Secutec to protect companies with new tool from internet scanners
Secutec is launching a new CTI feed service, short for Cyberthreat Intelligence feeds. This is a combined information stream that will update customers' firewalls every four hours with the latest cyber threat intelligence (CTI) from various local and international sources. The combined CTI feed protects customers against malicious IP addresses and domains and shields them from incoming traffic from internet scanners.
These so-called internet scanners legitimately map all infrastructure behind IP addresses, just as traditional search engines index web content. Firewalls do not block such scanners because their intentions are not malicious. After all, they can help small and large organizations map and secure all their Internet-connected devices. Many Cyber Emergency Response Teams (CERT) use the technology to assess cyber risks.
This makes such scanners very popular with cybercriminals. As soon as a new, so-called zero-day vulnerability becomes known, they can quickly track down potential targets.
Geert Baudewijns, CEO of Secutec, explains: "To prevent our customers' installations from being indexed for malicious purposes, we are now shielding them from such internet scanners. This means they will not appear on the radar as potential victims. It is unlikely that this door will remain open on traditional firewalls. Now, customers can still protect themselves cost-effectively with our CTI feeds. They become invisible and can quickly patch zero-day vulnerabilities, or at least patch them 'virtually', while the cybercriminal tries to break in elsewhere."
Combination of national and international threat intelligence feeds
Secutec also integrates with the Belgian CERT information feed. This means that customers' high-priority firewalls block all known threats in Belgium, in addition to international threat intelligence. Secutec's CTI feeds therefore cover a much broader spectrum, providing customers with optimal protection.
Thanks to continuous updates of CTI feeds, firewalls can automatically block IP addresses and domains linked to known malware (APTs), fraudulent advertisements, botnets, and other malicious actors. This provides strong, proactive defense and prevents data leaks.