July Risk Roundup: Cybersecurity shiny objects — don’t overlook the basics
A healthy dose of skepticism is never a bad idea in cybersecurity. People will try to take advantage of chaotic situations, bad ideas will be expressed when people have ulterior motives, and sometimes a flashy headline is designed to sell you ads rather than give you useful information.
1. Fake Kaseya VSA security update backdoors networks with Cobalt Strike
Attacker’s creed: never let a good disaster go to waste. The lesson for defenders? Chaotic conditions demand extra vigilance – when things go wrong, it’s helpful to have defined procedures and team members trained via exercises/drills to respond.
2. RSA sponsored content issues
Kudos to RSA for (retroactively) policing their sponsored content and dunking on the “blame the interns” meme. But how did an article about blockchain fixing TCP/IP security issues that didn’t demonstrate a solution at all make it through editorial reviews?
3. Headline-driven threat landscape
Media sensationalism is nothing new, and the problem is worse in tech and infosec due to unfamiliar vocabulary. It takes time and effort to contextualize cyber risk, so both infosec and business leaders need to allocate that time rather than following clickbait headlines.
If you enjoyed this post be sure to check our blog weekly; the Risk Roundup runs Friday mornings in addition to more enlightening content we post related to the ever-evolving landscape of digital risk. Follow us on Twitter (@SolveCyberRisk) and LinkedIn (Coalition Inc). If you have any suggestions for content that we should be adding to our reading list, let us know!
Related blog posts
Blog
What’s Old Is New Again: Attackers Target Resurgent Vulnerabilities
Take a look under the hood of Coalition’s Zero-Day Alerts to learn which vendors appear the most, how we balance new risks with the old, and more.
Blog
How We Reduce Alert Noise for MSPs by 99.99%
With traditional MDR, your team is still overwhelmed by false positives. Automated detection and response bridges the gap left by human-led protection.
Blog
Why MDR is Failing: Is Your Detection Tool a High-Priced Alarm?
Defenders are being confronted with an unprecedented speed crisis. Traditional human-led managed detection and response timelines no longer work.
