[{"innerBlocks":[],"name":"core\/freeform","postId":125849,"blockType":{"name":"core\/freeform","keywords":[],"attributes":{"content":{"type":"string","source":"raw"},"lock":{"type":"object"}},"providesContext":[],"usesContext":[],"selectors":[],"supports":{"className":false,"customClassName":false,"reusable":false},"styles":[],"variations":[],"apiVersion":3,"title":"Classic","description":"Use the classic WordPress editor.","category":"text"},"originalContent":"Securing all forms of data is, and will continue to be, an ongoing challenge for individuals, organizations and enterprises as we head into 2020. Just look at the past year\u2014one of the most notable cybersecurity threats that plagued cities, individuals and other organizations (especially healthcare) was ransomware<\/a>. And when you look at the numbers, they\u2019re staggering. As of this past August, 140 ransomware attacks<\/a> have targeted public state and local governments as well as healthcare providers this year, with two-thirds<\/a> of publicly known attacks targeting the former. The point is that malicious actors are tenacious, creative, and will keep finding new ways to get what they want: your data.And, as with every new year, comes new\u2014and often unforeseen or even unfathomable\u2014threats to cybersecurity and the data, apps and technology that we\u2019ve all come to rely on every day. As someone who\u2019s worked in cybersecurity throughout my entire career, there are two things I believe we\u2019ll see make headlines next year that every enterprise should be aware of and prepare for.The convergence of physical infiltration with cyberattacks, challenging security across the board<\/b>Cyberattacks on an enterprise or a government can be carried out remotely but, in 2019, we started hearing more about the physical element added to the mix. Just look at the woman who had a thumb drive loaded with malware<\/a> that got into Mar-a-Lago. Although she wasn\u2019t able to successfully tap into the network, she still had a convincing enough story to get past physical checkpoints manned by the Secret Service.House Financial Services Committee Hearing On The Equifax Data Breach<\/bsp-image>And it doesn\u2019t take sophisticated software or intelligence operations to execute these attacks \u2013 a well-planned, staged scenario is all it takes. For instance, someone could pose as an electrician to gain physical access to a hospital being built, walking around unimpeded until they find an unprotected device to access the network. I believe we\u2019ll see more of these high-profile, hybrid cyber-physical attacks in 2020.AI and speech technology will be exploited, making voice a new weapon of choice<\/b>If there\u2019s one thing that malicious actors are good at, it\u2019s creativity. We\u2019ll see business email compromise (BEC)<\/a> extend further over into voice next year. Even though many organizations have educated employees on how to spot potential phishing emails, many aren\u2019t ready for voice to do the same as they\u2019re very believable and there really aren\u2019t many effective, mainstream ways of detecting them. And while these types of \u201cvoishing\u201d attacks aren\u2019t new, we\u2019ll see more malicious actors leveraging influential voices to execute attacks next year.And it\u2019s not as hard as it sounds\u2014it\u2019s easier than ever to get an audio clip of an executive, CEO or world leader giving a speech and then altering it for nefarious purposes (what\u2019s known as a deepfake<\/a>). Imagine receiving an urgent call or voicemail from your \u201cboss,\u201d asking to share credentials for a secure platform or system. Without any packaged-up, off-the-shelf solutions to help detect these threats, we\u2019re going to see a lot more voice-related attacks in 2020 that will be harder to identify and even harder to protect against.With these looming threats, organizations need to be proactive, be vigilant and think like the enemy.These are just two strategies we\u2019ll see malicious actors exploit next year, in addition to all of the other creative, and yet destructive, ways to gain access to critical data. Keep in mind that these actors have this one goal in mind, because there\u2019s a giant pot of gold at the end of the rainbow.","saveContent":"Securing all forms of data is, and will continue to be, an ongoing challenge for individuals, organizations and enterprises as we head into 2020. Just look at the past year\u2014one of the most notable cybersecurity threats that plagued cities, individuals and other organizations (especially healthcare) was ransomware<\/a>. And when you look at the numbers, they\u2019re staggering. As of this past August, 140 ransomware attacks<\/a> have targeted public state and local governments as well as healthcare providers this year, with two-thirds<\/a> of publicly known attacks targeting the former. The point is that malicious actors are tenacious, creative, and will keep finding new ways to get what they want: your data.And, as with every new year, comes new\u2014and often unforeseen or even unfathomable\u2014threats to cybersecurity and the data, apps and technology that we\u2019ve all come to rely on every day. As someone who\u2019s worked in cybersecurity throughout my entire career, there are two things I believe we\u2019ll see make headlines next year that every enterprise should be aware of and prepare for.The convergence of physical infiltration with cyberattacks, challenging security across the board<\/b>Cyberattacks on an enterprise or a government can be carried out remotely but, in 2019, we started hearing more about the physical element added to the mix. Just look at the woman who had a thumb drive loaded with malware<\/a> that got into Mar-a-Lago. Although she wasn\u2019t able to successfully tap into the network, she still had a convincing enough story to get past physical checkpoints manned by the Secret Service.House Financial Services Committee Hearing On The Equifax Data Breach<\/bsp-image>And it doesn\u2019t take sophisticated software or intelligence operations to execute these attacks \u2013 a well-planned, staged scenario is all it takes. For instance, someone could pose as an electrician to gain physical access to a hospital being built, walking around unimpeded until they find an unprotected device to access the network. I believe we\u2019ll see more of these high-profile, hybrid cyber-physical attacks in 2020.AI and speech technology will be exploited, making voice a new weapon of choice<\/b>If there\u2019s one thing that malicious actors are good at, it\u2019s creativity. We\u2019ll see business email compromise (BEC)<\/a> extend further over into voice next year. Even though many organizations have educated employees on how to spot potential phishing emails, many aren\u2019t ready for voice to do the same as they\u2019re very believable and there really aren\u2019t many effective, mainstream ways of detecting them. And while these types of \u201cvoishing\u201d attacks aren\u2019t new, we\u2019ll see more malicious actors leveraging influential voices to execute attacks next year.And it\u2019s not as hard as it sounds\u2014it\u2019s easier than ever to get an audio clip of an executive, CEO or world leader giving a speech and then altering it for nefarious purposes (what\u2019s known as a deepfake<\/a>). Imagine receiving an urgent call or voicemail from your \u201cboss,\u201d asking to share credentials for a secure platform or system. Without any packaged-up, off-the-shelf solutions to help detect these threats, we\u2019re going to see a lot more voice-related attacks in 2020 that will be harder to identify and even harder to protect against.With these looming threats, organizations need to be proactive, be vigilant and think like the enemy.These are just two strategies we\u2019ll see malicious actors exploit next year, in addition to all of the other creative, and yet destructive, ways to gain access to critical data. Keep in mind that these actors have this one goal in mind, because there\u2019s a giant pot of gold at the end of the rainbow.","order":0,"get_parent":{},"attributes":[],"attributesType":{"content":{"type":"string","source":"raw"},"lock":{"type":"object"}},"dynamicContent":""}]

The 2020 state of cybersecurity: 2 ways enterprises need to prepare

More for you