Researchers found that although 80% of financial institutions suffered data breaches per year from vulnerabilities in their authentication methods, 64% refused to upgrade.
Cyber Security
Cyber criminals, state-sponsored hackers and even the occasional disgruntled employee are constantly looking to gain unauthorized access for a variety of purposes: theft of money, cyber espionage, personal information for sale or for use in scams, and damage to critical infrastructure for just a few of the most common.
So how does an organization mitigate an entire world full of continual cyber attacks? Just as buildings have a number of necessary elements of physical security: access control, cameras, alarms and so on; there are similar key elements of cyber security that are absolutely vital for just about any modern business.
It starts with identifying and closing the most common doors that attackers use. For example, phishing attacks on employees are far and away the most common initial point of entry. The breach of even a low-level employee account can quickly turn into an escalation in access privileges and the ability to reach sensitive information. This is also true of smart devices, which are generally more poorly secured than computers and phones.
Among the major highlights of the Verizon Cyber Espionage Report: criminal organizations and former employees play a trivial role in overall attempts, the overwhelming majority come from states.
Remote workers executing their tasks through both company-issue and personal devices have become a new normal. What are the nine security hacks that can keep them from being vulnerable?
A study has found that while three-quarters of security exposures were not exploitable, a measly 2% of security exposures put 90% of organizations' critical assets at risk of exploitation.
98% of top 1,000 U.S. websites were reported to be inadequately secured against client-side attacks which raise significant alarm bells about the current state of modern web architecture.
More recent approaches to threat modeling is including DevSecOps, putting a greater focus on developers as a critical arm of cybersecurity. Additionally, threat modeling is pulling away from a reliance on security professionals looking at finished products, instead asking engineering to embrace the concept of security as code.
Organizations can implement an insider threat solution with good intentions and all in the interest of heightening security posture. But improper implementation can cause the loss of an employee’s drive just as quickly as a potential nefarious opportunity that outweighs the cost.
FCA issued remote work guidance in October outlining its expectations for compliance with its regulatory framework and effectively signaling the end of any reprieve for dispersed workforces.
We are living in the middle of an arms race in cybersecurity. Adversaries are leading the way, while the good guys reconfigure and retool, and the cycle continues. What does the crystal ball look like for the cybersecurity and risk management world of 2022?
Lateral movement has been a common factor in breaches, using identity as a universal attack vector to traverse environments unchecked. Organizations must have full visibility of the threat posed by identity and proactively wrap MFA round exposed assets.










