Global Cyberattack

A global cyberattack recently crippled multiple federal agencies. These have been blamed on Russian-speaking cyber-criminals.

Let’s discuss how your business can proactively ensure its own safety, even when large entities such as the US Government face challenges in doing so.

SQL Injection

A SQL injection vulnerability (CVE-2023-35708) was identified in the MOVEit Transfer web application. MOVEit is a vendor supported application that encrypts and transfers files. Hackers exploited a vulnerability in the MOVEit software, a software application used by the US Government, and took advantage of this vulnerability to gain elevated system access.

How does this apply to you? On your personal smartphone, you may have noticed that apps require regular updates. Software on your business computers is no different. Vendors regularly release updates as they find bugs and vulnerabilities.  Which means, you or your IT company need to update Vendor built software applications on an ongoing basis. This incident highlights once again the importance of patch management, not just of operating systems, but of every application running on your computer.

Here are a few tips to keep your business safe from cyberattacks.

Regularly Update Software and Systems

Keeping your vendor software and all other systems up to date is crucial. Software updates often include security patches that address vulnerabilities and weaknesses that cybercriminals can exploit. Implement a regular schedule for applying updates and patches to all software, operating systems, and applications. Please, enable automatic updates whenever possible to ensure timely installation of security fixes.

Implement Strong Access Controls and User Authentication

Proper access controls and user authentication mechanisms help prevent unauthorized access to sensitive data and systems. Use strong and unique passwords for all user accounts, including vendor software accounts. Encourage or enforce multi-factor authentication (MFA) to add an extra layer of security. Limit administrative privileges and provide access only on a need-to-know basis. Regularly review and revoke access for employees or vendors who no longer require it.

Educate Employees about Cybersecurity Best Practices

Consider, employees are often the weakest link when it comes to cybersecurity. Conduct regular cybersecurity awareness training sessions to educate your staff about common cyber threats, phishing scams, and best practices for data protection. Teach them about the importance of strong passwords, how to identify suspicious emails or links, and the risks of sharing sensitive information. Encourage employees to report any potential security incidents or concerns promptly.

Keep in mind, cybersecurity is an ongoing process, and it’s essential to stay updated with the latest security practices, invest in robust security tools and solutions, and regularly evaluate and enhance your security measures.

Fizen™

Have questions about IT Support and Service?  Contact Us today to learn more about how we can assist in supporting your technology.