• Guru: IBM i Unauthenticated Access

  April 25, 2022 Bruce Bading

  One of the greatest threats to any network, host, or server is unauthenticated access where an attacker can gain local or remote access with no credentials that can lead to a Critical rating with the following descriptions (CVSS v3.1 User Guide (first.org).

  Confidentiality Impact Complete (There is total information disclosure, resulting in all system files being revealed.)

  Integrity Impact Complete (There is a total compromise of system integrity, and a complete loss of system protection resulting in the entire system being compromised.)

  Availability Impact Complete (There is a total shutdown of the affected resource. The attacker can render …

  Read more

• Guru: SIEM Is Only Part Of IBM i Cybersecurity

  March 28, 2022 Bruce Bading

  Many times, we hear from IBM i business owners that their SIEM – that’s short for Security Information and Event Management – is their cybersecurity solution for the IBM i. But that can’t be true, and I want to explain why it is part of the security shield but certainly not all of it.

  Let’s start with SIEMs and how they fit into cybersecurity frameworks. SIEM is mentioned in the PCI appendix, but not once in the core of the 250+ PCI DSS requirements, likewise, the NIST Cybersecurity Framework lists event monitoring as one of the 100s (1/100s) of NIST …

  Read more

• Hit A Fiduciary Home Run With A Backup, DR, Cybersecurity Triple Play

  October 4, 2021 Jim Kandrac

  The old adage that the only secure computer is one that is not networked to anything has never been more true; however, it is also irrelevant even if it is funny. No computer can exist in a vacuum and is only useful if it is connected to other machines – and potentially lots of other machines. The level of malicious activity out there on the networks of the world has never been higher, and you had better get used to the idea that the situation is going to get worse every year, and the IBM i platform is absolutely …

  Read more

• How IBM i Fits Into a Zero-Trust Security Framework

  July 19, 2021 Alex Woodie

  One of the hot new trends in cybersecurity these days is the zero-trust security model. Instead of implicitly trusting network traffic behind the firewall, zero-trust demands that traffic have explicit permission to be there. But how does that model work with the strange beast known as IBM i? IT Jungle recently sat down with PJ Kirner, the CTO and co-founder of zero-trust software provider Illumio, to find out.

  Illumio is an eight-year-old venture-backed startup based in Sunnyvale, California, that is working in the field of zero-trust security. It develops an offering, called Illumio Core, that allows companies to begin implementing …

  Read more

• Security Posture Mixed As Feds Say ‘Shields Up’

  January 14, 2019 Alex Woodie

  “Raise your shield.” That’s the message the Federal Government sent to American businesses last week as part of a new cybersecurity awareness campaign. But according to a recent survey of security professionals by Syncsort, the majority of enterprises, including IBM i shops, are confident in the security protections that are already in place. The big question: Have they actually done enough?

  The National Counterintelligence and Security Center (NCSC) kicked off a new security awareness campaign last week called “Know the Risk, Raise Your Shield.” The NCSC says that foreign intelligence entities are actively targeting information, assets, and technologies” that are …

  Read more

Next Articles