Defenses

now browsing by tag

 
 

3 Ways to Strengthen Your Cyber Defenses

Source: National Cyber Security – Produced By Gregory Evans

By taking proactive action, organizations can face down threats with greater agility and earned confidence.

Security professionals are under much pressure. It’s understandable: Within the past 12 months, 61% of US and European businesses suffered a cyberattack, up from 45% in 2018, and the figures are higher in every category of breach, according to cyber insurer Hiscox. The frequency of attacks is also up, with the number of firms reporting four or more incidents increasing from 20% to 30% over the same time period.

As cyberattacks increase in volume and get more sophisticated – and hackers become more agile – CISOs must do more to build a comprehensive security strategy that can protect critical assets, monitor impact, and recover from any unexpected attacks or disruption. Building defenses will also require a fundamental shift in thinking. Security and IT leaders should take a hard look at how they’ve been working and ask themselves: Is my security posture really rock-solid? Have I taken care of the IT hygiene basics that are so often the cause of successful breaches? And what are those core fundamentals I should implement to ensure the risk of cyberattacks is minimized as much as possible going forward?

Here are three fundamentals.

1. Patch Vulnerabilities Within Minutes, Not Days
Many organizations fail to patch their hardware and software in a timely manner. Our own recent research, conducted with Forrester Consulting, revealed it can take between 28 and 37 business days to patch IT vulnerabilities. When left open, these security gaps can make it easier for malicious actors to strike, paving the way for a host of damaging assaults. From disrupted systems to data breaches, enterprises cannot operate securely or protect their data (or their customers’ data) if they fail to patch vulnerabilities as soon as they are discovered.

Hackers can and will use any opening available to breach networks, disrupt operations, steal data, or hold it ransom. And new exploits are discovered every day.  For example, in January the National Security Agency informed Microsoft about a vulnerability that would allow an attacker to, most significantly, enable remote code execution. (Microsoft quickly patched the vulnerability, which affected Windows 10 and Windows Server 2016/2019.)

And, despite some perceptions that Mac and iOS are more secure, Apple has been dealing with ongoing jailbreak issues for iOS devices, which create security vulnerabilities and are not always easy to patch.  

But it’s not just operating systems and mainstream programs that are at risk. Qualcomm’s February 2020 Security Bulletin detailed multiple vulnerabilities, each with a “High” security rating. Among them, Adobe FrameMaker suffered a memory corruption vulnerability, which could lead to arbitrary code execution, and remote attackers could also make life difficult for those who use a Belkin N300 router.

With these and so many other vulnerabilities discovered every single day, security teams must have a real-time view of their IT enterprise. Their view needs to extend across all computing devices and endpoints, and they must have the ability to quickly patch their hardware and software and monitor their environments. To that end, a unified endpoint management platform is one effective way to monitor and patch systems more quickly, thus reducing the likelihood of breaches and disruptions. [Editor’s note: The author’s company is one of many that offer a unified endpoint management platform.]  

2. Improve the Relationship Between IT and Security Ops
Last year prove challenging for other foundational concepts as well. Our research found a misplaced sense of confidence among IT decision-makers: Eighty percent said they were certain they could act on the results of vulnerability scans, yet fewer than half (49%) were confident they had full visibility into all the hardware/software assets in their environments, including servers, laptops, desktops, and containers.

What we found is that overall visibility dramatically improves when IT and security and operations work closer together, and they are better able to defend the entire enterprise using shared sets of actionable data. Among IT decision-makers, those with strained relationships with security (40%) struggled more with maintaining both visibility and IT hygiene compared to those with good partnerships. When these two teams build walls, things fall through the cracks, mistakes are made, breaches are inevitable, and the entire organization is at risk. All it takes is them getting on the same page about goals, areas of focus, and tools at their disposal.

3. Consolidate Point Tools
Tools proliferation is one of the biggest mistakes we see organizations make. Typically, as a problem emerges, businesses acquire a tool to remedy it. This approach often leads to a mountain of tools that are hard to manage and monitor at scale. Our research shows that in the past two years alone, IT teams obtained an average of five new tools just for security.

IT leaders need to step back and aggressively take stock of all their tools. They should identify the capabilities and deliverables their organizations need to implement, which will help them gain a clearer view into their networks and determine which tools they can consolidate across both teams. The end result will be a leaner, more judiciously managed environment that will help positive business outcomes.

Always Remain Vigilant
IT teams continue to face a tremendous challenge as they move forward into a new decade. Malicious actors are more sophisticated than ever before, while many enterprises are still struggling with strained internal relationships, unpatched vulnerabilities, and a lack of comprehensive endpoint visibility. By taking proactive action on these three steps, organizations can face down threats with greater agility and earned confidence.

Related Content:

Chris Hallenbeck is a security professional with years of experience as a technical lead and cybersecurity expert. In his current role as CISO for the Americas at Tanium, he focuses largely on helping Tanium’s customers ensure that the technology powering their business can … View Full Bio

More Insights

Click here for the Source link

The post 3 Ways to Strengthen Your Cyber Defenses appeared first on National Cyber Security.

View full post on National Cyber Security

#cybersecurity | #hackerspace | Podcast Episode 3: How the MITRE ATT&CK Framework Can Improve Your Defenses

Source: National Cyber Security – Produced By Gregory Evans

Listen and subscribe to our new podcast! Tripwire’s cybersecurity podcast features 20-minute conversations with the people who protect people from cyber threats. Hosted by Tripwire’s VP of Product Management and Strategy, Tim Erlin, each episode brings on a new guest to explore the evolving threat landscape, technology trends, and cybersecurity best practices. Spotify: https://open.spotify.com/show/5UDKiGLlzxhiGnd6FtvEnm Stitcher: https://www.stitcher.com/podcast/the-tripwire-cybersecurity-podcast RSS: https://tripwire.libsyn.com/rss […]… Read More

The post Podcast Episode 3: How the MITRE ATT&CK Framework Can Improve Your Defenses appeared first on The State of Security.

*** This is a Security Bloggers Network syndicated blog from The State of Security authored by Ray Lapena. Read the original post at: https://www.tripwire.com/state-of-security/podcast/podcast-episode-3-how-mitre-attck-framework-improves-defenses/

Source link

The post #cybersecurity | #hackerspace |<p> Podcast Episode 3: How the MITRE ATT&CK Framework Can Improve Your Defenses <p> appeared first on National Cyber Security.

View full post on National Cyber Security

#hacking | Snatch ransomware reboots PCs in Safe Mode to skirt antivirus defenses

Source: National Cyber Security – Produced By Gregory Evans Russian-speaking gang are big fans of Mockney heist caper. Blimey! Cybercriminals have developed a strain of ransomware that circumvents security protections by rebooting Windows machines in the middle of its infection routine. The Snatch ransomware forces a compromised Windows machine to reboot into Safe Mode before […] View full post on AmIHackerProof.com

AI vs AI: New algorithm automatically bypasses your best cybersecurity defenses

Source: National Cyber Security – Produced By Gregory Evans

At DEF CON this past weekend Hyrum Anderson of security firm Endgame demonstrated an alarming AI application: modifying malware to defeat machine learning antivirus software. The core premise of Endgame’s experiment was that every AI has blind spots, and those blind spots can be exploited by other AI. By hammering…

The post AI vs AI: New algorithm automatically bypasses your best cybersecurity defenses appeared first on National Cyber Security Ventures.

View full post on National Cyber Security Ventures

World’s Most High-Tech Voting System to Get New Hacking Defenses

Source: National Cyber Security – Produced By Gregory Evans

Estonia, the only country in the world where voters elect their leaders through online balloting, is taking steps to fend off potential hacking attacks as cyber-security fears intensify. A software overhaul for the system, introduced in 2005, is ready for testing before local elections in October, according to Tarvi Martens,…

The post World’s Most High-Tech Voting System to Get New Hacking Defenses appeared first on National Cyber Security Ventures.

View full post on National Cyber Security Ventures

How Will Innovative Technology Improve Our Cybersecurity Defenses?

Source: National Cyber Security – Produced By Gregory Evans

How Will Innovative Technology Improve Our Cybersecurity Defenses?

One consistent theme throughout Cybertech Fairfax 2017, which took place on Tuesday, June 13, was the critical need for innovative technology that safeguards against cyber intrusion. However, cybersecurity experts warn that as information technology (IT) improves, human interaction will continue to be a primary point of cybersecurity vulnerability unless leaders…

The post How Will Innovative Technology Improve Our Cybersecurity Defenses? appeared first on National Cyber Security Ventures.

View full post on National Cyber Security Ventures

4 Cybersecurity Best Practices to Bolster Small Business Defenses

more information on sonyhack from leading cyber security expertsSource: National Cyber Security – Produced By Gregory Evans As cybervillains intensify efforts to crack into your networks and devices, here’s how to keep your data safe. Through its exercise videos and nutritional shakes and supplements, Beachbody helps people get buff, lose weight and live healthier lives. In fact, … The post 4 Cybersecurity Best […] View full post on AmIHackerProof.com | Can You Be Hacked?