3 key cybersecurity trends for 2021 (and beyond ...)

Global futuristic security concept for cyber financial networks. Fast internet connection. Block … chain network

Most companies rely on teaching to improve results. Analyzing what they did right or wrong to fill the gaps and adapting strategies is often a barometer of future success. The cybersecurity industry must follow this heuristic model. We are already in the fore in 2021

1) Expansion of the cyber attack surface (remote work, IoT, supply chain)

According to cybersecurity company, according to Cybersecurity Ventures. This includes data that is stored in private and public IT infrastructures, in infrastructures for public services, in private and public cloud data centers and on personal computers.

Several factors o This did not lead to the Malthusian expansion of the global cyber attack surface. These influences include the digital transformation and the business model of more business people compared to interns and. We have entered the first phases of the fourth industrial revolution, which is evident in digital interactions and the interweaving of machine and human. Our way of life is increasingly online.

In addition, the reality of the Internet of Things has completely changed the dynamics and size of the growing surface for cyberattacks. With roughly 50 billion connected devices and trillions of sensors working under those devices, hackers have a variety of options for breaking cyber defenses and filtering data. “We expect over 30 billion IoT connections by 2025, which is an average of nearly 4 IoT devices per person. This also equates to billions of sensors connecting and interacting with those devices.” . According to the McKinsey Global Institute, 127 new devices are connected to the Internet every second.

The 2021 Director of the National Intelligence Service (DNI) report estimates that the Internet of Things will reach 64 billion objects, all of which are monitored in real time. “In the future, a hyper-connected world with next-generation 5G cell phone systems could support up to 1 million devices per square kilometer, compared to the 60,000 devices currently possible with current cellular networks with even faster networks on the horizon. The Internet of Things (IoT) is linked to weaknesses in the supply chain. The connection The exponential activity of the IoT is an ever-expanding network of networks and devices. Cyber attacks in the supply chain can be perpetrated by opponents of nation states, espionage operators, criminals or hacktivists. Your goals are to break down contractors, systems, companies and suppliers through the weakest links in the chain. It often does this by exploiting poor vendor security practices, embedding compromised (or counterfeit) hardware and software, or insider threats on networks. For more information, see my article Hfrance.fr: Cybersecurity Threats: The Formidable Challenge of Securing the Internet of Things

Cybersecurity threats: the daunting challenge of securing the Internet of Things (Hfrance.fr.com)

Protecting such a large attack surface is not an easy task, especially when there are so many types and standards of security available on devices. One way to take advantage of the growing attack surface is to use automation. The toolkit can now use Skyline scanning technologies, scans, audits, event warning tools, diagnostics, and even self-repair software. Artificial intelligence and machine learning technologies can also enable more efficient decision-making by prioritizing and responding to threats, especially in larger networks with many users and variables.

Ransomware has been around for nearly two decades and is growing in popularity because it makes it easier for hackers to get financial rewards. It is estimated that there are now 124 different families of ransomware and that hackers are very good at hiding malicious code. The success of hackers does not always depend on using the latest and most advanced malware. This is relatively easy for a hacker to do. For the most part, they rely on the cheapest target for security breaches, especially when it comes to the ease of online attacks.

Last year, ransomware made up almost a quarter of incident response obligations for IBM Security’s X-Force threat intelligence group. Fifty-nine percent of ransomware incidents involved cybercriminals who filtered out data before it was encrypted – so-called “double blackmail” attacks.

The reason for this is that ransomware has become the weapon of choice for hackers in the digital landscape triggered by COVID-19. The transformation of so many companies that were mostly digital had resulted in more blackmail targets. According to a Deep Instinct study, ransomware increased 435% in 2020 compared to 2019. According to cybersecurity company m Coveware, the average payment for ransomware has increased.

The trend in 2021 is for criminal hacker groups to refine their phishing exploits through machine learning and more coordinated sharing on the dark web and forums of the dark web. Hackers can also be paid using cryptocurrencies, which can be difficult to track, making ransomware a priority in their mining toolboxes. With the advent of cryptocurrencies in ransomware, this has become a profit motive for many criminal companies. They are replacing physical crime with digital crime.The estimated cost was $ 20 billion in 2020, compared to $ 11.5 billion in 2019 and $ 8 billion in 2018. This trend that will continue to grow.The likely short-term impact is that there will be more ransomware attacks against institutions and companies that have less cybersecurity and cannot afford to interfere with operations such as healthcare, state and local governments, and educational institutions.
Preventing ransomware requires cybersecurity awareness and preparation based on anti-malware programs, strong passwords, patch updates, as well as router, VPN, and Wi-Fi security and making sure you have sensitive data to back up.

Helpnet security

Threats to critical infrastructure; ICS, OT / IT convergence of cyber threatsThe 2020 World Economic Forum listed the cyber threats attacks on critical infrastructure (CI) as the main concern. The WEF noted that “Attacks on critical infrastructure in sectors such as energy, healing, care and transportation have become the new normal.

Dragos Inc.’s 2020 Report on Cyber Threats (ICS) and Operating Technology (OT), Vulnerabilities, Ratings, and Incident Response Information found that threats have tripled in the past year.

The threats increase with the attack surfaces associated with CI. Types of cyber threats include phishing scams, bots, ransomware and malware, and software vulnerability exploitation. The actors of the global threat are numerous, including terrorists, criminals, hackers, organized crime, malicious individuals and, in some cases, accusing nation-states. Hackers often look for unsecured ports and systems on industrial systems that are connected to the Internet. IT / OT / ICS supply chains in CI can be particularly vulnerable as they pollinate attackers and give them many entry points. Older OT systems were not designed to protect against cyber attacks.

In the United States, the main infrastructure, including defense, oil and gas, power grids, healthcare, utilities, communications, transportation, education, banking and finance, is private (around 85%) and regulated by the public sector. The energy sector is particularly at risk. This unsafe ecosystem includes power plants, utilities, nuclear power plants, and The Grid. One of the reasons Sector D is more vulnerable is because hackers have gained in-depth knowledge of control systems and their attack and malware against power plants and other energy-related CI resources.

The latest cyber attack from Solar Winds can also be seen as a red flag for the interactive nature of OT / IT infrastructures. According to Grant Geyer, Product Director at Claroty. The advanced capabilities and backdoors of the attack should alert all organizations that involve nation-state actors as part of their threat mode, including critical infrastructures, Industry Control Systems Test (ICS) and SCADA operators. ”

Protecting industrial control systems (ICS), operational technology (OT), and critical computer systems from cybersecurity threats is a difficult endeavor. They all have unique operational frameworks, access points and a variety of legacy systems and new technologies. The explosion of connected devices, including the Internet of Things and the industrial Internet of Things, is challenging. Trends in hardware and software integration combined with the growth of networked sensors are redefining the possibilities for surface attacks for hackers in all digital infrastructures.

To mitigate threats, critical infrastructure operators should apply a comprehensive risk framework to address vulnerabilities in OT / IT convergence, including security by design, defense in depth, and zero trust to combat cyber threats. It is particularly important for the public and private sectors to coordinate, apply, and enforce industry security protocols, particularly those related to the control of surveillance and data acquisition (SCADA). The internet wasn’t designed for security in its infancy. It was designed for connectivity. Following industry and government protocols learned from the knowledge gained is critical to protecting critical infrastructure. Further mitigation efforts can be made with new technologies that monitor, alert and analyze network activity. New technologies like artificial intelligence and machine learning tools can help provide transparency and predictive analytics. It’s good one too

Critical InfrastructureOf course, there are many other compelling trends and threats to the cybersecurity ecosystem. More information in future articles. I highlighted the most immediate trends in the expansion of surfingAce of Remote Work cyberattacks, IoT supply chain, ransomware as the cyber weapon of choice and critical infrastructure threat via ICS, convergence of OT / IT cyber threats. The most important tasks based on the trend analysis are a strategy of damage control, vigilance, trying to close the gaps and learning from the most recent cyber violations.

Chuck BrooksLinkedIn

Chuck Brooks, President of Brooks Consulting International, is a globally recognized and recognized thought leader and specialist in cybersecurity and emerging technology. LinkedIn named Chuck one of the “Top 5 Technicians to Follow on LinkedIn”. He was named “Top 50 Global Influencer for Risk, Compliance” by Thompson Reuters and “# 2 Global Cybersecurity Influencer” by IFSEC. It was featured in Onalytica 2020 “Who ‘s Who in Cyb” security “- as one of the main drivers of cybersecurity problems. He was also named one of Executive Mosaic’s Top 5 Cybersecurity Leaders. Chuck recently briefed the energy conference on G-20 on the cybersecurity of operating systems. He is also a cybersecurity expert on “The Network” for the Washington Post, guest editor on Homeland Security Today, expert on Executive Mosaic / GovCon, and a contributor to Hfrance.fr. Chuck is an Assistant Professor in the Applied Graduate Intelligence Program and Graduate Cybersecurity Program at Georgetown University, where he teaches courses in Risk Management, Homeland Security and Cybersecurity, an MA in International Relations from the University of Chicago, a BA in Political Science from DePauw University and a certificate in international law from the Academy of International Lawin The Hague. Expert in Executive Mosaic / GovCon and employee of Hfrance.fr. Chuck is an Assistant Professor in the Applied Graduate Intelligence Program and Graduate Cybersecurity Program at Georgetown University, where he teaches courses in Risk Management, Homeland Security, and Cybersecurity, an MA in International Relations from the University of Chicago, a BA in Political Science from DePauw University and a certificate in international law from the Academy of International Lawin The Hague.