Latest news with #ECH
Techday NZ
22-05-2025
- Techday NZ
Report finds low ECH use but risks from malicious actors grow
Corrata has published a report examining the impact of the Encrypted Client Hello (ECH) privacy protocol on enterprise security and the adoption of the protocol by malicious actors. The Living With ECH Report analysed billions of connections made by enterprise employee mobile devices over a three-month period to assess the practical deployment and security implications of the latest privacy technology in internet communications. ECH, an extension to the most recent version of the Transport Layer Security (TLS 1.3) standard, encrypts information exchanged between devices and Content Delivery Networks, preventing network providers from being able to identify which websites users are trying to access. According to Corrata's findings, actual usage of ECH by enterprise mobile devices remains infrequent, with less than 0.01% of TLS connections employing the protocol. Nonetheless, more than 9% of the top one million domains are ECH-enabled, demonstrating some groundwork for future adoption. The report identified a notable risk associated with ECH adoption. Corrata's analysis revealed that 17% of ECH-enabled sites are classified as risky, indicating that malicious actors are already making use of the increased anonymity provided by the protocol. The risk is particularly acute for Chrome users who have encrypted DNS enabled. Corrata stated, "ECH could degrade, not improve, privacy: Banks and other regulated entities are often required to monitor the internet traffic going into and out of their organisation. To date, these enterprises have been able to selectively decrypt traffic without looking at sensitive data like employees' health records. But with ECH blocking their filtering, enterprises would have little choice but to decrypt all internet traffic for inspection, drastically degrading employees' privacy." The analysis highlighted the significant role played by Cloudflare in enabling ECH. Cloudflare is the only major Content Delivery Network supporting ECH, and almost all of the sites that have ECH enabled use its infrastructure. The report also noted that large website owners appear reluctant to adopt the protocol due to concerns that users may face blocks from security systems in enterprises or by public authorities. While internet service providers and enterprise security teams have reduced visibility under ECH, the protocol still allows CDNs like Cloudflare to access certain data. Malicious actors are leveraging this infrastructure to support phishing attacks, Corrata said. "Over 90% of phishing detections use Cloudflare infrastructure, according to Corrata's analysis. In addition to the anonymity provided by ECH, these sites take advantage of other Cloudflare features. For example, the "captcha" page can be used to direct desktop traffic to the legitimate site while mobile traffic is sent to the fake one. Alternatively, traffic not coming from the targeted country may be redirected to the legitimate site. These are deliberate tactics to avoid detection by security providers." The report also identified several barriers to widespread adoption of ECH. While 20% of devices are configured to use encrypted DNS and DNS resolvers that support ECH, the absence of support from browsers such as Safari and operating systems like Android hampers wider implementation. The adoption of ECH requires the participation of multiple industry stakeholders, each with different priorities. Matthieu Bentot, Chief Technology Officer of Corrata, commented on the current state of adoption. "The extremely low level of ECH adoption suggests that the security community's fears that enterprise internet traffic would go dark are not yet being realised. While the potential certainly exists for ECH to become a thorn in the side of defenders, the early signs are that this is the time to prepare rather than panic." The findings from the Living With ECH Report are based on Corrata's analysis of billions of connections made by devices running the company's mobile threat detection and response solution. The data reflects traffic from both iOS and Android devices, with Corrata tracking successful ECH connections between January and March 2025 by analysing DNS queries and TLS connection metadata.
Time of India
05-05-2025
- Business
- Time of India
Epigral Q4 net profit rises 13% to Rs 87 crore
Integrated chemical manufacturer Epigral on Monday reported a 13 per cent increase in net profit to Rs 87 crore for the fourth quarter of the last fiscal. The company had posted a net profit of Rs 77 crore in the year-ago period. #Pahalgam Terrorist Attack Pakistan's economy has much more to lose than India's due to the ongoing tensions, warns Moody's Ratings The day Pakistan got the power to poke India India demands ADB to stop funds to Pakistan as fallout of Pahalgam terror attack deepens Its total revenue rose 20 per cent in the fourth quarter to Rs 631 crore from Rs 526 crore a year ago. For the full fiscal 2024-25, the company reported a 33 per cent year-on-year increase in revenue to Rs 2,565 crore. by Taboola by Taboola Sponsored Links Sponsored Links Promoted Links Promoted Links You May Like Villas For Sale in Dubai Might Surprise You Villas In Dubai | Search Ads Get Rates Undo Epigral Chairman and Managing Director Maulik Patel said the company reported "the highest ever revenue" in 2024-25. "This growth is on account of a volume rise of 11 per cent, majorly from high-value products. Derivatives and Specialty business volume grew by around 24 per cent in FY2025 and its contribution to revenue touched 54 per cent compared to 45 per cent in FY24," he said in a statement. Live Events The company announced expanding its CPVC and Epichlorohydrin capacity, which are expected to be commissioned in the 1st half of FY2027. The integrated complex will further strengthen after these projects reach optimum utilisation, he added. The company is geared up and focusing on importing substitute products, further diversifying and increasing the derivatives and speciality business, Patel said. Established in 2007, Epigral is notable for being the first company in India to manufacture Epichlorohydrin ( ECH ), using 100 per cent renewable resources, and it operates the country's largest CPVC resin plant.
&w=3840&q=100)
Business Standard
05-05-2025
- Business
- Business Standard
Epigral Q4 results: Net profit rises 13% YoY to Rs 87 cr in March quarter
For the full fiscal 2024-25, the company reported a 33 per cent year-on-year increase in revenue to Rs 2,565 crore Press Trust of India New Delhi Integrated chemical manufacturer Epigral on Monday reported a 13 per cent increase in net profit to Rs 87 crore for the fourth quarter of the last fiscal. The company had posted a net profit of Rs 77 crore in the year-ago period. Its total revenue rose 20 per cent in the fourth quarter to Rs 631 crore from Rs 526 crore a year ago. For the full fiscal 2024-25, the company reported a 33 per cent year-on-year increase in revenue to Rs 2,565 crore. Epigral Chairman and Managing Director Maulik Patel said the company reported "the highest ever revenue" in 2024-25. "This growth is on account of a volume rise of 11 per cent, majorly from high-value products. Derivatives and Specialty business volume grew by around 24 per cent in FY2025 and its contribution to revenue touched 54 per cent compared to 45 per cent in FY24," he said in a statement. The company announced expanding its CPVC and Epichlorohydrin capacity, which are expected to be commissioned in the 1st half of FY2027. The integrated complex will further strengthen after these projects reach optimum utilisation, he added. The company is geared up and focusing on importing substitute products, further diversifying and increasing the derivatives and speciality business, Patel said. Established in 2007, Epigral is notable for being the first company in India to manufacture Epichlorohydrin (ECH), using 100 per cent renewable resources, and it operates the country's largest CPVC resin plant. (Only the headline and picture of this report may have been reworked by the Business Standard staff; the rest of the content is auto-generated from a syndicated feed.)
