As organizations transition their digital infrastructure to cloud environments, new complexities around data security are born. This increasingly diverse data landscape will fundamentally alter cybersecurity in 2023, from the technologies deployed, to the processes followed, to the people leading the charge.
Cyber Security
Cyber criminals, state-sponsored hackers and even the occasional disgruntled employee are constantly looking to gain unauthorized access for a variety of purposes: theft of money, cyber espionage, personal information for sale or for use in scams, and damage to critical infrastructure for just a few of the most common.
So how does an organization mitigate an entire world full of continual cyber attacks? Just as buildings have a number of necessary elements of physical security: access control, cameras, alarms and so on; there are similar key elements of cyber security that are absolutely vital for just about any modern business.
It starts with identifying and closing the most common doors that attackers use. For example, phishing attacks on employees are far and away the most common initial point of entry. The breach of even a low-level employee account can quickly turn into an escalation in access privileges and the ability to reach sensitive information. This is also true of smart devices, which are generally more poorly secured than computers and phones.
The report comes from Google’s TAG, which tracks over 30 of these commercial spyware vendors. The current crop of zero-days, which the report saw deployed in late 2022, targets Android and iOS as well as the Chrome web browsers.
A phishing campaign by the North Korean government-linked hacking group Kimsuky is leveraging a malicious Chrome extension to steal Gmail emails from high-value targets.
With the adoption of new technologies, new workplace practices, and accelerating digital transformation, security risks for financial services firms will increase. Secure Access Service Edge (SASE) can help balance security and performance requirements.
A mid-March data breach at Australian financial service provider Latitude was initially estimated as impacting a little over a quarter of a million of its customers. Latitude now says that 14 million records were exposed, including passport numbers.
Italian supercar maker Ferrari disclosed a data breach impacting an unknown amount of customer data after a hacker demanded ransom, a request that the company turned down.
When it comes to web applications, there is no substitute for a thorough penetration test. A comprehensive penetration test also offers visibility into blind spots within the application’s attack surface, giving teams a chance to plan ahead and keep attackers from succeeding.
GitHub has shared a DMCA filing from Twitter that indicates source code leak was apparently posted on the site shortly after Elon Musk's introductory round of layoffs began.
Investing in an automated security and backup solution gives your IT team and larger organization peace of mind that data is being regularly secured and accounted for. It also nearly eliminates the room for human error, which in cybersecurity, can be a huge factor in data loss.
With evolving threats and cybercrimes, things will undoubtedly get worse before they get better. This is leaving many cybersecurity professionals to consider new and innovative ways of improving productivity, reducing burnout, and combatting the cybersecurity skills gap.










