Magazine menu Close Magazine menu

Author

Suraya Casey

Suraya Casey is a freelance writer and editor based in New Zealand. Her interests include sustainability, energy, reforestation, statistics, healthcare and the arts.

Get in touch with Suraya

Latest stories by Suraya

paper dead shredder

Is paper dead?

  • Digital transformation
  • min read
    • For retailers, predicting customers' future wants and needs is crucial – especially in this era of disrupted supply chains. I hope you won't recognize this story as something that might happen in your business, but it demonstrates how soon retailers of all sizes could find themselves in a new future. I bought a blouse recently from a traveling vintage clothes seller. Picture several racks of bright retro outfits set up under a caravan awning with a changing room crafted from tie-dyed blankets. Incense hangs in the air, as does the ringing of tiny bells attached to the seller's impossibly long hair, jingling as she wanders around after customers, straightening coat hangers. To pay, I offer cash, but she instead presents me with a beautifully calligraphed sign showing her bank account details. Given the riskiness of this practice, I offer a moment of security education. She tells me she's in the habit of giving out her bank details because it means more sales, and keeping enough change around is hard when you're always on the road. Even those on the fringes are moving towards electronic payment for its convenience and customer preference, albeit sometimes not in ideal ways. When it comes to meeting customer expectations in how your transactions happen, are you ready for a future where paper money, receipts, plastic cards are a thing of the past? Could your retail business work in a world where all money is changing hands by smartphone? Among Kaspersky researchers' privacy prediction for 2023 is that we'll keep seeing smartphones and other smart devices encroaching on activities once dominated by paper and plastic cards. A future where all we'll need is a smartphone seems close when we're paying by near-field communication (NFC) like Apple or Samsung Pay or QR code like Swish, or using apps to show COVID-19 testing and vaccination status. What does this mean for paper and plastic transactions? And what privacy and security issues should business consider when it comes to doing it all by smartphone? Environmental reasons to stop using paper and plastic Some might say the sustainability drive to eliminate paper and plastic in business transactions is overplayed. While both have significant environmental impacts, business transactions are not a major source. Meanwhile, electronic transactions can be responsible for much energy use and the equipment used will ultimately become resource-heavy and hard-to-recycle ewaste. Gen Z, Millennials and those younger will do much to avoid adding more plastic and paper to the world. Regardless of environmental impact, consumer demand for more convenient paperless and cardless transactions will only grow. Processes likely to move to smartphone apps Digitized identity documents look set to be the next big frontier for smartphones. It's already been a common approach to declaring COVID-19 testing and vaccination status worldwide, but soon passports, driver licenses, student IDs and more will be made available through apps. Germany started using app-based ID cards in 2021. Around the same time, Apple announced several US states would make digital identity cards and driver licenses available using Apple Wallet. ID stored on phones brings convenience and risk. A well-implemented system would let stores verify customers' age without seeing personal details they don't need, like home address – also known as 'zero trust' security. Digitized IDs could also speed up know-your-customer (KYC) procedures when applying for a loan with a smartphone. But using a smartphone to store growing amounts of personal data introduces 'single point of failure' security risk. Those who develop and commission smartphone software like apps must ensure top-notch device security and privacy-preserving data storage. Cardless cash withdrawal at ATMs is taking off around the world, especially where bankcard fraud is more common, like India. Smartphone apps enable cardless withdrawals, for example, scanning a QR code on the ATM screen with a payment app like Google Pay, or using near-field communication (NFC.) Again, these transactions aren't without risk. Speaking to price-comparison service Bankrate, Ricardo Pina, founder of personal finance blog The Modest Wallet, said, "Since bank cards are being replaced by phones, criminals will now be more enticed to target and hack your phone to mine your data, information and even change your phone and bank app settings." When will paper and card transactions become history? Those who run businesses that experience higher overheads thanks to processing cash, cards and printed receipts may dare to dream of a world where these go the way of the 'check.' Ubiquitous throughout most of the 20th century, many banks have stopped issuing and accepting these. Check payment is expected to be extinct by 2026. Those old enough to remember when checks were commonplace might think they'd disappeared years ago. But sometimes these methods strongly persist in parts of an economy that need them for specific reasons. A few years ago, a friend and I hiked the five-day South West Coastal Path in Cornwall, UK – and yes, it was glorious. This part of the UK is far from any major city. We were surprised to notice most bed-and-breakfasts  accepted only cash or check. Once we understood the area's geography, we paid by check wherever we could. Traveling on foot and far from towns, it seemed unwise to part with cash we might need. These businesses told us they didn't take card payments because they only had customers in summer, making point-of-sale machines uneconomic. Similarly, can smartphones – and reliable access to affordable data to operate apps – be all things to all people in all places? While access to mobile technologies has certainly enabled greater economic participation from marginalized people, we can easily overestimate how many can and will use these technologies if we use them or see them used around us often. Pew Research estimates around 85 percent of the US population owns a smartphone, but in China and India, it's lower at 70 percent. While China leads the world in mobile payment adoption, smartphone ownership numbers don't tell us how many people could use their smartphone for payments – for example, successfully download and register to use payment apps, and access data when needed. Cash transactions still account for far more business than many people think – in 2021, customers used cash for over 20 percent of point-of-sale transactions globally, according to the International Currency Association. Many businesses wouldn't survive losing 20 percent of their sales. There is also the inevitable backlash against smartphones because of negative mental health impacts, seeing some choose to quit or radically reduce how much they use them. It seems paper- and card-based identity and payment options will be with us much longer than we think, if the lifecycle of check payment is anything to go by. For small business, alternative point-of-sale card payment providers are fast making accepting cards more affordable, making paying by card even more ubiquitous without reducing security. When it comes to taking payment, it 'pays' to be flexible and listen to what your customers want, rather than focusing on what suits your business. Meanwhile, keep an eye on evolving technology making retail transactions simpler and more affordable.
cybersecurity predictions

What a year of changing cyberthreats can tell business

  • Threat intelligence
  • min read
    • For business leaders, knowing what's changing in cybersecurity helps you recruit the right people with the right skills today for what you'll soon need. Kaspersky's 2022 Security Bulletin (free download) analyzes which attacks their global cloud service Kaspersky Security Network (KSN) has detected, blocked and disabled over the past year. There are some numbers your business will want to know about. 15 percent of users had a malware attack Kaspersky Security Network blocked malware-class attacks on some 15 percent of users in 2022, or around 1 in 7. This shows just how common malware is. The malware class of attacks covers familiar cybercrime tools like viruses, trojans and ransomware. The countries where Kaspersky's software blocked the most malware attacks in 2022 were Tunisia, Taiwan and Algeria. 506 million web-based attacks Web-based attacks result from users downloading files that then trigger a cyberattack. These might come from websites made by cybercriminals, infected online resources within user-created content (like online forums) or legitimate resources that cybercriminals have hacked. Cybersecurity education can be a powerful tool in preventing web-based attacks. Heathrow Airport has a novel staff cybersecurity education that carefully targets those needing it most with 10-minute online learning modules. 1.4 million cryptocurrency mining attempts Cryptocurrency mining is very much on the rise. Kaspersky Security Network detected around 1.4 million attempts to install mining software in the past year. Mining means digitally solving complex mathematical problems that verify cryptocurrency transactions, which also earns cryptocurrency. It slows devices and uses much electricity. In November 2022, Kaspersky announced they'd seen a 230 percent growth in cryptocurrency mining in the third quarter of 2022 compared with the same period in the year before. 102 million attempts to visit malicious URLs Malicious URLs are a common tool in 'phishing' attacks – when cybercriminals send emails inducing recipients to click on links, downloading malware. Endpoint security is vital in protecting against phishing, as is employee cyber-awareness. 377,000 attempts to steal money These attacks were often in the form of 'banking Trojans'. In early 2022 a particularly sophisticated money-stealing Trojan popped up that masquerades as a banking app and imitates phone conversations with bank employees. The app fooled many, highlighting the need to teach employees 'cyber hygiene' – like remembering to pause and think before downloading anything. Those who provide legitimate apps or financial services might also reflect on how they can show customers their products are trustworthy. These big numbers in cybersecurity over the past year show how threats to business are growing and changing. Cybercriminals always find new ways to get through consumers' and employees' defenses. By combining hiring the right people with robust cybersecurity education and strong security solutions, your business will greatly reduce its chances of a serious attack succeeding. Then, you can spend your time on what you do best.
threats outer space

How criminals could use space junk to attack any business

  • Emerging tech
  • min read
    • A powerful way cybercriminals can cause catastrophic damage on Earth is to attack in space. It may sound like science fiction, but now we all rely on space infrastructure to do business, any organization could be affected. Space enthusiast and Distinguished Chair of the cybersecurity program at Middle East Institute Chris Kubecka explains a little-known space disaster scenario we should be more aware of in Tomorrow Unlocked's video Threats in Outer Space. Smash-ups in space Although space exploration has brought many world-changing advances, it's left orbit like many places on Earth – littered. From obsolete satellites to rocket parts and chips of paint, space junk circles the Earth at high speeds, threatening to collide with useful things, like working satellites and the International Space Station. Collisions could be deadly or cause irreparable damage to expensive equipment. Any smash-up creates more space junk, raising the risk to other orbiting objects. For a sense of just how much 'stuff' there is up there, see known space objects tracked in real-time on StuffIn.Space, some known only as 'debris' or 'unknown.' The 'black swan' of space crashes One of the most serious consequences of a space collision is Kessler Syndrome. Kubecka describes it: "A big enough collision would create a chain reaction, causing space junk to smash into each other all over orbit, forming a dust cloud." An accident or deliberate attack could trigger a Kessler Syndrome event. Kubecka explains, "It's now so cheap to build 'attack CubeSats' or even larger satellites. You could cause collisions." She also points to the growing use of Internet of Things (IoT) devices in space tech. "If IoT goes rogue, that's a big problem." As wealthy business people become more visible in space exploration, the potential for huge media attention will attract cybercriminals to attack their space systems and use them to create chaos in space – and so, chaos on Earth. Preventing a 'Kessler' event As well as protecting space systems from cyberattack through the best available methods, like cyber immunity – building systems in a way that makes them almost impossible to compromise – we must take out the space trash. As part of the Securing Space initiative, Kaspersky supports fledgling innovators StartRocket as they develop a new way to remove space debris from orbit – with foam.
behind screen heathrow airport

Why cybersecurity education is taking off at Heathrow Airport

  • Safer business
  • min read
    • You might not think of cybersecurity first when it comes to airport safety, but Jasvinder Pham, Head of Cyber Development and Assurance and Matthew Bourne, Cyber Security Manager, believes it's at the heart of London Heathrow's safety practice. And education is their most important protective gear against cybercriminals that use psychological tricks, also known as social engineering, on their staff. In Tomorrow Unlocked's video Next Departure: Fighting Cybercrime, Pham and Bourne outline how they're helping Heathrow staff see through cybercriminals' mind games. What is social engineering? And Pham says it's a common tactic. "Nine out of ten breaches are done through social engineering. At Heathrow, we tend to get scattergun emails across the whole estate. We call that phishing. They'll ask a user to enter login and password details or click a link." Learning to recognize the mind tricks Where phishing emails are a scattergun approach, the Heathrow cybersecurity team responds with carefully targeted cybersecurity education. They use internal advertising to raise staff awareness of social engineering techniques, then send out their own phishing-style test emails to see who takes the bait. It's part of a wider cybersecurity education program based on identifying those who can benefit most from the learning. Bourne says, "We've turned training courses on their head by asking the questions first. If you answer them all correctly, you don't need the training. If you don't, you can sometimes complete training in less than 10 minutes." Bourne believes cybersecurity training should resemble real-world cyberthreat situations. "We've started using live actors to get a bigger impact and bring it to the context of the airport." Customers are ready for better security Pham says Heathrow wants to be on the cutting edge of security technology, but it's not always easy. "We want to stay one step ahead, but I feel like we're one step behind." But Pham believes one thing on their side is staff and customer readiness to embrace the latest security features. "People use services like WhatsApp and multi-factor authentication in their home. They want more, so we need to make sure we don't miss out."
heathcare emotet

How could hospitals be better protected from cyberattacks?

  • Safer business
  • min read
    • "In wartime, a red cross on a hospital's roof protects it from bombing. But in cyberwar, there's no convention to protect hospitals," says Professor Dr. Harald Dormann, Head Emergency Room Physician at Germany's Klinikum Fürth hospital. With thousands of networked computers and medical devices crucial to patient care, Klinikum Fürth's quick thinking turned a malware attack into an unlucky day for cybercriminals. Tomorrow Unlocked's video, Malware: A New Virus in the Hospital, tracks how Klinikum Fürth's actions stopped the ransomware attack in its tracks and likely saved lives. How do cybercriminals use malware against hospitals? The first hint of an attack was when Klinikum Fürth's IT support team started receiving strange emails from users – a hallmark of the dangerously effective malware Emotet. Emotet also uses Wi-Fi networks to spread. If infected, a wirelessly connected device scans nearby networks and infects other devices using a password list. Klinikum Fürth found 65 systems infected with computer viruses and malware. Thanks to acting fast, they isolated the malware before it encrypted data and held it for ransom – usually the Emotet attack's goal. Malware is common. From March to June 2021, Kaspersky software blocked 1.7 billion malware attacks. It's also becoming more dangerous, with cybercriminals using particularly damaging malware like Emotet for fraud and ransomware attacks. The hospital's surgical cyberdefense Professor Dr. Dormann recounts how hospital staff stepped up when they learned of the cyberattack. "When our CEO told us what had happened, some were nervous. Some were pale. But all were motivated to act." First, they began diverting new patients to nearby hospitals. Then they disconnected the hospital from the internet to reduce the risk of infecting other institutions. They put together taskforces of clinicians, administrators and IT staff to analyze the problem. Then, prioritizing the most critical medical devices, they checked for malfunctions. Extra staff were brought in to help switch to paper-based working. How to stop and prevent malware attacks Klinikum Fürth's story offers many lessons. Their fast response shows why organizations should plan what they'll do if attacked. Cybersecurity education can help staff get wiser to threats like Emotet's use of spoofed emails. Strong passwords help defend against malware that uses Wi-Fi networks to spread. Read more about how to prevent and reduce the impact of ransomware attacks.
engaging women

Infographic: Why women leave tech careers, and what to do about it

  • Leadership
  • min read
    • In tech, there's much talk of what we can do to recruit more women. But we rarely talk about that even bigger problem: Once we recruit women into tech roles, they're more likely to leave the career than men. The good news is, leaders can do a lot to change that. How leaders can help more women (and men) stay engaged at work When it comes to retaining more women, the changes you make will likely benefit all staff. Work on these six areas to help keep everyone in your team engaged. 1.    Get better at onboarding Karen Holtzblatt of WITOps says, "50 percent of women are not clear about what to do to be successful. All new hires need to develop strong connections and knowledge and skill to succeed. Use our Team Onboarding Checklist to onboard right." 2.    Encourage valuing and belonging "Women need to feel belonging and value in their team," says Karen Holtzblatt. WITOps have engaging, practical activities to foster more supportive workplace behaviors. 3.    Use tools to reduce bias "Map the full employee experience and identify where bias influences career paths. Use tools and processes that mitigate human and automated biases," says Dr. Patricia Gestoso, BIOVIA's Head of Scientific Customer Support in Kaspersky's Women in Tech report 2021. 4.    Be all about mentoring Mentoring helps more women rise through the ranks, says global tech leader Margaret Dawson. Leaders should take opportunities to mentor and encourage team members to get a mentor. 5.   Take breaks and switch off 'Always on' work culture is bad for productivity and health, and affects women more because they're more likely to have care responsibilities. Lead by example: Take regular breaks, switch off after hours and encourage all in your team to do the same. 6.    Identify and challenge ways your business centers men Are employee benefits male-coded, like tickets to sporting events? Is competitiveness overly encouraged? Do after-work drinks loom large? Review benefits and offer what more women need, like flexible work and good parental leave. Infographic references 1 Accenture Resetting Tech Culture report 2021 2 Accenture Resetting Tech Culture report 2021 3 Pew Research 4 New study reveals key to the gender gap in C-suite 5 Karen Holtzblatt, WITOps 6 Kaspersky Women in Tech report 2020-21 7 WITOps onboarding research 8 WITOps onboarding checklist 9 Fostering more supportive behaviors 10 Kaspersky Women in Tech report 2020-21 11 Mentoring is hard but rewarding, and it's everyone's job 12 ACCA Global: The always-on culture is bad for productivity and health
by Innovating leaders.
Innovative tech.
About Secure Futures

Secure Futures magazine is your go-to business guide for opinions, trends and insight into the world of technology and cybersecurity. We help your business to bring on the future. Brought to you by Kaspersky, the global cybersecurity experts.

  • For all other countries