{"id":2891,"date":"2024-11-06T16:15:41","date_gmt":"2024-11-06T16:15:41","guid":{"rendered":"https:\/\/aegislens.com\/home\/?p=2891"},"modified":"2024-11-06T16:15:41","modified_gmt":"2024-11-06T16:15:41","slug":"irisscon-why-businesses-continue-to-suffer-from-predictable-cyber-threats","status":"publish","type":"post","link":"https:\/\/aegislens.com\/home\/irisscon-why-businesses-continue-to-suffer-from-predictable-cyber-threats\/","title":{"rendered":"IRISSCON : Why Businesses Continue to Suffer from Predictable Cyber Threats"},"content":{"rendered":"

and phishing, according to industry professionals at the recent IRISSCON cybersecurity conference.<\/p>\n

Despite the proliferation of cybersecurity solutions, businesses are still falling prey to some of the oldest tricks in the threat actor\u2019s book. <\/p>\n

<\/p>\n

DUBLIN, IRELAND –<\/strong> At the 2021 Irish Reporting and Information Security Service Conference (IRISSCON), cybersecurity experts unified their voices to express concern over organizations being repeatedly compromised by predictable cyber-attacks.<\/p>\n

According to speakers at the conference, despite alarm bells ringing for years now, there is still a noticeable lack of preparedness among organizations to defend against cyber attacks like ransomware, phishing, and Denial of Service (DoS).<\/p>\n

Even as ever-evolving and new-age threats continue making headlines, organizations are falling victim to attacks that can be fairly predictable and preventable.<\/p>\n

“The landscape is evolving; no doubt about it.<\/p>\n

But while we engage ourselves in developing advanced solutions for sophisticated attacks, organizations should not overlook the long-known threats like ransomware and phishing,” says Lucy Williams, a data analyst at SecuRetain. “The reality is, organizations are consistently being compromised by these ‘simpler’ threats which are more predictable.”<\/p>\n

Phishing attacks, in particular, have been a classic yet very effective method used by cybercriminals.<\/p>\n

By masquerading as a trustworthy entity through email or instant messages, attackers trick victims into revealing sensitive data, ranging from personal details to financial information.<\/p>\n

A notable example is the Russian state-sponsored cyber espionage group known as APT29 or “The Dukes,” which has been employing relatively simple phishing methods and spear-phishing attacks to infiltrate organizations for political purposes.<\/p>\n

The group is notorious for carrying out widespread attacks on several high-profile organizations including the White House, NATO, and the Democratic National Committee.<\/p>\n

Similarly, ransomware, although old, is yet an equally lethal weapon in a cybercriminal’s arsenal.<\/p>\n

Ransomware attacks involve malicious software that encrypts a victim’s files, with the attacker demanding a ransom to restore access.<\/p>\n

One high-profile case is the Colonial Pipeline ransomware attack in 2021.<\/p>\n

The cybercriminal group DarkSide used ransomware to halt the operations of the largest fuel pipeline in the United States, causing massive disruption.<\/p>\n

Although the ransom was paid, the incident highlighted the enormous potential damage such attacks can unleash on critical infrastructure.<\/p>\n

IRESSCON speakers suggested several strategies to help organizations protect themselves against such threats.<\/p>\n

These included conducting regular security audits, implementing robust security policies, continuous employee training on recognizing and responding to threats, adopting multi-factor authentication, and keeping systems and software regularly updated.<\/p>\n

“The most effective protection against these attacks involves a combination of sound security policies, awareness training, and cutting-edge cybersecurity solutions,” said Williams. “Only when all these elements are expertly woven together can organizations hope to significantly reduce their risk exposure.”<\/p>\n

<\/body><\/p>\n

Follow-Up Reading<\/h2>\n

For further reading on how organizations can defend against these predictable cyber-attacks, consider the following resources:<\/p>\n