Categories
2023 News-EN

CYBER SECURITY IN 2023: WHAT SHOULD WE IMPROVE?

news

CYBER SECURITY IN 2023: WHAT SHOULD WE IMPROVE?

2022 was a complex year to say the least: between the still unresolved Covid-19 pandemic emergency and the implications of the European conflict, the repercussions in the cyber security world were considerable.
Once again this can demonstrate how much there is still to do in this sector .

What changes will therefore need to be made to Cyber Security in 2023?
Let’s see the main ones.

Do not compress investments because of the crisis

The difficult economic situation that has arisen impacted every business sector.
In this scenario, Cyber Security already greatly underestimated, risks losing important investments when it’s clear that the emergency of cyber attacks shows no sign of diminishing.
In fact, attackers are dramatically constant and aware of how convenient can be to hit organizations that are already stressed and busy managing other problems.
This is demonstrated by the impact on the healthcare sector during the pandemic.

The solution?
Evaluate investments better, optimizing budgets so that they will be effective in contrasting threats while remaining economically efficient.


Outsource security services

Outsourcing security services in some situations is not only convenient but also the most valid solution.
This is true, for example, in the case of security assessments, where it makes sense for an external element to carry out the verifications and provide indications on corrective actions.

And this is also true for freelancers and small and medium-sized enterprises that do not always have technical staff to devote to IT and Cyber Security.
In these cases, managed security is the only viable solution.

The costs of managed Cyber Security services can be demanding, but it’s a priority, especially for a small company or a freelance, to properly assess risks and costs in case of systems compromissions: these can be huge and devastating.


Adapt services and solutions to SMEs

SMBs are often thought to be less exposed to cyber threats, as if cybercriminals were only interested in large and well known victims.

If it’s true that large companies offer a greater attack surface, on the other hand cyber criminals are perfectly aware that small companies are less protected. In these cases, cyber attacks have more chances of going to successful or they will not be detected and appropriately blocked.

The complexity of the cyber scenario therefore makes it essential for everyone, including SMEs and freelancers, to adopt an effective strategy that includes technological and organizational solutions.

However, managed security service managers must get used to preparing flexible and scalable offers in order to be able to serve even companies with reduced budgets.


2023 promises to be a very interesting year, but hopefully less problematic than the previous one.

Happy New Year and Good Job!

Latest news

HACKS OF TODAY 26/04/2024

Today's HOT includes 19 victims by the notorious Rhysida, Everest, RansomHouse, DarkVault, RansomHub, Medusa, Hunters International, Cactus  and dAn0n gangs. The average Cyber Risk Factor is  4.2. Read...

Read More

HACKS OF TODAY 25/04/2024

Today's HOT includes 8 ransomware victims by the notorious RansomHub, Hunters International, Black Suit, Qiulong, DarkVault, RansomHouse, Qilin and MyData gangs. The average Cyber Risk Factor is  4.0....

Read More

HACKS OF TODAY 24/04/2024

Today's HOT includes 10 ransomware victims by the notorious RansomHouse, Black Suit, Rhysida, BianLian, RansomHub, BlackBasta, Eraleig and Qiulong gangs. The average Cyber Risk Factor is  4.4. Read...

Read More
Categories
2022 News-EN

WHY ANTIVIRUS IS NOT ENOUGH

news

why antivirus is not enough

It is often mistakenly believed that antivirus is an sufficient protection of the systems from cyber threats.

But that’s not the case, that’s why.

Antivirus is a protection against malware

Malware is malicious software that can infect computer systems by compromising them or allowing cybercriminals to access data.
The malware types are many: ransomware, trojans, spyware, wipers, cryptominers, worms, skimmers, … just to name a few.
Although malware is a significant problem, used in most cyber attacks (41% in 2021, see our Dashboard), there are other types of cyber threats.
These include, for example, Phishing, Social Engineering, exploitation of vulnerabilities, DDoS (Distributed Denial of Service), and much more.
Unfortunately, antiviruses are unable to deal with these threats and further solutions need to be put in place to mitigate them.

Not all antiviruses are created equal

Whether you choose a free antivirus or a paid one, modern products are generally of good quality, but they can differ in some features:

  • Reliability: the ability to correctly identify threats with a low number of false positives.
  • Quality of protection: the malware landscape is constantly changing, so a good antivirus must be able to update itself frequently and effectively detect and resolve the greatest number of threats.
  • Functionality: the antivirus must be able to perform its functions without significant impact on the system in use.
  • Ease of use: the antivirus must have an intuitive and easy to use interface, so that it can be used successfully even by less experienced users.
Don’t forget mobile devices!

Malware can also compromise mobile devices such as smartphones and tablets.
Since they are connected to the same network where there are computers and servers (both in the company and at home!), it is important to have antivirus protection also for all the used mobile devices.

Cyber Security involves numerous types of threats, which are constantly evolving.
For an adequate protection antivirus is certainly important but it is not enough.
On the contrary, to protect from the latest generation of cyber risks it is essential a targeted and customized strategy based on specific needs.

Find out how we can help you identify your customized Cyber Security strategy!

Latest news

HACKS OF TODAY 26/04/2024

Today's HOT includes 19 victims by the notorious Rhysida, Everest, RansomHouse, DarkVault, RansomHub, Medusa, Hunters International, Cactus  and dAn0n gangs. The average Cyber Risk Factor is  4.2. Read...

Read More

HACKS OF TODAY 25/04/2024

Today's HOT includes 8 ransomware victims by the notorious RansomHub, Hunters International, Black Suit, Qiulong, DarkVault, RansomHouse, Qilin and MyData gangs. The average Cyber Risk Factor is  4.0....

Read More

HACKS OF TODAY 24/04/2024

Today's HOT includes 10 ransomware victims by the notorious RansomHouse, Black Suit, Rhysida, BianLian, RansomHub, BlackBasta, Eraleig and Qiulong gangs. The average Cyber Risk Factor is  4.4. Read...

Read More
Categories
2022 News-EN

PROTECT YOUR BUSINESS WITH CYBER ATTACKS ANALYSIS

news

PROTECT YOUR BUSINESS WITH THE CYBER ATTACKS ANALYSIS

In the previous article we explored how our cyber attacks analysis works.

BUT WHAT ARE THE ADVANTAGES OF THIS ANALYSIS AND HOW CAN YOU USE IT TO PROTECT YOUR BUSINESS?

Companies, institutions, research centers, insurance companies that offer policies against cyber risks, professionals dealing with threat modeling, cyber risk management and cyber strategy: the cyber attacks analysis can be useful to various entities.

In particular, we can identify 4 main objectives.

a)  Check the Cyber ​​Security strategy

From the analysis of the threats depicted in the scenario that we present each year, it is possible to understand where cyber security strategies have failed and how to improve them.

In fact, it is important that companies, as well as institutions and even more critical infrastructures, frequently check their defenses, as cyber problems are constantly evolving.

Getting insight into the latest threats that have proven successful is certainly the best way to gauge how effective your defenses might be or where to make changes to your overall strategy.

b) Identify threats specific to your industry

Still with regard to the refinement of one’s cyber defenses, evaluating which problems of the digital world particularly afflict one’s own product sector is a priority.

Cyber ​​attacks, in fact, include different types and do not affect all business areas in the same way.

It is reasonable to assume that institutions, critical infrastructures and multinationals or large companies are more exposed to cyber risks than small or medium-sized companies, but it is also true that they have fewer resources to manage emergencies.

Obtaining information on specific threats for your area and analyzing their trends over the years is therefore absolutely strategic to assess the situation and understand how to best defend yourself.

c) Optimize the budgets dedicated to Cyber ​​Security

The world of Cyber ​​Security is complex, we know, and unfortunately there is no single solution capable of remedying all related risks like a “magic bullet“.

On the contrary, the threats are different, so the defensive strategies will have to foresee a mix of technical, training, organizational and management solutions.

The cyber attacks analysis is very important to understand which components must not be missing in your specific mix and how to spend the corporate Cyber ​​Security budget more effectively and efficiently.

Only by understanding which threats concern your own sector you can be certain that you are reasonably evaluating the most correct purchases and actions.

d) Obtain data on cyber incidents

Our sample includes over 7,000 successful cyber attacks in the last 4 years, including more than 2,500 against Critical Infrastructures.

A number of notable events from which it is possible to deduce a lot of information, from the reasons for the attack, the product sector targeted, the type of technique used, the geographical area, the criticality of the attack and related impacts.

These information can be very relevant in particular for insurance companies that provide policies against cyber risks and that need data useful for assessing the frequency and severity of threats and to be able to correctly calculate the premium for the mitigation of the residual risk.

Although the aim of raising awareness on IT Security issues remains our main objective, the criticality of the situation that has arisen following the extraordinary growth of cyber threats has convinced us that this analysis must continue to evolve, transforming itself into a real work and decision support tool.

Contact us for more details and see a sample of our data on our Dashboard.

Latest news

HACKS OF TODAY 26/04/2024

Today's HOT includes 19 victims by the notorious Rhysida, Everest, RansomHouse, DarkVault, RansomHub, Medusa, Hunters International, Cactus  and dAn0n gangs. The average Cyber Risk Factor is  4.2. Read...

Read More

HACKS OF TODAY 25/04/2024

Today's HOT includes 8 ransomware victims by the notorious RansomHub, Hunters International, Black Suit, Qiulong, DarkVault, RansomHouse, Qilin and MyData gangs. The average Cyber Risk Factor is  4.0....

Read More

HACKS OF TODAY 24/04/2024

Today's HOT includes 10 ransomware victims by the notorious RansomHouse, Black Suit, Rhysida, BianLian, RansomHub, BlackBasta, Eraleig and Qiulong gangs. The average Cyber Risk Factor is  4.4. Read...

Read More
				
					-----BEGIN PGP PUBLIC KEY BLOCK----- xsFNBFyONI0BEAC3wJRo5qhtr1KsqVdMz7b5JqHmt7H0ZZr14oJ9TV/hD9LMfrKpnQ94dFGnpfGa BKC1wSoJN4Yfs5lg5YmN4hmHmm6PkjgQdenVgL4YDfLDodwn5DgXKuywRBqIFbbnTDvFAb03DX2A FPnc+4g2QHsfiFycz+ISg/Z+8i21gY3j5oZlrdMKVWrNczrNc/lDJqJ36RSYDn1QzAW1ZGY/pUXk imPRvLew5Idr3462sZVVhuUFMD3Uf/W1SaS3bSEQM89pSYKZfo8AFpAs659Mn7gqKru6ndxilRdF wJGQuepqR8kz+vVPLyxJj68ii2ZBIY50RQvSBgJRnNF/Htp30cuk3v8jfSGZit9XYTTGQThVbfGR ZcKWze/iF+es110+mNXA/8s7jKs95PI+z1Foc9o74Ujs8dvjEGHTaESIEzX3JtEZUCZUiPt/P8pU Jw0ewbj1XCacYxYVsR7ODlf6GEsjt868WcjiqsuuZo2rzO4og9hFU5DlBzuePklfhw8dO5CiMN2H vtSkAn4DkgHqC+JiciHc9h5Cvvfjp52oQPj1eYmU3LkOvGFmPXVIts3VfxsQT3gk+DmrQ4J//fAl tNRSbMBnGu5F/qnLLkJmKRKPKNNcpjptFznKxLZbxW5QbAeDok3ho8YQACfADKcrmaIRkoPr8/mn PxZgMSMB87W7sQARAQABzSRTb2ZpYSBTY296emFyaSA8c29maWFAaGFja21hbmFjLmNvbT7CwZQE EwEIAD4WIQTNwEbcXbH0vegGlHCd6fr0nsTifwUCXI40jQIbIwUJEswDAAULCQgHAgYVCgkICwIE FgIDAQIeAQIXgAAKCRCd6fr0nsTifwKuD/4+3MaN+9eFiltI06fFBjr1Csh0OLFw89jFnpuYl9Sm ImVqmBwrnm+APxxLK4M+FMuNm4fW08X249t09Nsf0ba6UJ0HR/7/fRTipjzRLqHSr0+ZjVUGHhon fuuFZgNzPA5RmQZZCyiwyqZJs7pLn1QI/CtlDP6MsQhadywbkO/5LlDoBoYh/2DYNA/mtEfJbvc/ cOvfk47thj5OzcXJEWFxz7h2P5C2ELwxdhNPC+uqcOQkTScnuIBJooheJPhdmqOtOwrbUUIfaryM IESrol3Jg3/MUOe7FLXhwCSQGY1iefzl4py2jTeK936GMBHifLSUCA88lpE7ALkbf3+qJ9ABra9G e9e0dirIlPvFgBkEBBXsoIReQLrhHKFBtvKdrrE9Rb7kAwon+sW+3Uf6Ie3M8nTisGy2AmlI/tQ5 V0MHU2UJUNcc59hk7ADIlXN64eeqELgsMtlR4wEHd6nwcEpoPCTWfrVSwzsPtXUGNAGbgGxISv/F ltcFJ6Qw6Zy4f+YBEyCx/7GA3kjLllkcHv4kwHpP+WQCzbjh2JdkGEp5AY7puil1AtOFcbirbHbR 83KVeqx4Vvlyh2jhIDQYB/9qpTDC1xDKpndn40gnNd5hvjK0I0Xvbhb0PLhCpJQ5tsvPiQHjhOMF Wye3ZigaX1gTZxE29MLtwBbOYdGCYG0MrM7BTQRcjjSNARAAupAKTZXLRktriUVqhkZpU8zUVwrW ik6siStg7BppSJuKVW+Ic8QIagW0I48d2jZIIXrQRvqVBixn8eeBTE8Cujum1mZyhTw2sri3gE9i 81gisF17T/uewzRyYwx8obMfSEBnwJa44td7VjtbfLMRtfneK9R40+kELhhvXZa3DBbcG86zHVPU f1YkLX4RNSyjz4vOCX3WlcIAOr6MJA8DT+F5mUCVEhnkeUbflXtxRSeTUTfOw/3MYLs+mc6hWwLq gqTMcIQhDrYEY5wUgb5Mj86NR/uvsThL6MtWCJWVbfxHxM575woyTdD9E6HGO6loHYdky/7I+XFZ twgxsGn6HJYT+Gwn9BI5/DiwT1Qb/AyADktN1jGmZGTlniS+hly7rm0EHb2CTTM5zT1fh/sCOtQb nYIUf2in2cIfcFvzeFrUbDk2HfJMp5FmY6tBEV5xyNCww/mBkW2nuZy9CvAheJEOGoO8lyonPU2u ARq345LdbS6l+VdivPmZoLNpIMRw9MSTYmzm08h7C+/6hxzpjw1/nWZ+W2k9VpLutEs7KMtsbZR4 WhVFVS1uhqxrnjoeBHznh360Ou8SR+PFO0HIrYz4W7ayfcBhqcsGrM9u1E892gjUVTbPv8UoXQ8S Zm9ra2jqbfZGbyOpMIlyMzHTak7r0IZvCedEUDCimitbw98AEQEAAcLBfAQYAQgAJhYhBM3ARtxd sfS96AaUcJ3p+vSexOJ/BQJcjjSNAhsMBQkSzAMAAAoJEJ3p+vSexOJ/C+wP/iGvKG1NldCT2gR7 oWhmvgBnsD7qjC57RX0Go7WD1lmrWP4xWpvM6Tj0V4ZsXnyB8zUR38p49PPymjwy51FAss5PYh8S bVC1/sKC5Sae3kiAoMGH29MBAwL1IkJ8PNw6uOJHhUIJgKT5RWk2f7q3+Tha19slXwD/FC1IcBJK baxyVkG3cG5AnNvvKZyFAUNZ9FiBycaNHO4o6bCcCzSsaRLL2azudJLrF8UYPfTNBQ6Cr4QLqaRb t+ZqL2nqmcadO1AtxLtq5lQjxbhJ3jSYIcQJRq0ztbIBcPrdR2B/dfVED9cU5leSmNXxrh09gJ7N tmUpVo5fBcbf6fP7h2HIFBpH+G/8UUlcbm9pQ5Jcb8FEom0JrfaIAuv1gEIJAk1mkqLNzWUs8KuL nCBBVT2+2hfEZjtjUYbCLVB4LRCsLs9CY1wS3yKca90S8m0tfKcSj3K3k8qlKodkE2raX2GW2dm9 b200ENbb41B1uZlPts4Yh/AMfLqoNv8wyw0GlUQ2DqgDqviLANYbg4/GHwTLwO2b9UMHuTVU3woS 1LRKt0iPPsd+ir+9YRAVt5LB5XTS5C5cdIW9JSXQ+0cnbr3LPZCBulOew/M72liBINKWKGoUyueF 73ckNO9S7pzTOCpjn3+gAuzN/itwgwrMLoqUqqBuxzd7cKNJHTFdTIfTm53f =KIMs -----END PGP PUBLIC KEY BLOCK-----