sb-eu logo
Story image

Slack unveils new security features as remote working skyrockets

Slack has introduced new security features, integrations and certifications to its platform in response to growing security concerns as more people work remotely.

"In the wake of the Covid-19 pandemic, digital transformation is happening at warp speed," the company says. 

"The kind of widespread technological adaptation we expected to see years from now has been truncated to a matter of months as organisations adopt cloud solutions to keep their teams connected. And as more and more workplaces go fully remote, security has never been more paramount," it says.

Cybersecurity threats, including phishing scams and spam, are spiking as bad actors take advantage of the pandemic to target remote workforces and corporate systems. 

In April, Google reported more than 18 million daily malware and phishing emails related to Covid-19 scams in just one week and more than 240 million daily spam messages. Security-sensitive industries, such as banking and health care, have been hit especially hard. A report by VMware Carbon Black found that attacks targeting the financial sector grew by 238% from February to April 2020.  

"As organisations, particularly those in regulated industries, turn to Slack to collaborate, we’ve set out to meet and exceed some of the most stringent security and compliance standards around," Slack says.

"We built Slack from the start to give businesses a more secure way to communicate and collaborate, both internally and across organisational boundaries. 

"Although we haven’t been around as long as some software suites built on legacy applications, our purpose-built platform allows us to stay focused and innovate swiftly to meet the needs of our customers—especially during times like these, when security is of the utmost importance," the company explains. 

"As a result, Slack continues to provide a secure, enterprise-grade collaboration solution."

Slack's new security features, integrations and certifications allow customers to:

  • Gain increased visibility and control over your data
  • EKM support for Workflow Builder (available now)
  • Full encryption of a workflow, including a workflows steps, message, forms, channel destinations and any variable data, as well as the data collected
  • Splunk App for Slack (available now)
  • Ingest activity from Slacks audit logs API directly into Splunk to visualise and analyse the data in pre-built dashboards
  • Minimum app version (available now)
  • Designate a specific version of the Slack mobile app for all users to download and determine when it goes into effect
  • Microsoft Intune Mobile Application Management (MAM) (coming soon)
  • Slacks support for Intune MAM gives users all the features they expect from Slack, while providing admins with mobile app management capabilities to help prevent leakage of corporate data
  • Meet industry, region or country-specific compliance requirements
  • FedRAMP Moderate authorised (available now)
  • Slacks commercial offering meets the stringent security and compliance requirements enforced by the U.S. government
  • Information barriers (coming soon)
  • Restrict communications between specific users to avoid conflicts of interest or safeguard important information
  • Data residency (available now)
  • Slack customers will be able to store their own encryption keys in a specific data region
  • Securely collaborate with external organisations
  • EKM support for Slack Connect (coming soon)
  • Messages and files sent in channels shared with external organisations will be encryptable using a customer's own encryption keys
  • Verified organisations for Slack Connect (coming soon)
  • When connecting with a customer, vendor or partner, a checkmark next to the organisations name is visible, indicating its a verified organisation
Story image
CrowdStrike integrates with ServiceNow program to bolster incident response
As part of the move, users can now integrate device data from the CrowdStrike Falcon platform into their incident response process, allowing for the improvement of both the security and IT operation outcomes.More
Story image
Check Point acquires Odo Security to bolster remote security offering
The deal will integrate Odo’s remote access software with Check Point’s Inifinity architecture, bolstering the latter company’s remote security capabilities in a time where working and learning from home has become the norm, and looks to largely remain that way in the near future.More
Story image
Shlayer malware proves Apple devices aren't as secure as you think
"Apple never talks about malware publicly, and loves to give the impression that its systems are secure. Unfortunately, the opposite has been proven to be the case with great regularity."More
Story image
COVID-19 related email threats pose huge risk in 2020
According to the company’s annual mid-year roundup report, Trend Micro blocked 8.8 million COVID-19 related threats, nearly 92% of which were email-based.More
Story image
Report: 151% increase in DDoS attacks compared to 2019
It comes as the security risk profile for organisations around the world increased in large part thanks to the COVID-19 pandemic, forcing greater reliance on cloud technology and thrusting digital laggards into quick and unsecured migrations.More
Story image
Acronis announces new security endpoint solution
The solution is an integration of data protection and cybersecurity which provides customers with effective endpoint protection in a landscape where the pointlessness of perimeter security is becoming more pronounced.More