sb-as logo
Story image

Built-in email security measures inadequate - Trend Micro

05 Mar 2019

Cybersecurity solutions provider Trend Micro has announced that its Cloud App Security tool blocked nearly nine million high-risk email threats in 2018 as attackers continued to evolve their tactics.

The findings from Trend Micro’s Cloud App Security report detail how escalating email threat levels are exposing organisations to an increased risk of fraud, spying, information theft, and spoofing.

As email remains a staple communication and collaboration tool globally, it is convenient for cybercriminals to leverage this integral, trusted platform for compromising attacks.

“Organisations are increasingly looking to cloud email services to boost productivity and agility, but the Cloud App Security report reveals that—from credential phishing to business email compromise (BEC) and the use of unusual file types—hackers are employing a variety of new tactics to evade built-in controls, making it critical to invest in a second layer of defence,” says Trend Micro A/NZ technical director Mick McCluney.

As the report reveals, email remains one of the most popular threat vectors.

In total, the solution detected and blocked nearly 9 million high-risk email threats in 2018.

This number was even after Cloud App Security was used as a second filter for emails that passed through Office 365.

A Trend Micro customers’ detection result is available in the report.

This underscores that sophisticated, multi-layered security is imperative for cloud-based email security as part of the shared responsibility model.

McCluney says, “While Microsoft’s internal controls are a great starting point, organisations must take shared responsibility for security in the cloud. Think of third-party email protection as the tyres of your favourite car — an essential add-on.”  

To improve the tool’s detection rates even further, Trend Micro has added new capabilities that combine Computer Vision and Artificial Intelligence technology to “see” fake websites.

This additional technique is applied to suspected phishing emails after filtering based on sender, content, and URL reputation.

The new capabilities sit alongside other Trend Micro email security features.

These strategic offerings include AI-powered Writing Style DNA to combat BEC attacks, machine learning-based detection of suspicious email content, sandbox malware analysis, document exploit detection, and file, email, and web reputation technologies.

Cloud App Security also leverages the Trend MicroSmart Protection Network, which blocked more than 41 billion email threats in 2018.

Story image
Enterprises underutilising security tools, causing teams to burn out
The report unveiled a lack of meaningful ROI metrics when reporting on security progress, as well as disparate opinions on objectives, tool effectiveness and security awareness amongst the organisation between executives and operations on security teams.More
Story image
APAC financial firms bite down as crime compliance costs rise
The total projected cost of financial crime compliance within Asia Pacific firms reached US$12.06 billion, according to a new report.More
Story image
Infrastructure-as-code, and how it can secure the cloud
Bridgecrew recognised IaC early on as one of the best ways for modern teams to delegate security ownership to individual contributors while distributing it across existing frameworks within CI/CD pipelines. This attribute meant that IaC was invaluable in securing cloud-native environments.More
Story image
AvePoint brings Salesforce Cloud Backup to channel partners
The product adds to the AvePoint suite of trusted Cloud Backup for Microsoft 365 and Dynamics 365 to provide managed service providers with backup and restore capabilities across multiple, popular SaaS providers.More
Story image
Advanced threat actors engaged in cyberespionage up their game
"This recent activity signals a major leap in their abilities."More
Story image
ABB and Nozomi Networks extend collaboration, deliver improved OT security solutions
"With Nozomi Networks solutions added to our cybersecurity portfolio, our customers gain proven network monitoring and threat detection technology."More