DoppelPaymer ransomware gang demanded Bitcoins worth about $34 million to unlock Foxconn's data encrypted in a ransomware attack that stole 100 GB of data and encrypted 1,200 servers.
Cyber Security
Cyber criminals, state-sponsored hackers and even the occasional disgruntled employee are constantly looking to gain unauthorized access for a variety of purposes: theft of money, cyber espionage, personal information for sale or for use in scams, and damage to critical infrastructure for just a few of the most common.
So how does an organization mitigate an entire world full of continual cyber attacks? Just as buildings have a number of necessary elements of physical security: access control, cameras, alarms and so on; there are similar key elements of cyber security that are absolutely vital for just about any modern business.
It starts with identifying and closing the most common doors that attackers use. For example, phishing attacks on employees are far and away the most common initial point of entry. The breach of even a low-level employee account can quickly turn into an escalation in access privileges and the ability to reach sensitive information. This is also true of smart devices, which are generally more poorly secured than computers and phones.
Without securing their mobile apps, any mishandling of customers' sensitive information during the holiday shopping season could haunt retailers for months and years to come.
The IoT Cybersecurity Improvement Act of 2020 is now federal law, meaning that US government "smart devices" will be subject to a new and more stringent set of security standards.
Nation-state hackers with suspected links to Russia were behind the security breach at FireEye. The attackers stole Red Team tools and searched for government customer information.
With the uptick in VPN use, the likelihood of data breaches also increases. Hardware-based VPNs use a variety of security measures and features to protect any and all information.
Security researchers discovered 33 vulnerabilities in millions of devices using four popular open-source libraries. The bugs allow attacks, including remote code execution and DDoS.
Prioritizing security, without burdening employees with endless processes, documents and passwords is more urgent than ever today.
Recent SEC filing disclosed that 18,000 customers installed the SolarWinds backdoor while Microsoft said that it alerted 40 customers targeted by the Russian state-sponsored hackers.
Microsoft detected a second hacking team targeting Orion software and running its campaign parallel to the Russian hacking group; SolarWinds acknowledges the threat.
The reasons that boards approve investments are quite different to the decision-making process undertaken by CISOs and IT decision makers themselves.










