According to a Justice Department statement, a Russian FSB unit called 'Turla' has operated the Snake malware to conduct cyber espionage for nearly 20 years and made use of it to steal data from at least 50 countries.
For people to build good cyber hygiene habits, they need ongoing reinforcement that keeps these activities top of mind. Technology teams must regularly communicate with their end-users, treating them like customers and partners, to build a proactive mindset over time that bleeds into the user’s security mindset.
Approaching privacy and data protection with ethics beyond regulations means assessing its potential to harm people and society, generate negative behavior, or reflect discriminatory patterns. This needs to extend not only to data management but also to account security and transactions.
When conducting penetration tests, regardless of an organization’s size or maturity, certain kinds of attacks recur so regularly that security teams should develop standardized practices to defend against them. Here are some suggested strategies for conducting detection and mitigation.
There is the need for additional cyber defenses of growing 5G networks – and we should expect to see increasing policy pressure around the vetting process for hardware and software that are crucial to these upgraded networks. This is raising the importance of supply chain risk management for the telecommunications industry.
Many countries now mandate that its citizens’ data must stay in the country. This is counter to the spirit of globalization and adds layers of complexity to delivering IT services and security. It is time to put data at the center of modern security programs.
SaaS applications are not going anywhere, and we must face the fact that they have access to our company’s most sensitive data. With SaaS, the shadow IT challenge has expanded and deepened even further.
Amid great number of existing frameworks in the area of risk management, compliance, privacy and security, new are still drafted and existing ones updated and refined. This is first and for all for big and global companies on which there is most pressure to stay compliant and ethical in whatever they do or intend to do.
Companies that are downsizing, or still planning to, must have an insider threat program in place or run the risk of falling victim to a massive cyberattack that could cripple the business for months to come, ultimately making the cost reductions a worthless exercise.
Secure Service Edge (SSE) may be the architecture of the future by delivering connectivity and security tools from the cloud to reduce complexity, risk, and cost.
