Encourage customers to boost their phishing resistance training immediately. One of the most devastating tools that cybercriminals including nation state actors are using these days is ransomware – and the number one way that ransomware is delivered is through a phishing email. About 50% of businesses were affected by ransomware last year – but 50% of IT professionals don’t believe that their organization is ready to defend against a ransomware attack.
Tuesday, September 22, 2020
STOP RANSOMWARE ATTACKS FROM LANDING
SECURE GATEWAYS TO DATA
Immediately recommend that every customer add a secure identity and access management solution like Passly. The bane of every IT team, insecure or stolen passwords are a constant menace. Multifactor Authentication provides a crucial extra security check between bad actors and a company’s data and systems, and Single sign-on lets administrators quickly and efficiently turn on and off access to applications. Secure Central Password Storage Vaults also keep administrator credentials protected yet accessible by the right people when needed. Improving password security is vital to guarding against cyberattacks like these.
KNOW YOUR HACKERS
By far, the most dangerous cybercrime environment right now is in medical research and development, as companies around the globe race to develop treatments and an eventual vaccine for COVID-19. Recent attempts to steal vaccine research from Moderna can be traced to known Chinese hacking groups. Additional attacks against pharmaceutical companies and researchers can be traced to Russian hacking groups, according to the U.S. National Security Agency.
Your customers are reading about these attacks in major publications and seeing growing concern from governments around the world in the media. That’s why you should develop a plan now to offer them options to increase their data protection – and using that plan to start conversations about increased security with other clients who you think might be at risk. Here are 2 crucial tools that should be on that plan.
Nation State Actors Threaten Companies Worldwide
Cybersecurity threats and attacks involving nation state actors have been all over the news. From a pattern of suspected state-sponsored cyberattacks in Australia to suspected cyberthreats targeting critical infrastructure in the United States, high-level hacking has become a worldwide concern.
While this may not seem like a problem that could affect MSPs and small to medium-sized businesses, it is. These hackers aren’t just going for the biggest kid on the block. Smarter, more sophisticated hackers are starting from the ground up in a concerted effort to capture credentials and access to providers of essential business services in their webs.
Friday, September 18, 2020
Growing Dark Web Data Dumps Are Fueling New Cybercrime
Dark Web data dumps have always been a source of fodder for cybercriminals. However, a dramatic increase in the quantity and quality of data that is available inexpensively or for free on the Dark Web is a key contributor to an explosion of cybercrime in 2020 (like ransomware or credential stuffing attacks) that can devastate your business.
It’s estimated that 65% of the data on the Dark Web now can damage businesses, and more is being added every day through the release of information obtained in previous cyberattacks and the addition of information that’s been gathered about companies and populations.
One of the most common ways that new information fuels cyberattacks is through a data dump. Dark Web data dumps are huge quantities of information added to the pool that cybercriminals can draw from to power cyberattacks like ransomware, credential stuffing, and phishing. Everything from reams of email addresses to sensitive employee and security information to driver’s license records from around the world is making its way into the slurry of Dark Web data dumps.
That’s why it pays to have constant, reliable Dark Web monitoring and analysis through a solution like Dark Web ID to watch for your company’s protected employee credentials to hit the Dark Web. You can also add additional protections for privileged administrator and executive credentials.
Dark Web ID uses human and machine intelligence to keep an eye on every shady corner of the Dark Web 24/7/365. If your protected passwords or credentials are spotted entering a Dark Web marketplace, you’re alerted to the potential danger quickly, giving you time to take action against attacks.
With the constant stream of information flowing into Dark Web data markets growing every day, it makes sense to make sure that you’re watching for trouble so that you can stop cyberattacks before they start.
As Students Go Back To School Virtually, Cybercriminals Are Logging In Too
Many school districts in the US and other countries are pursuing distance education this fall as the COVID-19 pandemic continues to impact in-person gatherings. As school systems rely on technology like email and video conferencing to teach classes, cybercriminals are making the most of this opportunity to score paydays and information from a sector that isn’t ready for them – considering the dismal state of cybersecurity education in the US, it stands to reason that schools’ cybersecurity isn’t much better.
Traditionally, schools and universities aren’t major targets for cybercrime. Public school systems, individual private or religious schools, community colleges, and universities haven’t traditionally been worth the trouble, since few schools could offer a rich ransomware payoff or valuable research and development data to make it worth a cybercriminal’s time.
That’s all changed in the new era of distance learning. Cybercriminals are regularly targeting school systems of every size and stripe to deploy ransomware and collect payments quickly as they disrupt distance learning. Incidents are popping up everywhere including:
- For colleges, fundraising and alumni services have been impacted by the epic BlackBaud breach.
- Rialto Unified School District in California suffered a ransomware incident just two days into the new school year, stopping classes for 25,000 students.
- Lake Elsinore Unified School District in California also had significant disruptions through Zoom bombing and DDoS incidents.
- Selma Unified School District experienced periodic disruptions in student email service.
- The University of Utah was recently the victim of a ransomware attack.
- Michigan State was impacted by Magecart skimming.
And the list goes on. An influx in cyberattacks on schools isn’t just bad news for school systems either. Businesses can be impacted by these incidents as well when parents and students share the same WiFi networks and devices.
Add Protection to Prevent Intrusion
The fastest, easiest way for any business to immediately add a strong layer of protection between crucial systems and data and bad actors is to add a strong, fast-deploying secure identity and access management solution like Passly.
The combined power of Multifactor Authentication and Single Sign-On with simple remote management means that IT staffers can more easily guard and control the gateways that give access to information – letting the right people have access to the right things, anytime, anywhere, and keeping cybercriminals out.
The Stakes Are Rising As Breach Penalties Expand
The Stakes Are Rising As Breach Penalties Expand
The former CSO of Uber was charged with obstruction of justice and misprision of a felony this week for his role in an alleged coverup of the notorious 2016 data breach which impacted an estimated 57 million individuals. What does that mean for companies that suffer a breach now, and what can you do to reduce your breach risk?
Breach penalties have been steadily increasing worldwide as regulators and lawmakers respond to public pressure to hold executives and companies to account that play fast and loose with data protection or attempt to cover up incidents. and the penalties aren’t just monetary – legal implications for executives and companies are becoming more common, especially if companies are uncooperative in investigations.
So what can you do right now to prevent a costly data breach? Add a secure identity and access management solution. A solution like Passly that combines multifactor authentication, secure shared password vaults, single sign-on, and simple remote management increases your company’s compliance with data safety best practices and protocols while also protecting your systems from cybercrime.
Adding better protection against hackers is essential for protecting not only your data, but it’s also essential for protecting your business. Between the exorbitant cost of recovery and the regulatory nightmares that can follow a sensitive data breach, investing in a secure identity and access management solution now to guard your gateways is a small price to pay for greater peace of mind.
Subscribe to:
Posts (Atom)
-
Windows 10 End-of-Life: Why You Must Upgrade Now to Stay Secure and Compliant Microsoft has officially announced the end of support for Win...
-
What is SOC-as-a-Service? By Robert Blake Having a Security Operations Center (SOC) in-house is expensive for the average business. Large ...
-
In today’s digital-first world, non-profit organizations are under increasing pressure to secure sensitive data, streamline operations, and ...
