Jim McGann
Many cybercriminals are rich. They might drive expensive cars and live in mansions, making millions annually. Some are funded by governments that use ransomware for cyber warfare, but most cyber organizations are just in it for money—lots of money.
Like any successful business, these criminal organizations have developed sophisticated software development departments that rival many of the companies they attack. Many threat actors have adopted advanced programming tools like Rust and have even embraced AI to deploy data corruption techniques that circumvent common security applications in place today.
Keeping Pace With The Threat Landscape
Many companies have not kept pace with these dangerous innovations and are vulnerable to the latest threats. Penetrating a data center has become straightforward, bypassing even the most advanced prevention applications responsible for safeguarding the organization.
This has been seen in very public examples, including the attack at MGM in Las Vegas where the bad actors at Scattered Spider called into the IT help desk and manipulated access to an administrative password as well as the Phobos variants bypassing prevention tools to gain access to critical infrastructure through vulnerabilities in remote desktop protocol (RDP) ports. Ransomware prevention tools are not futile; however, they're not enough to protect an organization's data.
No comments:
Post a Comment