Secure all infection vectors

1 April 2013 Information Security

While endpoint security and firewalls are critical in preventing business disruptions, these measures alone are no longer sufficient to ward off the sophisticated avalanche of malware pervading our daily lives.

Threats come in a variety of shapes and sizes with the most frequently used infection channels being: e-mail; the Internet; and individual PCs.

* E-mail is an essential channel of communication. However, it is also the principal channel for spam and phishing along with a host of other types of malware. For this reason, there needs to be protection at both server level and at the level of the individual mail client to ensure the responsibility for threat prevention does not fall entirely on individual users.

* Internet-borne threats are becoming increasingly common with malicious content often being disguised so users are unaware that they are downloading infected files. Typical cases include plug-ins to watch certain videos, pdf documents hiding malware, etc.

While traditional security solutions are critical as a first line of defence, companies of all sizes still face the risk of numerous security holes which can be exploited by modern malware techniques. To prevent malware from silently infiltrating corporate networks it is essential that companies:

* Adopt a sound security strategy to cover the main infection vectors;

* Monitor remote users to ensure they do not connect to the main network with infected devices;

* Manage remote offices carefully;

* Ensure employees are informed of the latest infection techniques; and

* Screen all computers, laptops and external devices routinely.

It is imperative that companies employ leading-edge technology capable of ensuring all the main infection vectors are covered. Panda Security’s GateDefender is a unified threat management gateway (UTM) which filters all traffic entering the network perimeter. Panda Cloud Office Protection Advanced covers all three vectors with endpoint protection, anti-spam and an upcoming Web filtering module, the first of its kind in a cloud based solution. Such solutions are specifically designed to assist in achieving maximum business security.

However, it is no good simply securing the main infection vectors (e-mail, Internet, individual PCs) while leaving other areas within the IT infrastructure exposed. It is equally important that organisations adopt sound company security policies such as tight password control; apply regular security patches for Microsoft windows; ensure that security products remain up to date; and that remote users adhere to security policies and are carefully monitored.

For more information contact Panda Security, 08600 PANDA (72632), [email protected], www.pandasecurity.co.za





Share this article:
Share via emailShare via LinkedInPrint this page



Further reading:

Want effective Attack Surface Management? Think like an attacker.
Information Security
Effective ASM requires companies to think like attackers, anticipate risks, and act decisively to reduce exposure by knowing their environment, deploying a structured approach, leveraging capable tools, and addressing both internal and external risks.

Read more...
The growing role of hybrid backup
Infrastructure Information Security
As Africa’s digital economy rapidly grows, businesses across the continent are facing the challenge of securing data in an environment characterised by evolving cyberthreats, unreliable connectivity and diverse regulatory frameworks.

Read more...
POPIA non-compliance puts municipalities at risk
Information Security Government and Parastatal (Industry)
Digital responsibility must go beyond POPIA compliance to recognising that privacy and service delivery are fundamentally linked. Despite this, only 51 out of 257 municipalities submitted their mandatory data protection and access to information reports in 2024.

Read more...
Choicejacking bypasses smartphone charging security
News & Events Information Security
Choicejacking is a new cyberthreat that bypasses smartphone charging security defences to confirm, without the victim’s input or consent, that the victim wishes to connect in data-transfer mode.

Read more...
Most wanted malware
News & Events Information Security
Check Point Software Technologies unveiled its Global Threat Index for June 2025, highlighting a surge in new and evolving threats. Eight African countries are among the most targeted as malware leaders AsyncRAT and FakeUpdates expand.

Read more...
Welcome to the new cyber battleground
Information Security
The Iran-Israel conflict is rapidly redefining modern warfare, pushing the boundaries of cyber capabilities and creating a new, borderless digital battlefield. Fortinet’s CISO, Dr Carl Windsor, offers a critical, in-depth analysis of the escalating tactics and global implications in his latest report.

Read more...
African industries may overestimate cyber defences
Information Security
A significant perception gap exists in security awareness training: 68% of leaders believe training is tailored to roles, yet only a third of employees feel adequately trained. Many organisations only conduct annual or biannual generic training that may not effectively change behaviour.

Read more...
SMARTpod talks to Sophos and Phishield
SMART Security Solutions Technews Publishing Sophos Videos Information Security News & Events
SMARTpod recently spoke with Pieter Nel, Sales Director for SADC at Sophos, and Sarel Lamprecht, MD at Phishield, about ransomware and their new cyber insurance partnership.

Read more...
Highest increase in global cyberattacks in two years
Information Security News & Events
Check Point Global Research released new data on Q2 2024 cyber-attack trends, noting a 30% global increase in Q2 2024, with Africa experiencing the highest average weekly per organisation.

Read more...
Corporate and academic teams can register for Kaspersky contest
Kaspersky News & Events Information Security
Kaspersky has announced the registration opening for its new Kaspersky{CTF} (Capture the Flag) competition, inviting academic and corporate teams from around the globe to compete in a battle of skill, strategy and innovation.

Read more...










While every effort has been made to ensure the accuracy of the information contained herein, the publisher and its agents cannot be held responsible for any errors contained, or any loss incurred as a result. Articles published do not necessarily reflect the views of the publishers. The editor reserves the right to alter or cut copy. Articles submitted are deemed to have been cleared for publication. Advertisements and company contact details are published as provided by the advertiser. Technews Publishing (Pty) Ltd cannot be held responsible for the accuracy or veracity of supplied material.




© Technews Publishing (Pty) Ltd. | All Rights Reserved.