The Cyber Defense eMagazine August Edition for 2023

More documents

Recommendations

Info

Roughly two years after the unveiling of the 2018 US Cybersecurity Strategy, COVID-19 swept the globe, irrevocably changing the world as we know it. In March 2020, much of the US was locked down, forcing many employees to work from home. By June, the FBI reported a 75% increase in cybercrime. Just under a year later, in May 2021, the Colonial Pipeline incident occurred. DarkSide, a cybercriminal group with ties to Russia, launched a ransomware attack on a pipeline system originating in Houston, Texas, that supplies gasoline and jet fuel to much of the Southeastern United States. The attack caused mass fuel shortages, halted flights, and brought about a state of emergency. In February 2022 the Russian army stormed Ukraine’s borders. War had returned to Europe. The invasion provoked widespread condemnation from world leaders and sparked an atmosphere of geopolitical unrest that persists to this day. Moreover, throughout the war, Russia has repeatedly launched cyberattacks on Ukraine to varying effects. Russia also engaged in traditional kinetic attacks to destroy Ukraine’s access to the internet. These events undoubtedly helped influence the U.S. government’s attitudes towards cybersecurity. From COVID-19 to the Colonial Pipeline attack to the eruption of war in Europe, it became clear that statesponsored cyberattacks on US infrastructure were no longer out of the question. The development of more stringent regulations was a natural outcome. What role should the private sector play? The prospect of cyber warfare has dragged the private sector into conflicts to an extent that hasn’t been seen in the US since the Second World War. Private organizations are now a legitimate target for military campaigns. For nations such as the United States, who have grown unaccustomed to fighting battles - kinetic or otherwise - on their own soil, this is a particularly worrying prospect. As a result, the private sector has a significant role to play in national security, and this doesn’t only apply to organizations that could be considered CNI. Any organization could be targeted by state-backed hackers, for a number of reasons. The nature of modern business supply chains means that any organization could be seen as an attractive target, as they could be the first step on the way to breaching a larger, more critical organization. In light of this, it’s more important than ever for the private sector to take responsibility for their cybersecurity. Their responsibility now goes beyond the protection of their reputation, finances, and customer data, and into the realm of keeping their nation safe. This is absolutely key to understanding why global superpowers such as the US are bringing in more stringent regulation and recommendations, and why automated continuous security validation is so important. Organizations must be able to tell whether or not they are at risk, and tools such as breach and attack simulation (BAS)—which provide a way for organizations to continuously validate the efficacy of their security ecosystem, identify gaps, and take meaningful remedial action - are essential to providing that information. Cyber Defense eMagazine – August 2023 Edition 106 Copyright © 2023, Cyber Defense Magazine. All rights reserved worldwide.
Could cybersecurity be considered CNI? We’ve already touched upon the importance of cybersecurity for CNI, but this begs the question whether cybersecurity could actually be CNI. The Center for the Protection of Critical National Infrastructure (CPNI) defines CNI as: “National Infrastructure are those facilities, systems, sites, information, people, networks and processes, necessary for a country to function and upon which daily life depends. It also includes some functions, sites and organizations which are not critical to the maintenance of essential services, but which need protection due to the potential danger to the public (civil nuclear and chemical sites for example).” Considering that all of the industries that would fall inside those parameters rely on cybersecurity to continue operating, then surely cybersecurity, by definition, should also be considered CNI. CNI sectors are considered critical because if any failed, a country could cease to function. Moreover, CNI suffers more frequent, diverse, and sophisticated cyberattacks than any other sector; this means that should the cybersecurity sector fail, an entire nation’s CNI could fail with it. In summary, it’s clear that the mere prospect of cyber warfare has had a major impact on government attitudes towards cybercrime. While, from a security perspective at least, this change is welcome, it does mean that private organizations will be increasingly pressured to take responsibility for their cybersecurity. Employing security tools, like BAS for example, that provide deep insight into an organization’s environment is more important than ever. Whether we like it or not, more stringent cybersecurity regulation is on the horizon, and businesses must be prepared. About the Author Avishai Avivi is the Chief Information Security Officer at SafeBreach, the pioneer in Breach Attack and Simulation (BAS.) Avi brings more than 30 years as a senior information security leader with companies such as Wells Fargo, E*Trade, and Experian, where he created and implemented security programs with a focus on best practices and control maturity. Avi’s security career started with the Israeli Defense Forces Unit 8200 and has included multiple roles and domains across information security, product R&D, professional services, customer support and strategic leadership. Avi holds a dual MBA from UC Berkeley’s Haas School of Business and Columbia University’s Business School. He is CISSP, CISM, CRISC, CISA, CIPM and CIPT certified and holds the Stanford University Strategic Decision and Risk Management program certification. Avi can be reached online at linkedin.com/in/aavivi and at http://www.safebreach.com Cyber Defense eMagazine – August 2023 Edition 107 Copyright © 2023, Cyber Defense Magazine. All rights reserved worldwide.
Page 1 and 2:
Implementing a Modern, Holistic App
Page 3 and 4:
Lessons Learned: Cyberattack Shutte
Page 5 and 6:
@MILIEFSKY From the Publisher… De
Page 7 and 8:
Welcome to CDM’s August 2023 Issu
Page 9 and 10:
Cyber Defense eMagazine - August 20
Page 11 and 12:
Page 13 and 14:
Page 15 and 16:
Page 17 and 18:
Page 19 and 20:
eport to the CISO. The key to makin
Page 21 and 22:
Transformative Benefits of ML&AI in
Page 23 and 24:
About the Author Gizem Yılmaz is t
Page 25 and 26:
wild west of the late 19 th century
Page 27 and 28:
Bot Security: The Hunt for Vulnerab
Page 29 and 30:
sophisticated bot attacks and fraud
Page 31 and 32:
Conclusion: Evolution of Dynamic Bo
Page 33 and 34:
While making this progress, agencie
Page 35 and 36:
Securing the Cloud Organizational D
Page 37 and 38:
Implementing BYOK requires a transf
Page 39 and 40:
Will Zero Trust Replace SD-WAN? By
Page 41 and 42:
To conclude, in the ever-evolving l
Page 43 and 44:
computing landscape, ensuring their
Page 45 and 46:
In order to modernize outdated IT i
Page 47 and 48:
Employee burnout in the cybersecuri
Page 49 and 50:
Six Must-Focus Cybersecurity Areas
Page 51 and 52:
About the Author Zachary Folk curre
Page 53 and 54:
Create a Cybersecurity Incident Res
Page 55 and 56: Lessons Learned: Cyberattack Shutte
Page 57 and 58: It doesn’t have to be. First, we
Page 59 and 60: With the increasing use of AI in di
Page 61 and 62: About the Author Tom is a Senior Sa
Page 63 and 64: in the states of Iowa, Indiana, Ten
Page 65 and 66: Closing The Gap: Resolving Human Er
Page 67 and 68: Amendable Human Error #3 - Lack of
Page 69 and 70: learning, and employees won’t ben
Page 71 and 72: 8 Tips for Best Results in Red-Team
Page 73 and 74: Threat actors constantly look for b
Page 75 and 76: Evolving Data Landscape: Rethinking
Page 77 and 78: these advancements, we can ensure t
Page 79 and 80: How hackers are using AI to their a
Page 81 and 82: 4 Secure Framework Considerations B
Page 83 and 84: choose to mitigate risks either usi
Page 85 and 86: About the Author Jhilam Biswas is a
Page 87 and 88: majority of sectors. The number of
Page 89 and 90: How Hacking of The Internet of Thin
Page 91 and 92: As it’s given through the Figure
Page 93 and 94: Figure 5. The remote options of an
Page 95 and 96: About The Author Milica D. Djekic i
Page 97 and 98: The Business of Cybercrime When you
Page 99 and 100: Passive Optical Networks: A Game Ch
Page 101 and 102: Aligned with its commitment to envi
Page 103 and 104: About the Authors Folden Peterson,
Page 105: ecommending automated continuous va
Page 109 and 110: The confidential policies, updates,
Page 111 and 112: ISO Certification is the Key to Bet
Page 113 and 114: After our experience with this cert
Page 115 and 116: of SRA to a resource. Additionally,
Page 117 and 118: Steps for Preparing for a Quantum-R
Page 119 and 120: managing their crypto assets, organ
Page 121 and 122: Token-based authentication offers a
Page 123 and 124: When it Comes to ZTNA, Buyer Beware
Page 125 and 126: You’re Blind to Endpoint Risk Thi
Page 127 and 128: Why compliance standards are import
Page 129 and 130: Cyber Defense eMagazine - August 20
Page 139 and 140: Free Monthly Cyber Defense eMagazin
show all

The Cyber Defense eMagazine August Edition for 2023

Create successful ePaper yourself

Delete template?

Save as template?