Data breaches and ransomware have hit many organizations in 2019 and expected to continue into 2020. What would an effective enterprise cyber security entail in 2020 and beyond?
Cyber Security
Cyber criminals, state-sponsored hackers and even the occasional disgruntled employee are constantly looking to gain unauthorized access for a variety of purposes: theft of money, cyber espionage, personal information for sale or for use in scams, and damage to critical infrastructure for just a few of the most common.
So how does an organization mitigate an entire world full of continual cyber attacks? Just as buildings have a number of necessary elements of physical security: access control, cameras, alarms and so on; there are similar key elements of cyber security that are absolutely vital for just about any modern business.
It starts with identifying and closing the most common doors that attackers use. For example, phishing attacks on employees are far and away the most common initial point of entry. The breach of even a low-level employee account can quickly turn into an escalation in access privileges and the ability to reach sensitive information. This is also true of smart devices, which are generally more poorly secured than computers and phones.
A study has found that while three-quarters of security exposures were not exploitable, a measly 2% of security exposures put 90% of organizations' critical assets at risk of exploitation.
The two data breaches are separate issues, but the common theme is criticism of Oracle's forthrightness about what exactly happened and what victims should expect going forward.
A U.S. nuclear agency was among the victims of the SharePoint vulnerability chain, which was exploited to compromise over 54 organizations across the United States, Europe, and Asia.




