Technology Record - Issue 29: Summer 2023

28 MARKETWATCH MITRE ATT&CK framework is key to reducing cyber risk, finds CyberProof Organisations can use the MITRE ATT&ACK framework to help them map evolving tactics and techniques used by cyberattackers, according to CyberProof’s latest Cyber Threat Intelligence (CTI) research report. Through careful examination of real-world events using advanced CTI tools, the report analyses the top threat tactics and techniques, including malware and ransomware campaigns, new threat capabilities, and emerging attack vectors that are shaping today’s threat landscape. By delving into some of the largest campaigns, including macro disabling and fileless malware, the report offers actionable strategies for enterprises to best identify potential vulnerabilities and mitigate risk. “Keeping pace with the current threat landscape is a challenge for any enterprise,” said Maya Rotenstreich, CTI analyst at CyberProof. “By leveraging the analysis presented in this report, your organisation can equip itself with the necessary tools to effectively address constantly evolving cyber risks to the business.” Execution techniques most commonly used in cyberattacks Avalara to boost tax compliance for businesses and governments Resonate debuts Microsoft Teams Voice management platform Resonate has launched a new softwareas-a-service voice tooling platform that helps partners and end customers deploy and manage Microsoft Teams Voice. The Resonate Voice Management platform automates the migration of users to Teams and can save a typical enterprise up to £12,000 ($45,300) a year per 1,000 users. “Through deploying and managing voice estates we identified many manual business processes that we could improve through automation,” said Am Bhooi, chief technology officer of Resonate. “Resonate engineers developed the tool to address challenges in migrating users to Teams including the assignment of phone numbers and voice policies; ensuring that users remain compliant for voice services when moving between sites and business units; removing the need for IT admins to manually provision new joiners or understand how many numbers are currently being used within the environment, with all the cost implications.” Windows management instrumentation Command and scripting interpreter User execution Exploitation for client execution Scheduled task/job 8% 32% 24% 24% 12% Image: CyberProof Photo: Unsplash/Patrick Tomasso Avalara, a provider of cloud-based tax compliance automation for businesses that integrates with Microsoft Dynamics, has become a Peppol-certified service provider in Australia, Japan, New Zealand and the European Union. “For nearly 20 years, Avalara has served as the intermediary between business and governments to simplify the complexities around tax compliance,” said Jayme Fishman, executive vice president and general manager of indirect tax at Avalara. “Today, geographically dispersed businesses can confidently turn to Avalara to address all facets of their global compliance journey, including tax calculations, filings, cross-border compliance, e-invoicing, and more.” The firm is also a technical committee contributor for the Business Payments Coalition’s E-invoice Exchange Market Pilot, an effort supported by the Federal Reserve. Download the full report at: https://bit.ly/43Sw65s Photo: Resonate

RkJQdWJsaXNoZXIy NzQ1NTk=