The Silver Bullet in Cyber Security
Let me tell you a small story. Meet Serge. Serge is a hacker. He went on to dark web and bought himself a malware kit called Citadel for $12.
In layman terms he bought a virus software and placed it somewhere on the internet. Then he went onto a popular website in America. That particular website had a comments feature under the articles and Serge discovered he can actually place a script in the comments section. The job of that script is to download and run the malware on the site visitor’s browser.
It took a couple of hours before ‘the popular website’ realised this was happening. In those couple of hours they had a mere 40,000 visitors to the site and a good number of them infected with the malware.
Now the job of the malware is to exploit the existing vulnerability in Java and Adobe programs and look for a very specific info when the user is browsing. The malware is looking for business bank accounts with over $100,000 balance in them and transferring funds to Serge’s bank account. Now look at the odds of a user with business bank account with over $100,000 balance and visiting a particular website while they had an outdated software running on their system. Serge made away with nearly $30,000,000.
Now the affected companies went to sue ‘the popular website’ for having this script on their website. The website guys turned around and said;
‘This happened not because we had a script on our website, but because you are running an outdated software and didn’t do your updates.’
That’s a burn but the good news is that the company had a cyber insurance.
They filed a claim for the insurance.
The insurance company turned around and said;
‘You are affected because you are running an outdated software. We cannot pay your claim’.
You get the gist. These affected companies haven’t updated their software/systems in months. The manufacturers have released patches and updates for the vulnerabilities months ago. There are no silver bullets when it comes to Cybersecurity but patching your systems is the closest to the silver bullet.
Patch your systems regularly. Ideally you will need to aim for updating your systems within 14 days of a patch being available. How do you do that you ask?
Leverage the Technology. Get a patch management solution.
It can be the one you have with your Microsoft subscription or a third party tools. These things don’t cost you much money and in fact they will save you from the tons of effort, time, hassle and embarrassment.
Most large businesses are known to have a decent patch management system. For the rest of us, especially SMEs, most Antivirus software are now available with a patch management module. Ask your vendor, or check out our Next-Generation Anti Virus solutions here.
Now go and do your updates!
- Is it a good idea to build your own Security Awareness Training platform?
- Fake invoice scams and Office 365
- How to apply for the Cyber Essentials Voucher Scheme
- 5 things to consider when selecting a Security Awareness Training (SAT) platform
- 2 Years, Marmite and £600,000
- What is Business Email Compromise (BEC) and how to stop it
- Everything you need to know about Cyber Essentials
- Cyber Essentials Demystified
- How to choose a Security Awareness Platform
- How to pick the best Antivirus software for your business
- 6 Quick and Easy Email Security Tips for Dummies
- How to carry out a baseline email phishing test
- Hackers On Tour
- How to share passwords safely in your Small Business
- In the news - Warning. North Sea firms likely already attacked
- 10 Steps to Cyber Security
- 5 Reasons why you should consider having two monitors
- What is Email phishing & why you need security awareness training in your business
- 6 Top Tips to Prevent Cyber Attacks
- How to choose the right IT Service Provider for your business
- How to choose the best Antivirus software for your business
Is it a good idea to build your own Security Awareness Training platform?
Is it a good idea to build your own Security Awareness Training platform?More
Fake invoice scams and Office 365
The fake invoice scam has been impacting an unbelievable amount of businesses lately costing £000’s every day. Every other day there is a business hit with this type of attack. Here are some simple tips you can implement now.More
How to apply for the Cyber Essentials Voucher Scheme
The Scottish Government is very aware of the threat Cyber Attacks have and is encouraging businesses to go through Cyber Essentials certification and is offering up to a £1,000 voucher per business. This is how to claim it.More
5 things to consider when selecting a Security Awareness Training (SAT) platform
No matter what technology you have in place your weakest link is your employees and their lack of awareness. To build a great human firewall you will need a decent Security Awareness Training programme.More
FOR LATEST UPDATES SUBSCRIBE HERE: