Cyber Defense eMagazine November Edition for 2021

social engineering attacks by reducing the number of ways attackers can obtain access to key systems
or information.
2. Data breach via malicious apps
The millions of freely available apps on employees' devices pose a significantly greater threat to
businesses than mobile malware. Since 85% of today's mobile apps are essentially insecure, this is the
case. Hackers may now simply locate an unprotected mobile app and exploit it to plan broader assaults
or steal data, digital wallets, backend details, and other lucrative information directly from the app.
When your employees go to Google Play or the App Store to download apps that appear to be harmless,
the apps will ask for a list of permissions before they can be downloaded. These permissions typically
demand access to files or folders on the mobile device, and most individuals simply scan over the list of
permissions and agree without thoroughly evaluating them.
This lack of oversight, on the other hand, might leave devices and businesses susceptible. Even if the
software performs as expected, it has the potential to mine corporate data and distribute it to a third party,
such as a rival, exposing critical product or business data.
3. Unsecured public & home WiFi Networks
Since there's no way of knowing who set up the network, how (or if) it's secured with encryption, or who's
now accessing or watching it, public WiFi networks are inherently less secure than private networks.
Furthermore, as more firms provide remote work choices, the public WiFi networks your employees use
to access your servers (for example, from coffee shops or cafés) may pose a security risk to your
organisation. Cybercriminals, for example, frequently set up WiFi networks that appear legitimate but are
actually a front for capturing data that travels through their system - a "man in the middle" attack.
Requiring employees to utilise a VPN to access corporate systems or data is the greatest approach to
safeguard your firm from dangers over public WiFi networks, this can also be carried out for those working
from home wifi’s. This ensures that their session remains private and safe, even if they access your
systems via a public network.
4. End-to-end encryption gaps
A hole in an encryption gap is similar to a hole in a water pipe. While the point where the water enters
the pipe (your users' mobile devices) and exits the pipe (your systems) may be secure, the hole in the
middle allows bad actors to gain access to the water flow.
One of the most common examples of an encryption gap is unencrypted public WiFi networks (which is
why they pose such a significant risk to businesses). Since the network isn't secured, fraudsters can gain
access to the information your employees share between their devices and your systems. WiFi networks,
however, aren't the only thing that may be exploited; any application or service that isn't protected might
provide attackers access to important company data. Any unencrypted mobile messaging apps that your
Cyber Defense eMagazine – November 2021 Edition 65
Copyright © 2021, Cyber Defense Magazine. All rights reserved worldwide.