Boxes to tick when choosing a threat intelligence provider
For any chief information security officer (CISO) or IT lead, operating in today’s highly digitalized environment, not only are they tasked with establishing and maintaining the digital transformation efforts of their companies on a tight budget, they must also ensure that the company’s IT policy is compliant with the data protection regimes in the markets that they operate in.
By Yeo Siang Tiong General Manager for Southeast Asia, Kaspersky
A long time ago in the cybersecurity space far far away, the choice of a threat intelligence service was often restricted to a handful of providers. Today, the cybersecurity industry in APAC is worth at least USD 30.45 billion and expected to grow at an annual rate of 18.3% from 2020 to 2025, with multiple cybersecurity vendors seeking a bigger slice of the proverbial pie.
For any chief information security officer (CISO) or IT lead, operating in today’s highly digitalized environment, not only are they tasked with establishing and maintaining the digital transformation efforts of their companies on a tight budget, they must also ensure that the company’s IT policy is compliant with the data protection regimes in the markets that they operate in.
Clearly, it is not an easy task to take, but little things like having the right threat intelligence service can make life easier. We have been hearing a lot about this for several years now. But what is it threat intelligence exactly and what you should be looking for in a threat intelligence service provider?
Turning intelligence into action
Let’s have a quick refresher. Threat intelligence is data collected and analyzed by an organization in order to understand a threat actor’s motives, targets, and attack behavior. It empowers organizations of all shapes and sizes to make faster, more informed security decisions and shifts their cybersecurity posture from reactive to proactive in the fight against breaches and targeted attacks.
I am aware that there are a lot of free threat intelligence if one has a knack on researching. However, let me put it this way. A premium threat intelligence report or feed is like a special block screening of an amazing movie. You get the first dibs of the plot and perhaps get to know the characters even. Eventually, the film will be shown in major cinemas. Then after say, six months or more, it will land on several streaming services.
With us at Kaspersky, we provide comprehensive, real-time, organic, and actionable information on our premium threat reports and data feed which is why they are exclusive to the enterprises and organizations which have subscribed to our services. We see to it that we share such with the law enforcement agencies as well, because cooperation is key to fighting cybercriminals.
After a few months, we will then make such data available in public. Why is it not ideal to wait until the mass release of a threat report? Because it will allow you to act fast, to assess your risks, check your endpoints, fix the loopholes which they may exploit. Because knowing first-hand such critical information can save you money, reputation, and headache. Because proactive security is necessary at this time and age.
You may wonder why don’t we make our findings public to begin with? Let us remember here that public here means anyone – including them, cybercriminals. The last thing we want is to tip them off.
Aside from these, what else should you be looking for in a threat intelligence service provider?
Check their sources
Threat intelligence should make your systems smarter through data feeds. To get the feeds you need sensors scattered all across the globe to ensure that your data is reflective of the real-time, global threat landscape.
For example, our very own Threat Intelligence portfolio is powered by millions of Kaspersky’s global users who agreed to share their anonymized data. This huge network builds our Kaspersky Security Network (KSN) which collects more than 340,000 malicious files per day, allowing us to get rich information compared with firms with limited sensors and workforce.
The data collection strategy needs to be GReAT
Speaking of human force, a threat intelligence service’s data collection strategy should be the most important factor to consider in your evaluation of their capabilities because they can only provide intelligence as far as the parameters of their data sources. Given that cybersecurity attacks are often transnational in nature, it is important that a vendor can source information globally and put pieces of the puzzle together in a way that makes sense for your IT staff. It should not be aggregated, it should be organic. It should also be critically monitored and studied by the brightest minds who can understand tactics, techniques, and procedures (TTPs).
To assess whether a threat intelligence service has such a capability, look at their research team and see what kind of campaigns that they have uncovered. For example, Kaspersky’s Global Research & Analysis Team (GReAT) found that the Lazarus APT group shifted their modus operandi to launch targeted ransomware attacks against businesses in Asia, extending as far as France in Q2 this year.
Check the visibility
I have already mentioned the borderless nature of cyberthreats. Hence the visibility of your provider should be another box you have to tick. Look into their Advanced Persistent Threat (APT) logbook and their database. Are they monitoring cyberthreats only from a particular country or region? Or do they have a global reach? Are there researchers only based in one country? Or do they have a network of experts scattered around the world? The answers for these questions are essential.
The provider should understand the difference between intelligence and data
At the heart of the debate between intelligence and data lies the concept of context. Assuming now you’ve got your data sources setup and information is feeding in from all corners of the globe, but you’re asking yourself the million dollar question: how do I know what is important and why is it important?
Things such as threat names, timestamps, resolved IPs addresses of infected web resources are useless on their own if they are not enriched with actionable context. When a relationship context is established, the data can be used more readily to answer the questions of “who”, “what”, “where”, “questions”. It is only at this point that data becomes the finished article – intelligence – and you now receive a boost to incident investigation, as well as uncover new Indicators of Compromise (IoC) in your IT network.
The ability to integrate is key
Integration can be a dirty word of the IT industry. With constant technological upgrades and the evolution of standards happening all the time, the ability to integrate new processes into existing IT operations is a never-ending challenge.
Similarly, for threat intelligence, it is important that your service provider can provide delivery methods, integration mechanisms and formats that support smooth integration of threat intelligence into your existing security controls.
The endgame
The above-mentioned tips are just a few of the many other aspects you should consider when looking for a threat intelligence service, but they serve as a good stepping stone in bolstering your cybersecurity posture for now. With threats becoming increasingly complex and malicious, having the latest enterprise security programs are no longer sufficient. Adding threat intelligence to your arsenal of cybersecurity countermeasures will allow you to bring the fight to them.
When people interact in person, subtle signals like facial expressions, body language and tone of voice play a crucial role in communicating intent and meaning, whereas written communications lack these non-verbal cues and can lead to misinterpretation or assumptions. The advent of emojis became a popular tool to provide context to written messages and they work in many settings. But how are they perceived in workplace communications? Not so well.
Messages with no emojis were clearly the winner, making the sender appear more competent and professional.
Positive emojis enhanced impressions when paired with a neutral or positive message.
Negative emojis were consistently considered inappropriate for workplace communication as they made senders seem less competent, especially when the message itself was already positive or neutral.
Gender dynamics were at play as women judged negative messages from other women more harshly than negative messages from men, rating them as less appropriate.
“This study highlights the importance of being mindful about the potential impact of emojis on professional interactions,” writes lead author Erin L. Courtice from the School of Psychology at the Faculty of Social Sciences at uOttawa. “Emojis are not simply neutral add-ons to text messages; they can influence how others perceive us, particularly in terms of competence and appropriateness. By understanding the nuances of emoji use, professionals can leverage these digital tools to enhance their communication and build stronger workplace relationships.”
Emojis are not a salvo for covering up errors
Positive emojis do not soften bad news or critical feedback – instead, they may create a sense of dishonesty and insincerity when used in a negative message. Negative emojis should generally be avoided because they produce low perceptions of overall competence even if the crux of their meaning is clear and understood in an appropriately framed message.
Researchers found that employing an emoji is not always beneficial: for example, adding a positive emoji to a positive sentence did not increase a perception of appropriateness. The tone of the message was seemingly more important, as mixed signal messaging can potentially affect an employee’s willingness to collaborate on future projects and affect professional trust.
“Future research should consider how emojis function within broader communication patterns, examining outcomes such as conversation flow, rapport building, conflict resolution, and team cohesion in digital workplace environments,” writes Courtice, who collaborated with professor Isabelle Boutet whose research program studies both how humans analyze social cues conveyed by faces, and how digital communication is enhanced by emojis to communicate emotions and social traits.
The full research team included: Erin L. Courtice, Megan Lawrence, Charles A. Collin, and Isabelle Boutet.
Augmented reality menus may help restaurants attract more customers, improve brand perceptions
AR menus can significantly increase customers’ interest in visiting a restaurant and may result in more positive word-of-mouth marketing, when compared to printed or QR-code menus.
Restaurants looking for new ways to engage and inform customers may benefit from incorporating augmented reality (AR) technology into their menus, according to new research from Washington State University.
The study, published in the International Journal of Hospitality Management, finds that AR menus can significantly increase customers’ interest in visiting a restaurant and may result in more positive word-of-mouth marketing, when compared to printed or QR-code menus.
Led by Soobin Seo, professor of hospitality business management at the Carson College of Business, the research examined whether AR could enhance how restaurants present farm-to-table information — details about where ingredients are sourced and how food is produced.
“Consumers increasingly want transparency about where their food comes from, but the way that information is presented really matters,” Seo said. “Augmented reality allows restaurants to share that information in a more vivid, interactive and engaging way.”
The research included two experimental studies designed to reflect how diners encounter menus in real restaurant settings. In the first study, participants viewed one of three menu formats at a simulated local restaurant: a traditional printed menu, a QR-code menu, or an AR menu. The AR menu allowed users to see a three-dimensional food item through their smartphone and tap individual ingredients to learn where they were sourced.
Participants in the study indicated higher intention to visit a restaurant after viewing the menus using AR, and a greater likelihood of sharing the information with others —compared to when they viewed standard menu formats. Participants also reported feeling more immersed in the experience and believed they learned more about the food and where it comes from.
“These immersive experiences help people pay closer attention and feel like they’re actually learning something,” Seo said. “That combination appears to drive stronger interest in the restaurant itself.”
A second study explored how AR menus might work in chain restaurant settings comparing Panera Bread and McDonald’s, where brand perceptions vary widely. Researchers compared consumer responses to AR-based farm-to-table information presented by brands with healthier reputations (e.g. Panera Bread) and those typically viewed as less healthy (e.g. McDonald’s).
While AR menus improved perceptions across both brands, McDonald’s experienced a larger increase in perceived healthiness and visit intentions than Panera Bread.
“When expectations are low, transparent and interactive information can have an outsized impact,” Seo said. “For brands that aren’t typically associated with farm-to-table practices such as fast-food restaurant chain brands, AR disclosures may help offset negative perceptions.”
The study also found that the effectiveness of AR menus is somewhat influenced by how well the technology aligned with a restaurant’s overall brand image, highlighting the importance of “strategic fit” when adopting new technologies, said Seo.
Although AR menus are still relatively uncommon in the restaurant industry, Seo said the technology is becoming more accessible and feasible, even for independently owned restaurants.
“There are already low-cost tools restaurants can use to experiment with augmented reality,” she said. “This isn’t just about being flashy. It’s about providing meaningful information in a way that feels engaging and responsible.”
Beyond marketing benefits, the researchers suggest AR menus could encourage more sustainable practices by motivating restaurants to be more transparent about sourcing and to strengthen relationships with local producers.
“This is a potential win for restaurants, consumers and communities,” Seo said. “It shows how emerging technology can support sustainability while also enhancing the dining experience.”
In addition to Seo, co-authors include Jiyoon (Jennifer) Han, assistant professor of hospitality and tourism management at the Isenberg School of Management at the University of Massachusetts Amherst, and Elizabeth Howlett, professor of marketing at WSU.
Epson launches SureColor-S7130 as latest addition to acclaimed SC S-Series of eco-solvent printers
With the equipment segment expected to capture more than 75% of the market revenue in Asia Pacific’s commercial printing market, where there’s also a growing demand for short-run and on-demand printing, the SC-S7130 aims to meet evolving needs by empowering businesses to operate more competitively and sustainably.
Epson launched the SureColor-S7130 (SC-S7130), the latest addition to its acclaimed SC S-Series of eco-solvent printers. Designed for print service providers specializing in small-volume production, the SC-S7130 combines enhanced productivity, reliability and print quality in a cost effective solution, making it a significant upgrade from its predecessor, the SC-S40670.
With the equipment segment expected to capture more than 75% of the market revenue in Asia Pacific’s commercial printing market, where there’s also a growing demand for short-run and on-demand printing, the SC-S7130 aims to meet evolving needs by empowering businesses to operate more competitively and sustainably.
Engineered for Productivity and Performance
The SC-S7130 features an upgraded PrecisionCore Micro TFP Printhead, delivering close to a 24% increase in print speed in default mode[1]. Equipped with 3,200 nozzles and a wider printhead than its predecessor, the SC-S7130 achieves expanded print width in one pass—improving throughput across all print modes.
To minimize graininess and banding, the nozzles on the SC-S7130 have been specially redesigned to release smaller M-sized dot and larger L-sized dot for high quality print.
Ease of use is a hallmark of the SC-S7130, which features a 4.3-inch touch display for intuitive operation even when wearing gloves. The SC-S7130 also comes with Epson Edge Print Pro, the latest edition of Epson’s advanced image processing and production software that enhances user convenience and remote management during operations. Further, a new ‘Text Sharpness’ mode in Epson Edge Print Pro enables precise and crisp text printing with the SC-S7130.
Printing made Ultra-Reliable
In addition to a newly designed printhead guard that flattens jammed media to prevent damage to the printhead, the carriage temperature sensor is now mounted closer to the nozzle surface for a more accurate reading. The sensor also detects temperature changes quickly, maintaining consistent color reproduction across jobs.
Equipped with a new Nozzle Verification Technology that monitors nozzle performance in real-time, the SC-S7130 is capable of automatically detecting clogged nozzles and triggering an alert so that businesses can act quickly, ensuring print quality is not compromised across jobs.
The SC-S7130 uses Epson UltraChromeTM GS3 inks in 800ml ink packs, replacing the 700ml ink cartridge found in its predecessor, thereby reducing waste and the frequency of ink replacements. Furthermore, the Epson UltraChromeTM GS3 ink technology is GREENGUARD Gold certified for low chemical emissions and volatile organic compounds, making it safe for long-term indoor use.
A Holistic Solution for Diverse Printing Needs
In addition to delivering exceptional performance and enhanced productivity, the SC-S7130 also integrates seamlessly with Epson Cloud Solution PORT, providing businesses with a holistic solution for managing their printing needs. This intuitive, cloud-based remote monitoring software offers real-time insights into printer fleet performance, usage and efficiency, empowering print service providers to make data-driven decisions.
With Epson Cloud Solution PORT, businesses can also seamlessly integrate large printer fleets, monitor printer status, track ink consumption and access operation history remotely, to ensure optimal performance at all times.
“The SC-S7130 is engineered for a wide range of applications, including outdoor and indoor signage, banners and more. Its versatility and reliability, coupled with its cost-effective ownership, make this printer a valuable addition to any print service provider’s lineup,” said Noelle Gonzalez, Head of Marketing and Customer Service at Epson Philippines Corporation. “The SC-S7130 is a testament to Epson’s dedication to creating innovative solutions that empower businesses to remain competitive while meeting their unique needs.”
[1] Printing speed increased 23.8% in default mode using adhesive vinyl in 600 x 1200dpi, 6-pass.