Cyber Defense eMagazine July 2020 Edition

More documents

Recommendations

Info

Improving UYOD Security While all organizations face increasing risk at the endpoint, small-to-medium sized businesses (SMBs) are particularly vulnerable to a cyberattack. How could they not be when they are operating on thinner margins, with limited IT staff and less financial reserves than enterprises? To minimize security risk, SMBs need to put these practices in place when personal devices are being used to access business data: Embrace a Cultural Security Mindset. One of the obstacles to getting personal device security under control is the mindset that someone else, usually IT, ‘owns’ the cybersecurity and data protection problem. Even though 70 percent of data breaches are known to start at the endpoint, this data point isn’t translating into the average employee or contractor’s consciousness. No matter how strong defenses are, users can introduce threats to a company’s networks by: • Falling for phishing scams • Posting secure information on social media • Inadvertently giving away credentials Employees will more enthusiastically embrace BYOD/UYOD security protocols if management has effectively communicated not only the how behind day-to-day practices to prevent malware or other attacks, but also why mitigating risks is so critical. Acceptable use guidelines might include: • How to detect social engineering tactics and other scams • What constitutes acceptable Internet usage • How remote workers should securely access the office network • How to properly use password management systems • How to report security incidents according to their urgency To encourage employees to adopt ownership of their own device security, it’s important to note smaller enterprises thrive on being more nimble. This ‘get it done now’ mentality can lead to applications being put into play before being thoroughly vetted for access controls and may cause a rise in “shadow IT” which may not meet organizational security standards. It can also lead to ‘rogue’ assets, or personal devices being deployed without full vetting for risks. The recent wholesale shift to remote working has highlighted this risk more than ever as personal device use explodes. When communicating with employees, there needs to be a careful balance between asking them to be more mindful of security and realizing their first goal is always to get their work done. Communication and education here are essential to individual participation in helping mitigate risk at the endpoint. Optimize Limited Resources. With limited IT staff, and often no dedicated security staff, SMBs will be looking to guard against the increased security risks from COVID-19 by executing strategic security initiatives for newly remote workers and supporting long-term viability. One critical need in threat defense is endpoint detection and response (EDR) software. EDR is vital to containing a costly breach that could financially devastate an SMB or enterprise. EDR can help software security teams contain, investigate and respond to threats that may have bypassed other defenses like antivirus tools. An effective EDR solution can provide automated analysis of data to identify suspicious activity, enabling IT to make a timely decision on the threat level and take quick action accordingly. Cyber Defense eMagazine –July 2020 Edition 30 Copyright © 2020, Cyber Defense Magazine. All rights reserved worldwide.
Simplifying personal endpoint device protection is also imperative. Managing protection for many devices, given scarce resources, demands centralized management from a single pane of glass to provide real time protection and on-demand remediation. Many SMBs may also consider outsourcing their security needs to a managed service provider (MSP) in order to free up resources, but this should not take the place of employee security training. Apply Privacy Protection. As users work from home, they need an extra layer of protection to stop cyberattack risk – as they are no longer behind the security of your corporate network. This is where the value of a virtual private network (VPN) comes into play. This important, and often overlooked, layer of defense ensures that a users’ IP address is private, secure, and encrypted, helping to protect your business data. Serving as a digital middleman between the user and the Internet, a VPN can deter hacking and unauthorized tracking which will help prevent employees from being cyberthreat targets. It works like an encrypted tunnel between the user and your data, keeping away the prying eyes of threat actors looking to access your business data – including passwords, personally identifiable information (PII), customer information, credit card numbers and more. By employing a VPN, you can limit the risk of employees working from their personal networks while protecting critical business and customer information. Post-COVID Environment Eventually employees will begin returning to work onsite, but this crisis has demonstrated the benefits of working at home. This means that the heightened use of personal devices for business is here to stay. SMBs can manage this new working reality by improving employee communication on threat prevention, creating a strategy to more thoroughly record and protect assets, and implementing the protection of a VPN to keep important business data away from prying eyes. In the longer term, all these security measures are going to be critical to economic viability. Cybercriminals have been exploiting COVID-19, but they will revert back to other forms of cybercrime soon enough and ransomware attacks, costly data breaches and business disruption will be back in the news. SMBs can avoid tragedy by implementing strong preventative anti-attack measures now. About the Author Akshay Bhargava is the Chief Product Officer at Malwarebytes, a leading provider of advanced endpoint protection and remediation solutions. Cyber Defense eMagazine –July 2020 Edition 31 Copyright © 2020, Cyber Defense Magazine. All rights reserved worldwide.
Page 1 and 2: Security, Convenience & Privacy: A
Page 3 and 4: IOT Security Embedded in Memory Car
Page 5 and 6: @MILIEFSKY From the Publisher… Ne
Page 7 and 8: Welcome to CDM’s July 2020 Issue
Page 9 and 10: Cyber Defense eMagazine -July 2020
Page 17 and 18: Your website could be vulnerable to
Page 25 and 26: Industry giants have chosen to appr
Page 27 and 28: emotely is governed correctly via u
Page 29: 3 Practices to Avoid Security Risk
Page 33 and 34: What can you do to protect your wor
Page 35 and 36: System Updates / Antivirus Security
Page 37 and 38: access to remote employees, and thi
Page 39 and 40: Organizations: It’s Time to Rethi
Page 41 and 42: While newer technologies, such as a
Page 43 and 44: database included 3,000+ email addr
Page 45 and 46: It is impossible to know whether Jo
Page 47 and 48: to prioritize higher-risk employees
Page 49 and 50: About the Author David Sanders is D
Page 51 and 52: On the other hand, buying a SOC sol
Page 53 and 54: In 2020, SOCs Are Understaffed Yet
Page 55 and 56: Figure 2: SOC leaders believe that
Page 57 and 58: it will create a team that is respo
Page 59 and 60: Figure 6: SOC managers drive metric
Page 61 and 62: • By then, our global cities may
Page 63 and 64: Managing Small Business Cybersecuri
Page 65 and 66: There are multiple risks when emplo
Page 67 and 68: Security in memory card format Swis
Page 69 and 70: About the Author Hubertus Grobbel i
Page 71 and 72: More variants: 439,000 new malware
Page 73 and 74: About the Author Lt. Commander (Ret
Page 75 and 76: What Are the Different Types of Thr
Page 77 and 78: Even though DHS recommends using tw
Page 79 and 80: To make matters even more complicat
Page 81 and 82:
Should We Be Worried About Vehicle
Page 83 and 84:
Still, with these cases attracting
Page 85 and 86:
Cyber Attacks at Sea: Blinding Wars
Page 87 and 88:
North Korean hackers.5 Later this y
Page 89 and 90:
200-300 million for Q3 2017.17 More
Page 91 and 92:
About the Author Julien Chesaux is
Page 93 and 94:
Why not just keep using a jailbreak
Page 95 and 96:
Conclusion Jailbreak-free acquisiti
Page 97 and 98:
ut the case is if such a behavior i
Page 99 and 100:
How Bad Guys Could Take Advantage o
Page 101 and 102:
How it Works Whenever you sign in t
Page 103 and 104:
Understanding the Types of Single S
Page 105 and 106:
About the Author Ayman is founder o
Page 107 and 108:
According to research conducted by
Page 109 and 110:
Source: Apple Insider It is also im
Page 111 and 112:
Post COVID-19: Cloud, Remote Work a
Page 113 and 114:
The Rise of COVID-19 Phishing Attac
Page 115 and 116:
Donation Solicitations - The Most D
Page 117 and 118:
Post COVID-19: Password Extinction
Page 119 and 120:
The Future Of Security - Prediction
Page 121 and 122:
Post COVID-19 Cybersecurity and Fut
Page 123 and 124:
picture of access in the cloud and
Page 125 and 126:
connectivity? To ensure comprehensi
Page 127 and 128:
About the Author Stan Lowe,Global C
Page 129 and 130:
For many organizations, the Securit
Page 131 and 132:
Fig 1: AI Meme This article documen
Page 133 and 134:
Fig 3: Screengrab of Crypto’s UI
Page 135 and 136:
hon() Fig 4: Screengrab of Honeypot
Page 137 and 138:
with high-precision and also send k
Page 139 and 140:
References “Security in Computing
Page 141 and 142:
Cyber Defense eMagazine -July 2020
Page 143 and 144:
Page 145 and 146:
Page 147 and 148:
Page 149 and 150:
Page 151 and 152:
Page 153 and 154:
Page 155 and 156:
Meet Our Publisher: Gary S. Miliefs
Page 157 and 158:
Free Monthly Cyber Defense eMagazin
Page 159 and 160:
Page 161 and 162:
Page 163 and 164:
Page 165 and 166:
show all

Cyber Defense eMagazine July 2020 Edition

Create successful ePaper yourself

Delete template?

Save as template?