The new year is almost upon us; and while it may see that 2019 is a new year full of threats, it’s also full of opportunities and promise. Reflecting on 2018, cybersecurity trends have been a focal point in the media and there is no doubt that will change anytime soon but some things will change. The data security industry is ripe with change as it focuses on the ever-changing technology sector. Looking to 2019 and beyond, there are some things that will need to continue to be tackled, while at the same time gaining a handle on brand new issues.
Two Factor Authentication Is Quickly Becoming The Standard
Long are the days of a simple six character password. Now the average password is not only nine characters plus, but must include variation like upper and lower case, numbers and symbols. Unfortunately that’s often not enough to stop criminals resulting in the need for two-factor authentication. Think that texting your phone number with a passcode is enough? Think again. Criminals are now utilizing something called ‘sim swapping’ where they are able to quickly gain access to your phone and thus your second level of authentication. What else can you use for the second level? Luckily there are often a couple different options.
- Authenticator Apps like Google Authenticator. Rather than send you an SMS, Google Authenticator will show you a randomized, six digital code that is updated every 30 seconds. While the app is still on your phone, it’s tied to your device rather than your phone number.
- Hardware tokens like YubiKey. The tokens creates a randomly generated code for your second factor authentication. Yubikey Can be either inserted into the USB port on your computer or simply tapped to NFC device and protection is activated.
- Biometrics. What better way to prove who you are than with your fingerprint. Many mobile devices now allow the use of biometrics for password protections or to replace your password altogether. In fact, Mastercard is requiring that biometric authentication be available to all users by April of 2019.
AI Making Cybercriminals Stronger
Artificial intelligence is a magnificent tool that can be used systemically from manufacturing to medicine and everything in between. Unfortunately, cyber criminals are also taking advantage of this new technology as well. For example: hackers have created AI programs that can detect when their fraudulent phishing links are caught. In response they then send something unsuspecting like a YouTube link which passes the spam filter but still contains a virus or destructive malware. We cannot stress enough to always err on the side of caution when receiving unexpected links.
Microsoft moving ATP to better protect Windows 10
Microsoft Advanced Threat Protection, or ATP, is a cloud based security system which requires a Windows E5 license or Microsoft 365 E5 and internet access. ATP helps stop breaches and improves security. This move solidifies Microsoft’s efforts of branding itself as security focused and gives the proverbial ‘leg-up’ over IBM’s Redhat enterprise. This also signifies that everyone should be getting serious about cybersecurity.
Phishing Isn’t Just Some Wealthy Prince Anymore
Hackers are getting smarter with the ways they will try and trick you. It’s not just simply sending an email requesting money to see if you will fall for it; they are developing elaborate schemes that even the best of us can fall victim to. In addition to simply trying to hack your financial information by pretending to be your bank, here are some other creative ways criminals are trying to scam you:
Mortgage wire fraud: Taking advantage of the hot housing market right now, mortgage wire fraud entails a real estate agent being emailed a message to wire funds prior to closing. These emails can be hard to distinguish from authentic emails. Always best to verify information when you receive a financial request even if you’re expecting Long are the days of hosting a yard sale to declutter your home. In the age of Craigslist and Facebook Marketplace people are finding it easier and easier to sell their unwanted stuff, but do so cautiously. A recent common scam is to be contacted about your items for sale, and be asked to receive a check in excess of your item, to which you are to wire back the excess. As always be extremely cautious putting your personal information on the internet.
Malware continues to grow while and Ransomware declining
According to Kaspersky Ransomware fell about 30% in 2018. While this is a welcome change it’s mostly due to cybercriminals simply finding more effective ways to make money. This done not mean that ransomware is no longer a concern as rather than attacking with a broad brush it’s now much more strategic and targeted. If you’re within the municipal and healthcare realms you still need to stay on high alert as these are the highest currently targeted.
Malware continues to be a concern for most businesses as criminals are getting smarter with their techniques. They are getting better at hiding the malware where it may not be detected for months, and by that point may have done irreversible damage. Remember that 58% of malware victims are small businesses because criminals prey on the fact that they generally do not have effective security measures in place. Utilizing partners like RDE Technologies ensures that you don’t become another statistic.
Formal Education in Cybersecurity Becoming More Available
For far too long the only thing a person interested in cybersecurity could earn was a certificate, but that’s no longer the case. Numerous institutions of higher education, particularly prestigious ones at that, are now offering degrees in cybersecurity. With degrees at the two-year, four-year and graduate level there is something for everyone. This couldn’t have come at a more perfect time as according to the U.S. Bureau of Labor Statistics; employment of Cybersecurity Officers (or CSOs) is slated to jump 28% over the next 10 years.
As these trends and more grow in the near and far future, you can be sure that RDE Technologies is staying on top of them. Contact us today to learn more about protecting your business from cybercrime.
