sb-eu logo
Story image

Why mandating strong cybersecurity for your remote workforce matters

30 Apr 2018

Modern technology has enabled organisations and their employees to work from almost any location but according to Trend Micro those organisations must ensure cybersecurity hygiene is part of the package.

Morgan McKinley research found that 50% of employees in Singapore offer work-from-home arrangements, in which workers can use a variety of endpoint from different locations to access their organisation’s systems and assets.

However Trend Micro warns that employees who use unprotected public or home internet connections are putting their organisation, its networks, assets, and intellectual property at risk – particularly when they bring their potentially infected devices back into the office.

One of the major concerns about remote working situations is the lack of proper security in place on employees’ devices, including their home routers. Trend Micro says the router is the central connection hub for all devices including computers, smartphones, and other endpoints employees use.

“In this way, if robust security isn't in place at this critical juncture, employees leveraging their home network for work activity could be opening themselves up to considerable risk. Worst of all, a device infected at home could potentially impact the entire enterprise network once the staff member brings the endpoint back to the office for work.”

The company says there are three important issues IT teams should consider:

·         Incorrectly configured networks: This can extend to a range of different factors, but the bottom line is that an incorrectly configured network can provide an easy open door for malicious actors.

·         Default or weak passwords: If employees don't adjust the security credentials of their routers and keep the default password in place – or use a password that is considerably easy to guess – it presents low hanging fruit for hackers. It's imperative that default credentials are replaced with strong passwords once the home network equipment is deployed.

·         Firmware updates: Not updating devices with the latest patches can also create easily exploitable vulnerabilities that result in significant security gaps and other problems.

Trend Micro says that Remote Desktop Protocol (RDP) attacks can also be used to brute force logins of home devices. If a hacker compromises a device, they are able to run malware that spreads to enterprise networks the next time the device is used at the office.

“RDP enables a user to interact with a system as if they are a local user, providing access to the operating system and applications. In this way, a hacker could remotely access login capabilities, and use brute force to breach and glean details about users and who has control of what devices.”

"The risk lies in the network, when a hacker is able to gain access to the RDP without the user admin knowing. The home network is where all the connected devices and stored data lie."

The company cites a real-life example of device compromise in action. In one case an employee took his work laptop home so he could conduct work from outside the office.

The employee’s daughter also accessed her emails on the work laptop. One of those emails contained an email attachment with the Sircam malware.

The employee was unaware of the infection and took the laptop back to the office, where the infection spread across the corporate network.

“Luckily for the employee and the small business he worked for, the infection was spotted on the company network and systems were disconnected before it could spread further or damage machines. The instance did result in downtime for the company, during which the network had to be cleansed and employees were unable to access mission-critical assets,” Trend Micro says.

“Overall, it's important to ensure that employees take the appropriate security precautions when taking part in work activity from their home networks.”

Story image
Kaspersky finds red tape biggest barrier against cybersecurity initiatives
The most common obstacles that inhibit or delay the implementation of industrial cybersecurity projects include the inability to stop production (34%), and bureaucratic steps, such as a lengthy approval process (31%) and having too many decision-makers (23%). More
Story image
CrowdStrike integrates with ServiceNow program to bolster incident response
As part of the move, users can now integrate device data from the CrowdStrike Falcon platform into their incident response process, allowing for the improvement of both the security and IT operation outcomes.More
Story image
Ripple20 threat could affect 35% of all IT environments – ExtraHop
The vulnerabilities have the potential to ‘ripple’ through complex software supply chains, enabling attackers to steal data or execute code.More
Story image
Exabeam and Code42 partner up to launch insider threat solution
The solution will give customers a fuller picture of their environment, and will leverage automated incident response to obstruct insider threat before data loss occurs.More
Story image
High-tech heist: why fending off ransomware attacks is more challenging than ever in 2020
The COVID-19 crisis has unleashed a wave of sophisticated and disruptive ransomware attacks, and the onus is on businesses to ramp up their security measures if they’re to avoid falling victim, writes Attivo Networks regional director for A/NZ Jim Cook.More
Story image
Remote staff overestimating knowledge of cybersecurity basics
‘Unconscious incompetence’ is one of the most difficult issues to identify and solve with security awareness training.More