Story image

Businesses can't outrun cybercriminals but they can 'outsmart' them

20 Jul 2017

​Cyber crime in recent times has hit an all new high – think WannaCry and Petya, both of which were global attacks affecting hundreds of thousands and were just in the last couple of months.

According to Empired, most businesses believe that because they have security controls in place, they’re protected against cybercriminal but that simply isn’t true.

“Business beats with a digital heart and the rate of cybercrime is increasing exponentially,” says national business manager for Networks and Security at Empired, Mark Blower.

“It’s essential for organisations to understand the threat landscape and how to mitigate the risk of being attacked.”

Blower says cybercrime has become an industry in which large organisations pay educated hackers a daily wage to find and exploit vulnerabilities.

“There are around 390,000 new malware threats every single day: it’s impossible to keep up with this volume of threats by simply relying on traditional technology like antivirus,” says Blower.

“Simply having security controls recorded in a policy is not enough, they have to be lived and acted upon every day.”

Blower asserts that business can invest in tools, processes and policies to identify when they are being attacked and how to respond, contain and recover from a successful breach – so that they’re prepared when it happens from a malicious hacker.

One of the big problems, according to Empired, is that because of a lack of resources and competing demands IT teams can only spend a fraction of every day on security activities while a cybercriminal’s full-time job is to find ways to breach an organisation.

“The big trap many organisations fall into is taking a compliance-based approach to security. By definition, this means that the decision cycle on implementing and updating controls will be longer than the attackers’ development cycle, letting cybercriminals get ahead,” Blower says.

“Given businesses can’t outrun the cybercriminals, the only other option is to outsmart them.”

Empired has provided six key facets of cybersecurity protection for businesses to consider:

1. Set clear policies around what is and isn’t allowed, and what to do if a person suspects they’re being attacked.

2. Update perimeter protection to next-gen firewalls that meet reporting requirements, deep-dive into traffic, and decrypt traffic.

3.  Implement unified threat management tools as they give security teams full visibility into what people are doing on the network.

4. Real-time threat analytics are the only way to protect against zero-day threats and are vital as traditional signature-based protection is no longer adequate.

5. Application control devices (ACDs). ACDs are the last line of defence as they protect against people who are already inside the network, such as guests or malicious attacks from employees, ensuring only the right people access applications.

6. Security incident and event management (SIEM) lets IT teams automate parts of the security puzzle, letting the team proactively find threats that might not be visible using standard logs

Alcatraz AI to replace corporate badges with AI security
The Palo Alto-based startup supposedly leverages facial recognition, 3D sensing, and machine learning to enable secure access control.
Unencrypted Gearbest database leaves over 1.5mil shoppers’ records exposed
Depending on the countries and information requirements, the data could give hackers access to online government portals, banking apps, and health insurance records.
Mozilla launches Firefox Send, an encrypted file transfer service
Mozille Firefox has launched a free encrypted file transfer service that allows people to securely share files from any web browser – not just Firefox.
Ransomware’s decline equals cryptomining’s rise
ESET’s Security Days Conference recently took place to go over the current threat environment and what to look out for next.
IoT and DDoS attacks: A match made in heaven
A10 Network’s Adrian Taylor uses findings from a number of reports to illustrate his point that advances in technology are facilitating cybercrime.
ForgeRock launches Sandbox-as-a-Service to facilitate compliance
The cloud-based testing environment for APIs enables banks to accelerate compliance with Open Banking and PSD2 deadlines.
Cloud application attacks in Q1 up by 65% - Proofpoint
Proofpoint found that the education sector was the most targeted of both brute-force and sophisticated phishing attempts.
Singapore firm to launch borderless open data sharing platform
Singapore-based Ocean Protocol, a decentralised data exchange that promotes data sharing, has revealed details of what could be the kickstart to a global and borderless data economy.