Articles of interest from the week of December 7, 2020

Top 4 Security Trends to Watch for 2021

The COVID pandemic has been hard on security teams in 2020. Ransomware attacks increased. Remote work disrupted and weakened security processes. CISOs were forced to adjust their short- and long-term plans. 2021 will be better, right? Well, it will be different, and some things are likely to become worse. CSO has been following four key trends to project how they might play out in 2021. All have been driven or influenced by the pandemic, which will have a long-lasting impact on the threat landscape and how security teams protect people and assets. (By Michael Nadeau, CSO Online) Ingalls: We are experts in understanding trends in cybersecurity which is critical for security teams tasked with identifying threats and properly securing networks. We believe it is important that there are affordable and effective cybersecurity solutions for organizations of every size. We offer best-in-class information security solutions suitable for the largest enterprise companies at a price point that is affordable for SMBs. Request a demo for your company today.

Spearphishing Attack Spoofs Microsoft.com to Target 200M Office 365 Users

A spearphishing attack is spoofing Microsoft.com to target 200 million Microsoft Office 365 users in a number of key vertical markets, including financial services, healthcare, manufacturing and utility providers. (By Elizabeth Montalbano, Threatpost) Ingalls: Phishing attacks, including spearphishing, use email or malicious websites to infect your machine with malware and viruses in order to collect personal and financial information. Cybercriminals attempt to lure users to click on a link or open an attachment that infects their computers, creating vulnerability to attacks. Phishing emails may appear to come from a real financial institution, ecommerce site, government agency, or any other service, business, or individual. The email may also request personal information such as account numbers, passwords, or Social Security numbers. When users respond with the information or click on a link, attackers use it to access users’ accounts. Learn more about how to defend against phishing attempts.

Global Financial Industry Facing Fresh Round of Cyberthreats

Although the global financial industry has made strides in protecting its data from malware, including Trojans, cyberthreats such as network intrusion, ransomware and criminal gang cooperation are presenting fresh challenges, according to a report issued this week by the Carnegie Endowment for International Peace. (By Prajeet Nair, BankInfoSecurity) Ingalls: Our managed detection and response (MDR) service can help minimize cyberthreats such as network intrusion, ransomware and criminal gang cooperation. What is MDR? How does MDR work?

Criminals to Favor Ransomware and BEC Over Breaches in 2021

The era of the mega-breach may be coming to an end as cyber-criminals eschew consumers’ personal data and focus on phishing and ransomware, according to the Identity Theft Resource Center (ITRC). (By Phil Muncaster, Infosecurity) Ingalls: We offer targeted education and awareness to improve your security posture. Combine a social engineering test with a follow up employee training session. Employees are the weakest link in your security posture and we will test and train them to be more aware. Contact us today to learn more about how we can help secure your company's information in a personalized and efficient way.

Foxconn Electronics Giant Hit by Ransomware, $34 Million Ransom

Foxconn electronics giant suffered a ransomware attack at a Mexican facility over the Thanksgiving weekend, where attackers stole unencrypted files before encrypting devices. Foxconn is the largest electronics manufacturing company globally, with recorded revenue of $172 billion in 2019 and over 800,000 employees worldwide. Foxconn subsidiaries include Sharp Corporation, Innolux, FIH Mobile, and Belkin. (By Lawrence Abrams, Bleeping Computer) Ingalls: There is a critical need for businesses to take a proactive approach to cybersecurity in order to be positioned for early detection and fast response.  One question businesses often ask is, should we pay the ransom? We discuss this topic in our “Ransomware, To Pay Or Not To Pay?” blog post.