{"id":20231,"date":"2022-12-01T15:27:49","date_gmt":"2022-12-01T15:27:49","guid":{"rendered":"https:\/\/mailinvest.blog\/index.php\/2022\/12\/01\/growing-threats-bring-key-cybersecurity-themes-into-sharper-focus\/"},"modified":"2022-12-01T15:27:49","modified_gmt":"2022-12-01T15:27:49","slug":"growing-threats-bring-key-cybersecurity-themes-into-sharper-focus","status":"publish","type":"post","link":"https:\/\/mailinvest.blog\/index.php\/2022\/12\/01\/growing-threats-bring-key-cybersecurity-themes-into-sharper-focus\/","title":{"rendered":"Growing threats bring key cybersecurity themes into sharper focus"},"content":{"rendered":"

<\/a>\n
<\/p>\n

\n

When Congress declared in 2004 that October would be Cybersecurity Awareness Month<\/a>, it likely could not have anticipated the global threat landscape online users face today.<\/p>\n

A new study<\/a> released in October by cybersecurity firm Surfshark Inc. reported that there were 108 million accounts breached worldwide in the third quarter of 2022 alone, a 70% increase over the second quarter. Although Russia encountered the most breaches of any country so far in 2022, the report noted that the U.S. remained the single most breached country over the last 10 years. And that\u2019s despite rising numbers elsewhere, such as in France which is now averaging 212 leaked accounts per 1,000 people.<\/p>\n

It has been a busy year. Over the past few months, a Russian hacker group crippled banking operations<\/a> in Costa Rica, a new ransomware variant<\/a> demonstrated the capability to stop 600 Windows processes, and a data breach<\/a> exposed the personal information of every California citizen who registered for a concealed-carry gun permit over the past 10 years. And that was before hackers looted nearly $500 million<\/a> in assets from the now-bankrupt FTX cryptocurrency firm a few weeks ago.<\/p>\n

This has made the focus on cybersecurity all the more timely. The threats are real and rising, as malicious actors become savvy and bold in their attacks. Enterprise IT organizations must now manage risk at a level that was certainly not seen when Congress passed its \u201cawareness\u201d act 18 years ago.<\/p>\n

\u201cThere is no neutral IT decision with respect to risk,\u201d said John Roese<\/a>, global chief technology officer of products and operations at Dell Technologies Inc., in a video<\/a> posted in the company\u2019s website for Cybersecurity Awareness Month. \u201cEvery IT decision you make will either be additive to your security posture or will introduce risk in your security posture. It\u2019s not about security outside of the IT decision, it\u2019s about security that is intrinsic and tied to every IT decision, every vendor selection, every architectural decision.\u201d<\/p>\n

TheCUBE, SiliconANGLE Media\u2019s livestreaming studio, explored the latest Dell product news and data protection vision in a special launch event, \u201cThe Future of Multicloud Data Protection Is Here.\u201d<\/a> As part of follow-up coverage from that event, SiliconANGLE took a closer look at the key themes and messages surrounding Dell\u2019s cybersecurity awareness initiative in October. (* Disclosure below.)<\/em><\/p>\n

Implementing zero trust<\/h3>\n

In recent weeks Dell has doubled down on discussing a wide range of security issues<\/a>, from protecting critical data and applications using zero trust to minimizing the impact of a cyberattack. The premise behind the company\u2019s approach is that modern cybersecurity should be intelligent, scalable and automated.<\/p>\n

A central theme revolved around the concept of zero trust. Practices such as multifactor authentication and role based-access control, which validate and limit who can use systems at any given time, support the zero-trust concept.<\/p>\n

\u201cZero trust has been a big buzzword of late,\u201d said Steve Kenniston<\/a>, senior cybersecurity consultant at Dell, in a recent\u00a0podcast<\/a>. \u201cIt\u2019s ensuring that you trust no one and authenticate everyone to make sure that the right folks have access to your data. Zero trust isn\u2019t something that you buy, it\u2019s something you implement as an actual solution.\u201d<\/p>\n

While Dell provides technology, such as PowerProtect Data Manager<\/a> for consistent backup and restore functionality, the company\u2019s cybersecurity experts note that businesses need to think about critical data rather than simply backing everything up as a whole.<\/p>\n

\u201cI tell clients to stop thinking about designing for backup,\u201d said Kenniston in a separate podcast episode<\/a>. \u201cBackup of a petabyte of information in an evening used to be a great thing, but ultimately it\u2019s: \u2018Can I recover the amount of data that I need to meet the service level agreement?\u2019 It comes down to classifying your data and choosing the right technology.\u201d<\/p>\n

Automation offers promise<\/h3>\n

The process of data classification<\/a> can be daunting, particularly given the rising amount of information which enterprises need to manage. Advances in artificial intelligence and machine learning have enabled organizations to gain a measure of control by leveraging automated solutions that can link effectively to backup and recovery services.<\/p>\n

\u201cThere\u2019s just too much data for anyone to manage and protect manually,\u201d said Peter Gerr<\/a>, senior consultant, Cybersecurity Portfolio Marketing at Dell in a recent podcast<\/a>. \u201cThat brings in automation. Machine learning and AI have really become the most effective ways to protect large quantities of data. The new modern data protection solutions are in response to needing a better way to protect our most valuable asset and be able to recover that if we have an attack so we can get back to work.\u201d<\/p>\n

The use of AI and machine learning tools offers an additional advantage which involves building a cybersecurity model and that can streamline processes and reduce inefficiency. One example of this in practice can be seen in the case of the Illinois State Treasurer\u2019s Office<\/a> which must safeguard $50 billion worth of assets and a massive volume of sensitive financial data.<\/p>\n

The state agency used Dell\u2019s APEX Backup Services as a SaaS-based data protection solution to control costs without increasing complexity. The Illinois Treasurer\u2019s office used APEX to create a new copy of its data, and every text or digitized document was safely stored and secured in the cloud.<\/p>\n

\u201cSimplifying security operations means removing costly inefficiencies and automating whenever possible,\u201d said Jason Rosselot<\/a>, vice president and business unit security officer at Dell, in a presentation<\/a> as part of Cybersecurity Awareness Month. \u201cUsing technologies like AI and machine learning can limit complexity too. It also means reducing redundancies and streamlining vendor relationships.\u201d<\/p>\n

The human element<\/h3>\n

Despite the significant advances in automation and streamlined processes, there still remains one weak link in any cybersecurity strategy: human nature. Cybercriminals are increasingly using phishing attacks<\/a>, luring a user into clicking on a seemingly innocuous link and downloading malware to gain entry into enterprise systems.<\/p>\n

Criminals do this because it works. A \u201cState of Phishing\u201d report<\/a> released in October by SlashNext Inc. uncovered more than 255 million phishing attacks<\/a> in the first half of 2022, a 61% increase over the previous year. The top three attack sectors were healthcare, professional and scientific services, and IT.<\/p>\n

In an effort to help users avoid the pitfalls of phishing exploits, Dell prepared and posted an online quiz \u2013 \u201cAre You Smarter Than Your Cyber Attacker?\u201d<\/a> \u2013 with potential scenarios that might be encountered and how best to deal with them.<\/p>\n

A panel of IT industry professionals assembled for Cybersecurity Awareness Month noted that there was still a great deal of work to do in educating system users and the public in general about best practices.<\/p>\n

\u201cIt\u2018s about empowering individuals to make good decisions that bring risk down and start to bring trust up,\u201d said Josh Jaffe<\/a>, vice president of cybersecurity at Dell, during the panel discussion<\/a>.<\/p>\n

The information generated by Dell<\/a> and other organizations during October should raise awareness that today\u2019s cyberthreats are real and persistent. This is the digital world\u2019s reality in 2022, and the threat of a compromise will likely be just as high when Cybersecurity Awareness Month rolls around again next fall.<\/p>\n

\u201cAn attack can happen at any time of day, so the best is to be prepared,\u201d said Dell\u2019s Kenniston. \u201cStart thinking about all the things that are necessary to protect your environment.\u201d<\/p>\n

(* Disclosure: TheCUBE is a paid media partner for the \u201cThe Future of Multicloud Data Protection Is Here\u201d<\/a> event. Neither Dell Technologies Inc., the sponsor of theCUBE\u2019s event coverage, nor other sponsors have editorial control over content on theCUBE or SiliconANGLE.)<\/em><\/p>\n

Image: Dell EMC<\/h5>\n
\n
\n

Show your support for our mission by joining our Cube Club and Cube Event Community of experts. Join the community that includes Amazon Web Services and Amazon.com CEO Andy Jassy, Dell Technologies founder and CEO Michael Dell, Intel CEO Pat Gelsinger and many more luminaries and experts.<\/span><\/h3>\n<\/div><\/div>\n