Magazine menu Close Magazine menu

Data breaches

Latest stories

behind the screens

Zero-day: Birth of a new threat

  • min read
    • They're inside your system but no one knows how they got there – or how to stop them. These destructive attacks are called zero-day threats, because your security team will have zero days to prepare. Zero-day attacks involve cybercriminals using vulnerabilities no one knows about. They're hard to detect and can go on for years. Zero-day: Birth of a New Threat is Tomorrow Unlocked's latest film in the hacker:HUNTER Behind the Screens series. Michael Gregg, CEO of Managed Service Provider Catalyst Network Solutions, discusses these attacks and his clever way to trick cybercriminals into giving up their secrets. He also shares ways to spot these sometimes-subtle attacks. Understanding zero-day attacks While you may not have heard of zero-day attacks, some of the most well-known cyberattacks fall into this category, such as WannaCry and BlueKeep. But what does it mean? Software developers are always looking out for vulnerabilities hackers could use to gain access to systems through their software. When you receive software updates, these often include 'patches' for recently discovered security holes. "It's called zero-day because that's exactly how long you've had to prepare for it," says Gregg. Zero-day attacks might include reaching a vulnerable system using phishing – manipulative emails to users aiming to convince them to open a file or visit a malicious site. That action downloads the attacker's malware, which infiltrates user files. It can take time for developers to find the vulnerability that allowed the attack. In recent years, hackers have become faster at exploiting vulnerabilities soon after discovery. Zero-day attacks are especially dangerous because only attackers know about them. Once they have access through a zero-day vulnerability, criminals can attack immediately or wait for the best time. What is a Managed Service Provider (MSP?) Gregg's company, Catalyst Network Solutions, is a Kaspersky partner Managed Service Provider (MSP.) MSPs offer cybersecurity-as-a-service. Rather than or as well as an inhouse cybersecurity team, businesses hire MSPs to take care of their cybersecurity. Using MSPs makes it easier for businesses to have a range of cybersecurity expertise on-hand in a market where hiring cyber experts can be challenging. MSPs typically provide services to multiple companies and organizations, giving them broad-based knowledge of cyberthreats and cyber solutions. With the wide range of business tech that needs securing today – from light switches to security cameras to fridges – the value of wide-ranging experience is rising by the day. Tricking cybercriminals with their own tricks The data tricks cybercriminals into using, and so revealing, their zero-day methods. This has allowed Gregg's team to prevent and stop attacks faster. Preventing zero-day attacks As soon as a zero-day threat is understood, software developers will release updates to patch it, so your business should ensure it always installs updates promptly. If you can't stop a zero-day attack happening, there are ways to ensure it's caught early. Gregg advises "There's never a call that's not worth making," when it comes to cybersecurity. Signs of zero-day attacks can be subtle. "If your mouse is moving in a weird way, you're getting out-of-place keystrokes or your computer's running slowly," let the cyber professionals know – whether you have an internal team or a Managed Service Provider.
IT economics report

Guess who’s leaking as much data as cybercriminals

  • min read
    • New research by Kaspersky finds employees are causing more data leaks. So much so that employee action and cyberattacks are running neck-and-neck. What's behind this growth in employee-initiated data leaking? And what can business leaders do to turn employees from cyber risk to cyber asset? Why are employees causing more data leaks? More than 3,000 IT security managers in 26 countries contributed views to Kaspersky's 2022 IT Security Economics report. The research found that in 2022, cyberattacks caused 23 percent of data leaks, while employees caused a close 22 percent. This growing proportion of leaks linked to employees may follow work-life changes since the pandemic. The report says, "IT security teams are now battling data leakages caused by employees […] following the introduction of new staff laptops or tablets, and Virtual Private Networks (VPNs) to enable remote working." And it's not all innocent mistakes. Most employee-triggered leaks involved ignoring cybersecurity policy, but security managers also reported more than a third (36 percent) were deliberate acts of sabotage or espionage. How employees cause data leaks Small, almost mundane actions often lead to data leaks. Usually, the employee is tricked by a 'social engineering' tactic or practicing poor cyber 'hygiene.' But what does that mean? Social engineering Cybercriminals use manipulative tricks known as social engineering to fool employees into giving them access to systems or giving out information they otherwise wouldn't. A common approach is 'phishing' – emails or messages containing links that give cybercriminals access to business systems when clicked on. Phishing is getting more sophisticated – mimicking, for example, emails announcing sales or discounts from household brands so well they're hard to tell apart from the real thing. 'Spear phishing' is more targeted and personalized. It might, for example, target those in an organization most likely to take the bait, or mimic a target organization's internal newsletter or email format. Cybercriminals also engage in social engineering one-on-one. For example, they may phone employees saying they're from the IT support desk and try to persuade the employee to share their login and password details. Cyber hygiene Maintaining good cyber hygiene means everyday practices that make it harder for cybercriminals to access systems. The actions that make up cyber hygiene will hopefully be familiar, for example: Having complex passwords, always using a VPN when working remotely and deleting digital information you no longer need. How to stop employee leaks Cybersecurity awareness training aims to teach cyber hygiene alongside the broader education employees need to notice and avoid falling for social engineering tricks. Earlier Kaspersky research in partnership with Longitude, a thought leadership agency within the Financial Times Group, found businesses confident in their cyber skills programs also report better overall cyberattack preparedness. While cybersecurity experts should upskill regularly, the research highlights the importance of training all staff – beyond the IT department – to create a company-wide cybersecurity culture. One-off training is also not enough: staff need to absorb ideas and practice skills to make new habits. Heathrow Airport's innovative employee cyber awareness program aims to change behavior long-term with 'little and often' education targeted at those who need it most. Heathrow uses mock phishing emails to identify employees at risk of falling for cybercriminals' tricks, so they're not wasting time educating employees whose cyber awareness is already strong. Cybersecurity awareness training should also aim to encourage 'cyber pride' – building positive motivation for good cyber behavior rather than stoking fear. What about preventing employee sabotage? Comprehensive cybersecurity education may not be enough to prevent the 36 percent of employee-generated data leaks done by disgruntled employees. Examples of how employees have deliberately leaked data abound – from sharing customer data online to handing access keys to cybercriminals. Regular user access reviews – checking who has access to what and keeping all system access to a minimum – are important, but nothing surpasses the value of maintaining a positive workplace culture. Leaders need ways to 'temperature check' their organization beyond relying on the Personnel department or peers in senior leadership to thoroughly report concerns. Affected departments have a 'dog in the fight,' so to speak, and may not share everything they should. Ways to temperature-check include 360-degree feedback mechanisms – where all staff give anonymous feedback about their manager. Writing in Forbes, founder of Rungway workplace advice platform, Julie Chakraverty, says, "To… uncover hidden attitudes and views, you need to ask your employees how they feel. Lead by example by being fully open and transparent… [and] empower your employees to share their opinions and give honest feedback." The change in how data leaks happen, with more employees triggering them, should give every business pause for thought. Bringing leadership focus back to workplace culture and employee wellbeing has always paid dividends across the business, but we now understand its crucial importance in keeping data safe. Regular, targeted cybersecurity education, strong cyber hygiene and understanding how everyone in your organization is feeling should be central to your data protection strategy.
manage data leak

Infographic: Five vital steps to deal with a data breach

  • min read
    • Things can be frantic when you're dealing with a data breach. While swiftly diagnosing the problem and communicating clearly with everyone who needs to know, it's easy to miss something that could have serious consequences later. Use these five pointers to make sure you've done the right thing after a data breach. 1.  Assess the situation First, assess the data breach's risk to customers. Risk assessment lets you decide the next steps, including whether to report the breach. If it's a high risk to customers, you must inform them without undue delay, perhaps even before reporting to authorities. 2.  Be transparent and helpful Don't try to cover up the breach or hide details from those affected. If you hide things, you may see customers losing trust in your business on top of negative news coverage. When you tell customers what happened, give them advice on what to do next. 3.  Document everything Document every data breach, even if you don't have to report it. Record what happened, the steps you took and why the breach was reported or not reported. 4.  Learn from it Once you identify the cause, fix it. Next, make sure all staff receive training in how to prevent future breaches. Human error causes most data breaches. 5.  Make sure you notify everyone affected If you're processing data for other organizations, don't forget to tell them about the breach. They will have steps they must take too. Using these five pointers after a data breach will help your business get back on its feet sooner rather than later. Communicating swiftly and clearly with customers and partners is all-important in limiting the breach's impact on your business. It may happen to even the most cybersecurity-conscious organizations, but there's still a lot you can do to prepare. Equipping your employees with cybersecurity skills and knowledge is crucial to ensuring your customers' data stays safe in future.
by Innovating leaders.
Innovative tech.
About Secure Futures

Secure Futures magazine is your go-to business guide for opinions, trends and insight into the world of technology and cybersecurity. We help your business to bring on the future. Brought to you by Kaspersky, the global cybersecurity experts.

  • For all other countries