age group. On the downside, research on augmented reality awareness shows this percentage drops significantly for other age groups – for example, only 56% of people in the 45-54 age group were familiar with AR.

    In 2020, 83.1 million consumers used AR every month.

    (Threekit)

    This amounts to approximately 25% of the US population. This level of adoption represents an excellent opportunity for the augmented reality market size to grow. Adoption statistics tell us that AR is primarily attractive to younger audiences, something AR companies should consider when planning campaigns.

    The global AR user base is predicted to count 216 million users by 2025.

    (GlobeNewswire)

    This estimation may be an underestimation, especially considering the success AR has been having among mobile users. Pokémon Go might have started the trend and set the base for this estimate. Still, the filters available on Snapchat and Instagram, together with other upcoming projects that rely heavily on AR, such as the metaverse, may prove this AR stat wrong.

    70% of consumers believe AR can be helpful in learning new skills.

    (Finance Online)

    People familiar with it consider AR highly valuable for obtaining new skills. 67% thought that AR would benefit healthcare, and a slightly lower percentage (64%) felt shopping could be massively improved through this emerging technology.

    Software access is the biggest obstacle to the mass adoption of XR, and by extension, AR.

    (Perkins Coie’s)

    This is a shift from 2019 and 2018, when bulky gear and poor user experience were the biggest issues in the future of augmented reality, respectively. Other current worries include user experience (cited by 65% of respondents), content offerings (53%), and consumer costs (27%).

    In 2019, 38% of users believed that AR needs to become more advanced to make gameplay more enjoyable.

    (Ericsson)

    Furthermore, 36% of users would have liked batteries on AR gear to last longer, and the same percentage would have preferred AR apps and glasses to become cheaper. Another 36% agreed that AR games couldn’t yet fit personal preferences. An interesting piece of augmented reality data is that only 31% cited multiplayer as their main point, but 32% agreed that AR should be combined with exercise and other physical activities.

    AR Benefits

    We’ve seen how AR affects different sectors and how its adoption is looking, but what do the people who are actually using it think? What are the biggest benefits of AR for the people using it?

    72% of US consumers say that better collaboration is one of the top four benefits of AR at work.

    (Finances Online)

    The other three benefits listed in this survey were increased efficiency (69%), adoption of new business models or offerings at 68%, and better marketing (61%). This somewhat answers the “How is augmented reality used in businesses?” question and might offer excellent insight to companies wondering whether they should implement AR. Overall, it’s safe to say that more than half of the employees interested in AR found it helpful in the work environment.

    71% of customers say they would probably shop more often if they used AR.

    (ThinkMobiles)

    Online shopping seems to be on a never-ending upward streak. However, it is not without disadvantages: Approximately 27% of customers returned goods because they weren’t “as described.” 

    AR adoption would allow users to virtually “try before they buy” – an important aspect of a successful brick-and-mortar shopping experience, and its most significant edge over the online shopping sphere. If applied well, AR would allow shoppers to make more confident decisions and purchases, adding another layer of convenience to the online shopping process, and preventing return costs for sellers.

    Implementing AR could lead to 40% higher conversion rates. 

    (Threekit)

    As some previous augmented reality retail stats emphasized, AR allows for a “try before you buy” approach to online shopping, so adopting this technology into your offer would likely result in a significant increase in your sales. Furthermore, the same approach might reduce return rates, which have been substantially growing in recent years, while increasing post-purchase satisfaction and customer loyalty.

    Resource : https://dataprot.net/statistics/augmented-reality-stats/

    20Apr, 2023
    Top 10 Cybersecurity Trends for 2023: From Zero Trust to Cyber Insurance

    As technology advances, cyberattacks are becoming more sophisticated. With the increasing use of technology in our daily lives, cybercrime is on the rise, as evidenced by the fact that cyberattacks caused 92% of all data breaches in the first quarter of 2022. Staying current with cybersecurity trends and laws is crucial to combat these threats, which can significantly impact business development.

    In 2023, the cybersecurity market is expected to see new trends, and businesses must be adequately prepared for any developments. Andrey Slastenov, Head of Web Security at Gcore, shares his insights on these trends in this article.

    1 — Application security#

    As businesses shifted online to stay afloat during the pandemic, the forecast for application security spending is projected to surpass $7.5 billion, according to Statista.

    However, every application might be susceptible to hacking, zero-day attacks, and identity theft. Ensuring application security demands professionals write secure code and design secure application architecture, implement robust data entry verification, and address vulnerabilities promptly to prevent unauthorized access or modification of application resources.

    2 — Cloud security#

    According to more data by Statista, cloud security is the fastest-growing segment in the IT security market, with a projected growth of nearly 27% from 2022 to 2023. This is mainly due to the increasing demand for cloud solutions in the wake of the COVID-19 outbreak. While more companies are choosing cloud data storage for its convenience and faster accessibility, there is also a growing need to secure cloud data during both transmission and storage to prevent unauthorized access.

    3 — Mobile security#

    The mobile phone has replaced our trips to the banks, stores, and outings with friends. With just a few taps in an app, we can order any service or product without leaving the couch. Every app stores our data, search and order history, and location information. The number of attacks in this sector will continue to grow along with the market, and malicious actors will exploit simple opportunities in e-commerce, banking services, and online booking to take advantage whenever possible.

    4 — IoT#

    As a result of home automation using IoT, the supply of devices for “smart” homes is expected to reach 1.8 billion by 2025. Smart devices, smart homes, and voice assistants have become integral to our lives. However, we need to remember that each such device can be hacked and taken over by a cybercriminal. For example, the percentage of hacking automotive systems is growing—safety airbags, climate control, and other essential functions are increasingly connected to the Internet. It is expected that with the expansion of the number of automated vehicles on the roads in 2023, the number of attempts to take them over or eavesdrop on conversations will also rise.

    5 — Remote work and attacks on corporate networks#

    Remote work has relaxed the control companies have over their employees’ safe use of data. Cybercriminals, along with those engaged in phishing and social engineering, have taken advantage of this loophole, using increasingly sophisticated attack methods to compromise networks.

    Secure authentication management and authorized access to company data are the main methods of protecting this sector.

    As mentioned above, social engineering is still a factor to be reckoned with and is also evolving. Over the years, attacks have become multi-channel, meaning that the same user receives phishing emails and is targeted through SMS and social media.

    6 — Cyber insurance#

    As cyberattacks and the levels of risk associated with them continue to grow, so do new related industries designed to mitigate these risks, including cyber insurance. Organizations turn to it to minimize threats and financial losses from attacks.

    To obtain full insurance coverage, demonstrating a company’s proper level of protection is increasingly becoming mandatory. Small and medium-sized enterprises may need help meeting the cyber insurance requirements that keep company data safe.

    7 — Zero trust does not replace VPNs—yet#

    The concept is based on “never trust, always verify.” In a zero-trust environment, users are constantly checked, reassessed, and reauthenticated using multiple authentication methods.

    Gartner believes that Zero Trust Network Access (ZTNA) is the fastest-growing form of network security, which will grow by 31% in 2023 and completely replace VPNs by 2025.

    8 — Artificial intelligence#

    Artificial intelligence (AI) has already been successfully used in cyber defense. It is expected to become even more prevalent in 2023, particularly in monitoring, resource and threat analysis, and rapid response capabilities.

    9 — Attack detection tools are no longer a luxury#

    Each attack potentially leads to severe consequences because safeguards are either not in place or currently unavailable. A successful data breach can cost millions of dollars, and the amount depends directly on the type of attack and its duration, as well as the loss of reputation, customer loyalty, and the customers themselves. There are no forecasts or guarantees for any specific business or industry—any company that stores data on a network can be attacked.

    The only way organizations can stop an attack or reduce its impact is to identify unusual activity across their entire ecosystem of users, applications, and infrastructure. That is why providers will increasingly use AI and ML.

    Gartner predicts that the demand for cloud-based solutions for detection and response will significantly increase in the coming years.

    10 — Outsourcing cybersecurity#

    As cyberattacks become increasingly sophisticated, many companies need help to ensure a high level of security on their own. Therefore, the trend of protecting companies with expert service providers will flourish. Undoubtedly, cyber insurance has raised the bar for the level of protection, and now service providers will face higher demands.

    Resource : https://thehackernews.com/2023/04/top-10-cybersecurity-trends-for-2023.html

    13Apr, 2023
    SAP releases security updates for two critical-severity flaws

    Enterprise software vendor SAP has released its April 2023 security updates for several of its products, which includes fixes for two critical-severity vulnerabilities that impact the SAP Diagnostics Agent and the SAP BusinessObjects Business Intelligence Platform.

    In total, SAP has released 24 notes, 19 of which concern new issues of varying importance, and five are updates to previous bulletins.

    The three most critical issues fixed this time are:

    • CVE-2023-27267: Insufficient input validation and missing authentication issue impacting the OSCommand Bridge of SAP Diagnostics Agent, version 720, enabling an attacker to execute scripts on connected agents and fully compromise the system. (CVSS v3.1 score: 9.0)
    • CVE-2023-28765: Information disclosure vulnerability impacting SAP BusinessObjects Business Intelligence Platform (Promotion Management), versions 420 and 430, allowing an attacker with basic privileges to gain access to the lcmbiar file and decrypt it. This would enable the attacker to access the platform’s users’ passwords and take over their accounts to perform additional malicious actions. (CVSS v3.1 score: 9.8)
    • CVE-2023-29186: Directory traversal flaw impacting SAP NetWeaver versions 707, 737, 747, and 757, allowing an attacker to upload and overwrite files on the vulnerable SAP server. (CVSS v3.1 score: 8.7)

    The remaining 11 security flaws disclosed in SAP’s latest security bulletin concern low to medium-severity vulnerabilities.

    While such issues are generally not considered a priority for patching, they are still leveraged in attacks, especially as part of complex attack chains, so they should be taken care of nonetheless.

    Speedy patching important

    Hackers are always on the look for critical-severity flaws in widely deployed products like those of SAP, which are commonplace in large corporate networks.

    SAP is the largest ERP vendor in the world, having 24% of the global market share with 425,000 customers in 180 countries. Over 90% of the Forbes Global 2000 uses its ERP, SCM, PLM, and CRM products.

    In February 2022, the US Cybersecurity and Infrastructure Security Agency (CISA) urged admins to patch a set of severe vulnerabilities impacting SAP business apps to prevent data theft, ransomware attacks, and disruption of mission-critical processes and operations.

    In April 2021, threat actors were observed attacking fixed flaws in unpatched SAP systems to gain access to corporate networks.

    Hence, it is crucially important for SAP system administrators to apply the available security patches as soon as possible.

    Resource : https://www.bleepingcomputer.com/news/security/sap-releases-security-updates-for-two-critical-severity-flaws/

    13Apr, 2023
    OpenAI launches bug bounty program with rewards up to $20K

    AI research company OpenAI announced today the launch of a new bug bounty program to allow registered security researchers to discover vulnerabilities in its product line and get paid for reporting them via the Bugcrowd crowdsourced security platform.

    As the company revealed today, the rewards are based on the reported issues’ severity and impact, and they range from $200 for low-severity security flaws up to $20,000 for exceptional discoveries.

    “The OpenAI Bug Bounty Program is a way for us to recognize and reward the valuable insights of security researchers who contribute to keeping our technology and company secure,” OpenAI said.

    “We invite you to report vulnerabilities, bugs, or security flaws you discover in our systems. By sharing your findings, you will play a crucial role in making our technology safer for everyone.”

    However, while the OpenAI Application Programming Interface (API) and its ChatGPT artificial-intelligence chatbot are in-scope targets for bounty hunters, the company asked researchers to report model issues via a separate form unless they have a security impact.

    “Model safety issues do not fit well within a bug bounty program, as they are not individual, discrete bugs that can be directly fixed. Addressing these issues often involves substantial research and a broader approach,” OpenAI said.

    “To ensure that these concerns are properly addressed, please report them using the appropriate form, rather than submitting them through the bug bounty program. Reporting them in the right place allows our researchers to use these reports to improve the model.”

    Other issues that are out of scope include jailbreaks and safety bypasses that ChatGPT users have been exploiting to trick the ChatGPT chatbot into ignoring the safeguards implemented by OpenAI engineers.

    ​Last month, OpenAI disclosed a ChatGPT payment data leak the company blamed on a bug in the Redis client open-source library bug used by its platform.

    Because of the bug, ChatGPT Plus subscribers began seeing other users’ email addresses on their subscription pages. Following an increasing stream of user reports, OpenAI took the ChatGPT bot offline to investigate an issue.

    In a post-mortem published days later, the company explained that the bug caused the ChatGPT service to expose chat queries and personal information for roughly 1.2% of Plus subscribers.

    The exposed info included subscriber names, email addresses, payment addresses, and partial credit card information.

    “The bug was discovered in the Redis client open-source library, redis-py. As soon as we identified the bug, we reached out to the Redis maintainers with a patch to resolve the issue,” OpenAI said.

    While the company didn’t link today’s announcement with this recent incident, the issue would’ve potentially been discovered earlier, and the data leak might’ve been avoided if OpenAI already had a running bug bounty program to allow researchers to test its products for security flaws.

    Resource : https://www.bleepingcomputer.com/news/security/openai-launches-bug-bounty-program-with-rewards-up-to-20k/

    12Apr, 2023
    Top 10 Ways NFT Tokens are Transforming the Gaming Industry

    The top 10 ways NFT tokens are transforming the gaming industry are creating new revenue streams

    Recently, NFT tokens have been all the rage in the gaming industry. The way games are played, purchased, and sold has been completely transformed by these digital assets. Unlike other digital assets, NFTs are unique and unreplaceable since they are held on a blockchain. As a result, both gamers and game developers can produce truly unique digital assets and unusual in-game products.

    NFTs have had such a big influence on gaming that many game creators have already started including them in their creations. The top 10 ways that NFT tokens are transforming the gaming industry will be covered in this article. NFT tokens are altering how we engage with games by giving players more control over their in-game possessions and generating new revenue sources for game producers. We will examine each of these advantages in more detail and how they are influencing gaming in the future. So, let’s get started and discover the fascinating ways that NFT tokens are transforming the gaming industry.

    1. Creating a New In-Game Economy

    The development of a new economy for in-game goods has been made possible by NFTs. NFTs may be bought, sold, and traded by players, giving them more control over their in-game possessions. This has also given game creators additional income opportunities, increasing their ability to profit from the selling of in-game goods.

    2. Giving In-Game Assets Genuine Ownership

    Players may own the assets they use in-game thanks to NFTs. This implies that users can move their assets across games, sell them for real money, or even give them as gifts to other users.

    3. Making Multi-Game Compatibility Possible

    The creation of assets that work with many games is possible using NFTs. This creates a smooth gaming experience by enabling gamers to utilize the same content across many games.

    4. Improving Interactions Throughout the Game

    NFTs can improve player-player interactions within games. NFTs that symbolize in-game accomplishments or milestones, for instance, can be made by game creators. On a player’s profile, these NFTs may be shown off, graphically displaying their in-game successes.

    5. Allowing for More Artistic Freedom

    By making in-game objects, NFTs provide game creators with more creative latitude. Developers may produce unusual and distinctive items that are more valuable to gamers, boosting retention and engagement.

    6. Promoting Field Loyalty

    NFTs can promote player loyalty by offering incentives for persistent gameplay. The creation of NFTs that are exclusive to players who have been engaged in the game for a specific period is one example of how game developers might use this technique.

    7. Making Crowdfunding Easier

    You can utilize NFTs to make crowdfunding for game development easier. Players may invest in the production of games and partake in the profits by purchasing NFTs, which are shares in the game’s development, from game creators.

    8. Development of a New Market for Video Game Collectibles

    Gaming collectibles now have a new market thanks to NFTs. Similar to collecting trading cards or other collectibles, players may amass rare and one-of-a-kind NFTs. This has given game creators additional sources of income and given gamers new ways to interact with the game.

    9. Creating a Trustworthy and Secure Market

    NFTs offer a safe and open market area for in-game goods. The assets that players purchase will be genuine and safe, and game creators will know that their assets are being sold for a reasonable price.

    10. Giving Blockchain Integration More Possibilities

    NFTs, give game makers additional ways to incorporate blockchain technology into their creations. This may result in in-game economies that are safer and more open, more inventive and compelling gaming features, and more creative flexibility for game designers.

    Resource : https://www.analyticsinsight.net/top-10-ways-nft-tokens-are-transforming-the-gaming-industry/

    12Apr, 2023
    Top 10 Cybersecurity Companies and Service Providers in 2023

    Here’s a list of companies and service providers that work for cybersecurity and are at the top tier in 2023


    Protecting sensitive data and important systems from online threats is known as cybersecurity. Cybersecurity measures also referred to as information technology (IT) security, are intended to counter attacks on networked systems and applications, whether those threats come from within or outside of an organization. Globally, a data breach cost an average of US$ 3.86 million in 2020, whereas it cost an average of US$ 8.64 million in the United States. The costs of finding and addressing the breach, the price of downtime and lost revenue, and the long-term reputational harm to a company and its brand are among these charges. Here’s a list of the top 10 cybersecurity service providers in 2023.

    1. Packetlabs Ltd: To help you safeguard your most important assets-your data and your customers-they provide a range of services, including infrastructure penetration testing, web and mobile application testing, social engineering, Security QA, red team exercises, source-code reviews, compromise assessments, and breach response.

    2. Edge Networks: Edge networks aid in network security analysis to guarantee that operations are always secured. Its services include continuous network and server performance enhancements as well as network monitoring, maintenance, and auditing. They also offer an analysis of access control to ensure that only authorized users can access data.

    3. Under Defense: The Under Defense team is made up of skilled and qualified cybersecurity specialists who work with enterprise-class organizations to offer a full range of engineering services and solutions for cyber security, such as cyber security assessments, compliance audits, product advisory services, threat and vulnerability management, incident detection and response, network & security architecture, implementation, and much more.

    4. Framework Securities: Framework Securities builds comprehensive cybersecurity plans and offers ongoing help to close vulnerabilities and keep your business safe. preventing security breaches as a result.

    5. Since 2010, Aligned Technology Solutions has assisted businesses in utilizing and managing technology to expand and secure their operations. An acknowledged leader in the field of technology services, aligned offers specialized and all-encompassing IT solutions for IT Outsourcing, Cybersecurity, Compliance, and Cloud Solutions. A fundraising consulting company receives IT and cybersecurity services from Aligned Technology Solutions. Additionally, they offer networking opportunities and strategy consulting to the company’s tech partners.

    6. Bytagig as a company has a strong love for small businesses. They operate under the tenet that every company, no matter how little, how start-up, or how established, needs professional IT advice. staging Provides your company with a variety of services, including server installation and maintenance, desktop setup and support, Microsoft Office assistance, IT project management, and more. Bytagig operates both online and locally in the Portland Metro region, which stretches from Salem to Vancouver.

    7. Leading managed services provider TPx is changing how businesses expand, compete, and communicate. TPx provides a comprehensive range of managed IT, unified communications, network connection, and security services and has the expertise to address even the most challenging IT issues.

    8. Sekurno is a virtual cybersecurity department that offers assistance to companies in obtaining security certifications and protecting themselves from monetary or reputational losses. They provide security services focused on identifying security flaws, developing firms’ security processes, and implementing security controls to lessen business risks.

    9. Datasec is a group of experts with 35 years of combined experience who were pioneers in the provision of staff, services, and solutions for IT governance, information security, cybersecurity, and business continuity. Datasec offers services for Ethical Hacking, Vulnerability Management, Assessment, and Deployment of Cybersecurity and Information Security Frameworks, with the most respected professional credentials.

    10. BetterWorld Technology has been a founding and accredited B Company for the past twenty-one years, providing impact-oriented managed IT solutions. BetterWorld focuses on your company’s technological requirements while helping the environment and people. BetterWorld’s tailored IT solutions help businesses of all sizes, from burgeoning startups to Fortune 500 companies to local, regional, and national non-profits.

    Resource : https://www.analyticsinsight.net/top-10-cybersecurity-companies-and-service-providers-in-2023/

    11Apr, 2023
    Noname Security releases API security updates

    API security vendor Noname Security today announced a new release of its platform, with a number of upgrades designed to enhance visibility into a user’s API environment and protect against the growing number of API-based threats.

    The growth in the number of those threats has been fueled by the increasing centrality of APIs to modern enterprise computing, Noname said in a press release. The company cited a recent report from IBM as saying that as many as two thirds of all incidents analyzed by IBM’s X-Force security team involved unsecured APIs.

    Noname’s latest updates cover a wide range of new capabilities, including customized discovery, Kubernetes features, simplified onboarding and more. The idea, according to the company, is to improve the solution’s coverage and allow it to work more quickly to discover potential vulnerabilities.

    “APIs are the connective tissue for the digital world,” said co-founder and CTO Shay Levi, in a statement.

    Visibility and discovery key to API security

    The updates, as a whole, are well-designed to target the most important parts of the broader API security issue, according to Forrester principal analyst Sandy Carielli. Visibility and discovery, for instance, are still a major challenge to many organizations. “Lots of companies don’t have a sense of what APIs are in their environments or what data is being used,” she said. “Any tooling improvements that add context to the discovery process, which this announcement talks about, I think will be good news for the organizations struggling to understand what they have.”

    Part of the problem that improved visibility attempts to solve is the presence of zombie APIs – which are APIs that have been depreciated or forgotten and aren’t in active use, but are still present on a company’s systems – and rogue APIs, which could be used to provide back doors into important subsystems.

    Testing APIs for vulnerabilities

    Testing, according to Carielli, is the other part of the API security landscape that is effectively addressed by Noname’s latest updates. Testing APIs for vulnerabilities can be time consuming based on the fact that they’re frequently not integrated in to development pipelines – as well as the aforementioned fact that there are increasingly large numbers of them present on the average company’s systems.

    “What jumps out to me about [Noname’s announcement] is the idea of leaving no API untested,” she said. “They’re looking not just at the tech but at the business logic aspects of APIs.”

    The new features are available now, and no pricing changes were announced.

    Resource : https://www.csoonline.com/article/3692248/noname-security-releases-api-security-updates.html

    11Apr, 2023
    Top cybersecurity M&A deals for 2023

    Uncertainty and instability marked the end of 2022 for many in the tech sector, a trend that bled into the beginning of 2023. Following on the heels of a drought in IT talent came mass layoffs at many of the world’s biggest tech companies as predictions of recession loomed and war in Ukraine dragged on with no end in sight.

    Global concern over cybersecurity has never been higher, with attacks coming fast and furious and in ever-growing numbers, and 65% of organizations planned to increase cybersecurity spending in 2023. That means CISOs may be pressured to do more with what they have as budgets shrink even as demand for security increases. And they should be aware of what could change if one of their vendors is acquired in this climate.

    Corporate deals have dropped from the highs of 2021 as well as investors proceed with caution, eyeing interest rate increases and the possibility of a recession. There were some indications that cybersecurity might be an outlier in 2023—that M&A activity might remain a little more robust than in other parts of the tech world. “There are abundant opportunities for innovation in cybersecurity as new technology breakthroughs, such as the near-human capabilities of ChatGPT, introduce new and largely unaddressed security risks,” DataTribe noted in its fourth-quarter 2022 Insights.

    While recognizing the ever-growing importance of cybersecurity and the ever-growing demand to protect against increasingly sophisticated—and numerous—bad actors, dealmakers are likely to be active but cautious in the year to come.

    Below are the deals that CSO has selected as the most significant of the year. (This list is updated periodically as new deals are announced.)

    Cisco agrees to buy Lightspin Technologies

    March 29: Software and service giant Cisco has agreed to buy privately held cloud security software Lightspin Technologies for an undisclosed amount. Lightspin offers end-to-end cloud security posture management (CSPM) across cloud-native resources. The company will join Cisco’s emerging technologies and incubation (ET&I) business.

    Mastercard acquires Baffin Bay

    March 20: Mastercard has bought Swedish cybersecurity firm Baffin Bay to increase its cloud-based protections. The company will integrate Baffin Bay’s cloud-based solution that uses AI technology to automatically filter and counteract malicious internet traffic into its current offerings. “The addition of Baffin Bay Network’s instantaneous, predictive and cloud-based  AI technology to our existing analytical capabilities will deliver a leading, singular cyber solution,” Mastercard said in a statement.

    HPE acquires Axis Security

    March 2: Hewlett Packard Enterprise (HPE) agreed to buy cloud security services provider Axis Security, its third acquisition since January, to deliver a unified secure access service edge (SASE) offering. The acquisition is aimed at incorporating the Axis security service edge (SSE) platform into HPE’s edge-to-cloud network security capabilities with to deliver integrated networking and security solutions as-a-service. HPE plans to integrate Atmos, an SSE offering by Axis Security, into Aruba, its platform for edge-to-cloud networking with AI-based network automation. “The convergence of Aruba and Axis Security solutions will transform edge-to-cloud connectivity with a comprehensive SASE solution that provides enterprises with the highest levels of security for both IoT devices and all users’ access across geographically distributed locations,” Phil Mottram, executive vice president and general manager, HPE Aruba Networking said in a statement.

    Online auction giant eBay Acquires 3PM Shield

    February 13: eBay acquired 3PM Shield, a provider of monitoring solutions designed to prevent the sale of counterfeit items, unsafe products and illegal goods. The purchase will help provide sellers and buyers with a safe and trusted platform and enhances eBay’s ability to address suspicious or harmful seller behavior and potentially problematic items. “3PM Shield has been a valued and effective external partner in helping eBay tackle these challenges and we look forward to unlocking additional capabilities as we bring their technologies in-house,” eBay Chief Risk Officer Zhi Zhou said in a statement.

    Accenture buys Brazil-based Morphus

    February 13:  New York-based Accenture has acquired privately held cyber defense, risk management, and cyber threat intelligence services provider Morphus for an undisclosed amount. Brazil-based Morphus provides red and blue team services; governance, risk, and compliance services; enterprise risk management; cyber strategy; threat intelligence; and managed security services. “The acquisition brings more than 230 highly skilled professionals, making Accenture one of the largest cybersecurity professional services providers in Brazil,” Accenture Security global leader Paolo Dal Cin said in a statement. The acquisition launches Accenture’s cyber industry practice in Latin America.

    Vista Equity Partners completes acquisition of KnowBe4

    February 1: Investment firm Vista Equity Partners completed its acquisition of security awareness training and simulated phishing platform KnowBe4 for $24.90 per share in cash, valuing the company at about $4.4 billion. “The human element remains one of the most important yet neglected aspects of cybersecurity,” Michael Fosnaugh, co-head of Vista’s Flagship Fund and senior managing director, said in a press release. “The opportunity to scale a business that is truly mission-critical to enterprises around the world is core to Vista’s investment approach and value creation efforts.” Vista focuses exclusively on acquiring enterprise software, data, and technology-enabled businesses.

    Radiant Logic signs definitive agreement to acquire Brainwave GRC

    February 1: California-based Radiant Logic entered into a definitive agreement to acquire French identity governance and analytics company Brainwave to accelerate the companies’ shared vision of an identity data fabric using data science to ensure the right information is in place to make the right policy decisions. “Demand is increasing for cybersecurity, governance, and compliance solutions that help companies address the continually evolving security threats, especially as regulatory environments and fines become more prevalent,” said Joe Sander, CEO of Radiant Logic, in a press release. The companies said the acquisition will strengthen their market positions as identity, analytics, and intelligence experts and provide a zero-trust and identity-first security foundation to deliver enhanced data security, reduced audit and compliance costs, and improved understanding and visibility of malicious activity.

    Veridos becomes majority shareholder in NetSeT

    January 30: Berlin-based Veridos has acquired a majority stake in NetSeT Global Solutions, a move the company says will strengthen its position as a full-service provider of integrated identity solutions. NetSeT, based in Serbia, develops information systems for the management of citizen data and information security. In 2017, Veridos acquired a minority stake in NetSeT, which will now be integrated into the Veridos Group. “With this acquisition, we are expanding our position as a provider of holistic identity solutions to cover the entire value chain: from citizen registration to the creation and personalization of ID documents and the management of citizen data to document verification,” Veridos CEO Marc-Julian Siewert said in a press release. The move comes after 20 years of collaboration between Veridos and NetSeT. In joint projects, the companies have co-operated in providing the ID system for northern Macedonia, ePassport systems for Bangladesh, Venezuela, and the United Arab Emirates, and a driver’s licence system for Uganda.

    Simeio acquires identity and access management firm PathMaker

    January 10: Specialized identity and access management (IAM) services provider Simeio acquired Texas-based identity governance firm PathMaker Group in a move that will enhance Simeio’s consulting services and SailPoint implementation capabilities, the company said. “This acquisition solidifies our commitment to integrate future-ready technologies to protect and secure identities. “Simeio CEO Chris Schueler said in a press release. “I am very confident in the unmatched identity security services that our clients can take advantage of as a result of this acquisition.” Simeio operates a portfolio of end-to-end services in advisory, building, and managing identity security solutions. PathMaker’s IAM MAP assessment process and methodology will be incorporated into          Simeio’s proprietary identity orchestration platform Simeio IO, allowing customers to continuously measure and assess the maturity of their identity programs. Simeio’s managed identity security services delivered through Simeio IO will also be accessible to PathMaker clients.

    Resource : https://www.csoonline.com/article/3687668/top-cybersecurity-manda-deals-for-2023.html

    10Apr, 2023
    Nexx bugs allow to open garage doors, and take control of alarms and plugs

    A series of vulnerabilities in multiple smart devices manufactured by Nexx can be exploited to remotely open garage doors, and take control of alarms and plugs.

    In late 2022, the researcher Sam Sabetan discovered a series of critical vulnerabilities in several smart devices manufactured by Nexx, including Smart Garage Door Openers, Alarms, and Plugs. A remote attacker can exploit these vulnerabilities to open and close garage doors, take control of alarms, and switch smart plugs on and off for any customer.

    Nexx has not replied to any correspondence from myself, DHS (CISA and US-CERT) or VICE Media Group.” reads a post published by Sabetan. “I have independently verified Nexx has purposefully ignored all our attempts to assist with remediation and has let these critical flaws continue to affect their customers.”

    The researchers reported the issues to the United States Department of Homeland Security Cybersecurity and Infrastructure Security Agency (CISA), which assigned the following five CVEs:

    1. Use of Hard-coded Credentials CWE-798 (CVE-2023–1748, CVSS3.0: 8.6)
    2. Authorization Bypass Through User-Controlled Key CWE-639 (CVE-2023–1749, CVSS3.0: 6.5)
    3. Authorization Bypass Through User-Controlled Key CWE-639 (CVE-2023–1750, CVSS3.0: 7.1)
    4. Improper Input Validation CWE-20 (CVE-2023–1751, CVSS3.0: 7.5)
    5. Improper Authentication Validation CWE-287 (CVE-2023–1752, CVSS3.0: 8.1)

    The expert estimated that over 40,000 devices, located in both residential and commercial properties, are affected by the above issues. He also determined that more than 20,000 individuals have active Nexx accounts.

    To mitigate the risk of the exploitation of the above flaws, it is recommended to disable internet connectivity for vulnerable Nexx devices or protect them with a firewall.

    Below is a video demo published by the researcher that shows how to exploit the flaw CVE-2023–1748 to obtain users’ info.

    Resource : https://securityaffairs.com/144488/iot/nexx-smart-devices-flaws.html

    10Apr, 2023
    Researchers disclose critical sandbox escape bug in vm2 sandbox library

    The development team behind the vm2 JavaScript sandbox library addressed a critical Remote Code Execution vulnerability.

    The developers behind the vm2 JavaScript sandbox module have addressed a critical vulnerability, tracked as CVE-2023-29017 (CVSS score 9.8), that could be exploited to execute arbitrary shellcode.

    vm2 is a sandbox that can run untrusted code in an isolated context on Node.js servers, it has approximately four million weekly downloads and its library is part of 722 packages.

    The flaw was reported by the security researcher Seongil Wi from South Korean security firm KAIST WSP Lab.

    The vulnerability affects all versions, including and prior to 3.9.14, it was addressed with the release of version 3.9.15.

    “vm2 was not properly handling host objects passed to Error.prepareStackTrace in case of unhandled async errors.” reads the advisory published by vm2. “A threat actor can bypass the sandbox protections to gain remote code execution rights on the host running the sandbox.”

    Wi also published two proof-of-concept (PoC) exploits for this vulnerability that can be used to escape the sandbox to create an empty file named “flag” on the host.

    In October 2022, VM2 maintainers addressed another critical sandbox escape vulnerability tracked as CVE-2022-36067.

    Please vote for Security Affairs (https://securityaffairs.com/) as the best European Cybersecurity Blogger Awards 2022 – VOTE FOR YOUR WINNERS
    Vote for me in the sections:

    • The Teacher – Most Educational Blog
    • The Entertainer – Most Entertaining Blog
    • The Tech Whizz – Best Technical Blog
    • Best Social Media Account to Follow (@securityaffairs)

    Resource : https://securityaffairs.com/144582/hacking/vm2-rce-sandbox-escape.html