What Is Data Protection?

People have been practicing data protection since ancient times. Imagine a messenger running from one city to another, carrying a ribbon with seemingly random letters. Or a medieval scribe who makes copies of his manuscripts. Both were protecting data. The runner was using a scytale encoding to keep the message from being read by enemies should he even be caught. The writer made a copy of the text to hide it in a chest to protect it from wind, rain, snow, and thieves. Today we do the same things, but the threats are different.

Data protection encompasses any measures we take to secure data regardless of where it is stored: on a remote server or a hard disk of our computer. These measures include inputting passwords to any devices or Internet accounts, undergoing biometric authentication, installing antivirus software, conducting regular scans, etc. These measures can be arbitrary or obligatory.

What Are Data Protection Regulations?

People’s attitude to the security of their private data can be astoundingly careless. But it’s their problem. On the contrary, those companies who take responsibility for storing or processing their clients’ personal data (like social networks or electronic mailboxes, state registries, public services, etc.) oblige themselves or are obliged by law to implement data protection regulations within their workspace. An example of such obligatory guidelines is GDPR, the International General Data Protection Regulations accepted in the European Union in 2018.

Why Is it Important?

One can hardly find a modern industry that would not rely on information technologies or involve them. Criminals and thieves of all sorts now have a new catch – information. Hackers can steal information, destroy it, blackmail owners with its disclosure, or encrypt the data on hacked computers. Then they can demand a ransom from their victims for having their data decrypted. The last case is the first viable and widely-used hacker business scheme – a ransomware attack. In a world where all person’s work, private life, plans, notes, and even dreams become the content of a portable device – the security of this content becomes crucial, and its loss can be deplorable.

Ways To Protect You Personal Data

What is very important to remember is that although various internet services comply with their data security policies and regulations, users should cooperate with these services and not overthrow all the responsibility for the safety of their data on the corporations. The following list of data-safety measures is good for protecting data on a personal device and the cloud.

1. Set up two-factor authentication on your financial accounts.

Financial accounts are usually more protected than social media profiles, mailboxes, or messengers, but they require more attention and care. A breach of a bank account is like nothing you want to experience. Therefore, use the two-factor authentication in your banking service to protect yourself from fraud, deceptive social engineering, and phishing attacks. All it takes is to press a button on your telephone every time you try to access your banking account. If any crooks get your login and password, you won’t let them use those credentials.

2. Malware protection is a must.

Without an anti-malware solution any system today is bare against a jungle of harmful entities. A modern security program will:

1. warn you about suspicious webpages you are trying to access;
2. stop you from entering overtly dangerous sites;
3. quarantine and remove any recognizable malicious programs as soon as they end up on your device;
4. clear all hidden threats with the help of a deep scan function.

GridinSoft Anti-Malware is a versatile solution featuring all the described functions and providing consistent protection without inconveniences typical for bulky and “heavy” antivirus programs. Economically beneficial, Anti-Malware is one of the most efficient and quick security programs on the market.

3. Use a firewall.

A firewall is a program filter separating a network it protects from the external environment. It can be protecting one computer or an entire workgroup. Most of the OSs have an in-built firewall. It controls the incoming and outbound traffic using pre-defined rules. Users tend to switch off firewalls temporarily to access suspicious websites but later forget to reactivate the defense. That is dangerous and puts a device or a network at risk.

4. Use free Wi-Fi with care.

A Wi-Fi router can be a source of a so-called Man-in-the-middle attack that uses a spoofed network name. After you access the wrong network by mistake, all the data outbound from your device comes into the possession of crooks. Later your data can be used directly against you up to identity theft or blackmailing, or, in better cases, it can be collected and sold to third parties for their own needs.

5. Protect your email accounts.

An email account is the core of any person’s virtual representation. Profiles in social media and other internet services often refer to your email address, and that address is essential to password restoration if you happen to need that. Therefore, email safety should be of the utmost concern. Remember to log out from your mailbox on any device except for yours. Also, make sure you use a strong password and change passwords from time to time.

6. Update your software regularly.

Computer software nowadays gets updated automatically or with the slightest effort from the user. However, many program vulnerabilities emerge in in-between moments, when one program (let’s say operating system) is already updated, while some different software is not yet up-to-date. Such inconsistent versions can lead to malware infection if cybercriminals intend to pull that over. The most wanted updates are the updates of security programs. The more malware signatures an antivirus program has in its libraries, the more malicious items it will remove from your PC before they can even harm it.

7. Back up your data.

Advice to have a backup of all critical information to preempt physical damage of the drive, loss, or theft is one of the wisest hints one could harken to. Anyone who has ever experienced anything mentioned above knows how important it is to have everything in two or maybe even three instances.

8. Don’t store passwords on your laptop or mobile device.

Always consider that your portable device might get into someone else’s hands. It might be a good person, but some bad person might also steal your device. You must be ready for such an unfortunate event. And that means not only photos and videos you wouldn’t like anyone to see should not be there on your device, but definitely, passwords should not be stored thereon. By the way, don’t forget to log out from all the accounts remotely when you notice your device is gone.

9. Use Strong, Unique Passwords

Using strong, unique passwords for each of your online accounts is one of the most effective ways to protect your personal data. Weak passwords are easy for hackers to guess, and using the same password for multiple accounts means that if one account is compromised, all of your other accounts are at risk too.

Tips for Creating Strong, Unique Passwords:

• Make It Long: Aim for at least 12 characters. The longer your password, the harder it is to crack.
• Mix It Up: Use a combination of uppercase letters, lowercase letters, numbers, and special characters (like !, @, #, $).
• Avoid Obvious Choices: Don’t use easily guessable information like your name, birthdate, or common words like “password” or “123456.”
• Use a Password Manager: Password managers can create and store complex passwords for you, so you don’t have to remember them all. This ensures each of your passwords is unique and secure.

Imagine your password is a secret code that only you and your best friend know. Make it something fun and memorable, like a phrase from your favorite book or movie, but change some letters to numbers or symbols.

Example: If you love the book “Harry Potter“, you could start with “HarryPotterRocks” and make it stronger by adding numbers and symbols: “H@rryP0tt3rR0ck$!“

Instead of a single word, think of a sentence or phrase you can remember easily. Make it something silly and fun.

Example: “MyC@tJumpsOver7Rainbows!” This phrase is long, includes a mix of characters, and is easy to remember because it’s a funny mental image.

Just like you wouldn’t use the same secret handshake forever, change your passwords from time to time to keep them fresh and secure.

10. Be Cautious with Phishing Attempts

Phishing is when scammers try to trick you into giving them your personal information, like passwords or credit card numbers, by pretending to be someone you trust. They often do this through fake emails, messages, or websites. Being cautious helps you avoid these traps and keeps your information safe.

• Check the Sender’s Email Address: Scammers often use addresses that look similar to real ones but have slight differences.
• Look for Red Flags: Be suspicious of emails or messages with urgent requests, bad grammar, or unfamiliar links.
• Don’t Click on Suspicious Links: Hover over links to see where they lead before clicking. If it looks suspicious, don’t click.
• Verify Requests: If you get an email or message asking for personal information, verify it by contacting the company directly using a phone number or website you know is legitimate.
• Use Anti-Phishing Tools: Many email services and web browsers have built-in tools to help detect and block phishing attempts.

Always question messages that ask for personal information or seem unusual. It’s okay to be curious and skeptical – it’s better to be safe than sorry.

The post 10 Ways to Protect Your Personal Data appeared first on Gridinsoft Blog.

In addition to the obvious security benefits, the new API will actually allow Google and site operators to effectively deal with ad blockers.

As you can easily guess from this introduction, the main goal of the project is to learn more about the person on the other side of the browser, to make sure that he is not a robot, and the browser has not been modified or faked in any way.

The developers say that such data will be useful for advertisers to count ad impressions, help fight bots on social networks, protect intellectual property rights, counter cheating in web games, and also increase the security of financial transactions.

That is, at first glance, the Web Environment Integrity API is designed as a security solution so that sites can detect malicious code modifications on the client side and disable malicious clients. The developers list several scenarios for the possible use of the new API:

1. detection of manipulation in social networks;
2. detection of bot traffic in ads to improve customer experience and access to web content;
3. detection of phishing campaigns (for example, Webview in malicious applications);
4. detection of mass takeover or account creation attempts;
5. detection of large-scale cheating in web games with fake clients;
6. Detection of compromised devices where user data may be at risk;
7. detecting account takeover attempts by guessing a password.

At the same time, the authors of the Web Integrity API write that they were inspired by “existing native attestation signals, including [Apple] App Attest and [Android] Play Integrity API.”

It’s worth clarifying here that Play Integrity (formerly SafetyNet) is an Android API that allows apps to find out if a device has been rooted. Root access allows you to take full control of the device, and many application developers do not like this. Therefore, after receiving the appropriate signal from the Android Integrity API, some types of applications may simply refuse to start.

As a rule, banking applications, Google Wallet, online games, Snapchat, as well as some multimedia applications (for example, Netflix) refuse to work in such cases. After all, it is believed that root access can be used to cheat in games or phish banking data. Although root access may also be needed to configure the device, remove malware, or create a backup system, Play Integrity does not consider such uses and in any case blocks access.

As experts now assume, Google aims to do the same across the Internet.

By Google’s design, during a web page transaction, the server may require the user to pass an environment attestation test before they receive any data. At this point, the browser will contact a third-party attestation server and the user will have to pass a certain test. If the verification is passed, the user receives a signed IntegrityToken that confirms the integrity of their environment and points to the content to be unlocked.

Then the token is transferred back to the server, and if the server trusts the tester company, then the content is unlocked, and the person finally gets access to the necessary data.

As many now assume, if the browser in this example is Chrome, and the attestation server is also owned by Google, then Google will decide whether or not to allow a person access to sites.

The company assures that Google is not going to use the described functionality to the detriment. Thus, the creators of the Web Integrity API “firmly believe” that their API should not be used for fingerprinting people, but at the same time they want to get “some kind of indicator that allows you to limit the speed in relation to the physical device.”

It also states that the company does not want to “interfere with browser functionality, including plugins and extensions.” Thus, the developers make it clear that they are allegedly not going to fight ad blockers, although the company has been working on the scandalous Manifest V3 for many years, whose goal is precisely this. We, by the way, wrote how the developers will implement these rules. And the new API can be used to detect when an ad blocker is tampering with ad code. After that, the site operator will be free to simply stop providing services.

The discussion of this topic on the network has already provoked a wave of criticism against Google, and the project has been dubbed DRM for the Internet. For example, developers, information security specialists, and ordinary users note that the Web Integrity API project intends to be hosted on GitHub by one of the developers, and Google is trying to distance itself from development that can literally poison existing web standards, helping the company save the advertising business.

The discussion on the project’s Issues page on GitHub also deals primarily with the ethical aspects of what is happening, and Google is accused of trying to become a monopolist in another area and “kill” ad blockers.

You might also be interested in our article on how Google membership rewards scam is a new popular type of online fraud.

The post Google Is Working on an Information Security Project Called Web Integrity API appeared first on Gridinsoft Blog.

For years, security experts have been warning about the dangers of using Wi-Fi hotspots in public places, as in cafes, airports, hotels, or shopping malls. The fact is that these access points may turn out to be devices of intruders who will eventually be able to carry out a man-in-the-middle attack, intercept the victim’s traffic, credentials from her accounts, and payment information.

Snappy tool allows detecting fake Wi-Fi networks

Trustwave expert Tom Neaves writes that spoofing MAC addresses and SSIDs of real access points in open networks is a trivial task for attackers. As a result, people’s devices often try to automatically connect to networks they have previously connected to using a saved access point, but in fact connect to a malicious device. To make it easier to avoid such situations, Neaves has created a Python script called Snappy that helps determine whether the access point the user is connecting to is the same as always, or the user is dealing with a fake device of hackers.

Explaining the mechanism

After analyzing the Beacon Management Frames, the expert found certain static elements, including data about the provider, BSSID, supported speeds, channel, country, maximum transmit power, and so on. This data varies for different 802.11 wireless access points, but remains the same for a particular access point over time.

Neaves concluded that it was possible to concatenate these elements and hash them using SHA256, creating a unique access point signature that could then be used to detect matches or mismatches. >So, matches mean that the access point is the same as always (that is, trustworthy), while a signature mismatch means that something has changed, and the access point may be malicious.

In addition, Snappy is able to detect hotspots created with Airbase-ng. This tool is often used by attackers to create fake access points, intercept packets of connected users, and inject data into other people’s network traffic.

The post Snappy Tool Helps Avoid Fraudulent Wi-Fi Hotspots appeared first on Gridinsoft Blog.

It all started when people were asked to reset multi-factor authentication (MFA) applications. The fact is that users are required to re-login to their LastPass account and reset the MFA after the company was hacked at the end of last year. And by the way, we also talked that LastPass Breach Investigation Goes On, Things are Even Worse.

Let me remind you that media also wrote that Hackers Broke into the Home PC of the Developer of the LastPass Password Manager and Penetrated the Company’s Cloud Storage, and also that Hunter Biden’s top-secret laptop was protected with a simple password.

The new security measures that will be introduced as part of the planned improvements in this area were announced by the company on May 9th.

As a result, many users were off their accounts and lost access to the LastPass vault, even after successfully resetting MFA apps (eg LastPass Authenticator, Microsoft Authenticator, Google Authenticator).

The problem is exacerbated by the fact that victims cannot even contact LastPass support for help, since it requires logging into their account, and people are locked in an endless loop where they are prompted to reset the MFA.

At the same time, LastPass developers report that they warned about the upcoming reset of the MFA through messages in the application “several weeks” before the start.

Since the warnings clearly didn’t work, the company is now issuing security patch newsletters explaining to users that these changes are necessary to increase the password iterations to the new default value of 600,000.

In another newsletter, the company says users need to re-enable multi-factor authentication to stay secure when logging into LastPass.

The entire procedure required to reset the pairing between LastPass and an authenticator app (LastPass Authenticator, Microsoft Authenticator, or Google Authenticator) is now detailed in a separate document.

As part of security enhancements, users are now prompted to verify their location when they sign in to a website or app using LastPass. Also, if you sign in to a site or app that used LastPass to sign in, you’ll need to re-enter your credentials and authenticate with the authenticator app. The next time you sign in to a site or app using LastPass, you are asked to repeat the same process as an added security measure.

The post LastPass Users Can’t Login to App after Resetting MFA appeared first on Gridinsoft Blog.

Trend Micro researchers reported recently that since September 2022, attackers have been actively using a malware obfuscation engine called BatCloak, which allows cybercriminals to effectively hide malicious code from antivirus solutions.

According to experts, with BatCloak attackers can easily download different families of malware and exploits through heavily obfuscated batch files. Of the 784 malware detected by researchers, almost 80% were not detected by any of VirusTotal’s antivirus engines.

Let me remind you that we also wrote that ChatGPT Has Become A New Tool For Cybercriminals In Social Engineering, and also that Russian Hacker Sells Terminator Tool That Is Allegedly Able To Bypass Any Antivirus Programs.

BatCloak is the basis for a batch file building tool called Jlaive that can bypass the Antimalware Scan Interface (AMSI) and compress and encrypt the main payload to increase evasion levels.

The Jlaive tool was published on GitHub and GitLab in September 2022 by a developer under the pseudonym ch2sh as “EXE to BAT crypter“. It has since been copied, modified and ported to other programming languages.

The final payload is a “three-layer loader” – a C# loader, a PowerShell loader, and a batch loader. The latter serves as the starting point for decoding and unpacking each stage, and ultimately launching the hidden virus.

BatCloak attack chain

BatCloak has received many updates and adaptations since it first appeared in the wild (ITW). Its latest version is called ScrubCrypt and was isolated by Fortinet experts during an investigation into a cryptojacking operation by the 8220 gang.

In addition, ScrubCrypt is designed to be compatible with various well-known malware families such as Amadey, AsyncRAT, DarkCrystal RAT, Pure Miner, Quasar RAT, RedLine Stealer, Remcos RAT, SmokeLoader, VenomRAT, and Warzone RAT.

The post BatCloak’s New Obfuscation Engine Outperforms 80% of Antiviruses appeared first on Gridinsoft Blog.

Let me remind you that we also wrote that GPT-4 Tricked a Person into Solving a CAPTCHA for Them by Pretending to Be Visually Impaired, and also that New hCaptcha bypass method may not affect Cloudflare’s security.

Discord CAPTCHA Created by AI Confuses Users

According to Vice Motherboard journalists, several people immediately complained on social networks about the strange object Yoko, which was required to be found among other photos to enter Discord.

At the same time, other users found that they were asked to find images of a puzzle cube, which was also created by artificial intelligence and did not look too much like a real-life object. In addition, all the objects in the task look like they came straight from the Uncanny Valley.

CAPTCHAs for Discord are provided by hCaptcha, and Discord representatives told reporters that the technology that generates these prompts “is the property of a third party partner and Discord does not directly determine what will be presented to users”. In turn, representatives of hCaptcha explained that what happened was “a short test that a small number of people saw.” Since hundreds of millions of users use the technology in total, even this “brief test” resulted in the tweets shown above.

The publication notes that hCaptcha positions itself as a privacy-focused alternative to reCAPTCHA. According to a 2018 blog post, hCaptcha prompts are self-generated by clients who need “high-quality, human-generated annotations for their machine learning needs.”

That is, hCaptcha makes money both from clients like Discord who buy professional and enterprise subscriptions to run CAPTCHA services, and from clients who create prompts. In fact, hCaptcha uses its own CAPTCHA for machine learning systems and generative adversarial networks.

And this is not the first time that people have noticed the appearance of strange images in hCaptcha services and note that the company apparently trains AI with the help of users. So, two months ago, a Reddit user noticed that Discord asked him to find among the images of people playing hockey and golf, football players, which was clearly created by artificial intelligence. In March, another Reddit user complained that Discord’s CAPTCHA had become almost unsolvable.

Journalists summarize that the work of hCaptcha is a prime example of the problems that arise with machine learning systems. The first is that AI systems require significant human input. For example, as a rule, indexing and categorization of images is transferred to outsourcers from developing countries, whose work is extremely poorly paid. Another problem is data drift: the longer machine learning systems work, the more data they need. Ultimately, they begin to use data that they themselves have generated for self-learning. And systems that train for a long enough time on themselves eventually come to the point that they issue requests for the definition of incomprehensible objects, like Yoko.

The post CAPTCHA in Discord Asks Users to Find Non-Existent Objects Created by AI appeared first on Gridinsoft Blog.

Users have noticed that a bug seems to have crept into Microsoft Edge – the fact is that, starting with build 112.0.1722.34, the browser passes all the URLs that users visit to the Bing API. In theory, this allows Microsoft to monitor all online activity of Edge users if the company decides so.

Let me remind you that we also wrote that Bing Chatbot Could Be a Convincing Scammer, Researchers Say, and also that Phishers Can Bypass Multi-Factor Authentication with Microsoft Edge WebView2.

The problem was first discovered by a Reddit user with the nickname HackerMcHackface. In his opinion, the error is related to a disabled content aggregation feature in Edge called Collections, which prompts content creators to create special offers for users.

Apparently, since the release of Microsoft Edge build 112.0.1722.34, the default behavior of Collections has changed. Whereas in previous versions of Edge this feature was limited to a subset of social networking sites, including YouTube and Pinterest, it’s clearly more widespread now.

For example, when visiting whitelisted pages, URLs are typically sent to the Bing API to determine whether the browser should show a pop-up window with some kind of recommendation that will appear in the user’s address bar. If the user clicks on such a popup, content from that author will be added to Collections.

Collections example

However, according to HackerMcHackface, a request to bingapis.com, with the full URL of the page being visited, is now almost always transmitted, allowing Microsoft to monitor all Internet activities of Edge users.

Let me also remind you that the media wrote that Microsoft to Limit Chatbot Bing to 50 Messages a Day.

Microsoft representatives told The Verge journalists that they already know about this problem, and the company’s specialists are already investigating.

According to the publication, the idea seemed to be to notify Bing when a user is on certain pages (like YouTube or Reddit), but something went wrong and now Bing gets information about almost every domain a person visits. .

Until the issue is fixed, Edge users are strongly advised to disable this feature by going to settings, under the “Privacy, search, and services” tab, and unchecking “Show suggestions to follow creators in Microsoft Edge” at the bottom of the page.

The post Microsoft Edge Exposes Bing API Addresses of Attended Sites appeared first on Gridinsoft Blog.

YouTube user Enderman demonstrated that he was able to force ChatGPT to generate activation keys for Windows 95.

Let me remind you that we also wrote that Russian Cybercriminals Seek Access to OpenAI ChatGPT, and also that GPT-4 Tricked a Person into Solving a CAPTCHA for Them by Pretending to Be Visually Impaired.

Our colleagues warned that Amateur Hackers Use ChatGPT to Create Malware.

At the same time, a direct request for keys from the Open AI chatbot did not give anything, and the YouTuber approached the problem from a different angle.

After refusing to generate a key for Windows 95, ChatGPT explained that it could not complete the task and instead suggested that the researcher consider a newer and more supported version of Windows (10 or 11).

However, the format of activation keys for Windows 95 is quite simple and has been known for a long time (see the image below), and Enderman converted it into a text query and asked the AI to create the desired sequence.

Although the first attempts were not successful, a number of changes to the request structure helped to solve the problem.

The researcher ran tests and tried to activate the new Windows 95 in a virtual machine. It turned out that about 1 out of 30 keys generated by ChatGPT worked as it should.

So, in a five-digit string, the sum of the digits which must be a multiple of seven, the AI substitutes a series of random numbers and fails this simple mathematical test.

After creating many activation keys for Windows 95, the researcher thanked the AI by writing, “Thanks for the free Windows 95 keys!” In response to this, the chatbot stated that it was strictly forbidden for him to create keys for any software, but Enderman continued to configure and said that he had just activated the installation of Windows 95 using such a key. Then ChatGPT replied that this was impossible because support for Windows 95 was discontinued in 2001, all keys for this OS have long been inactive, and it is strictly forbidden for him to create keys.

The post Blogger Forced ChatGPT to Generate Keys for Windows 95 appeared first on Gridinsoft Blog.

Some ChatGPT users have reported on social media that their accounts show other people’s chat histories.

Let me remind you that we also wrote that Russian Cybercriminals Seek Access to OpenAI ChatGPT, and also that Bing Chatbot Could Be a Convincing Scammer, Researchers Say.

The media also reported that Amateur Hackers Use ChatGPT to Create Malware.

As a result, the OpenAI developers were forced to temporarily disable this functionality in order to fix the bug. The company emphasized that because of the bug, people saw only the headlines of other people’s conversations, but not their content.

The ChatGPT interface has a sidebar that displays past conversations with the chatbot, visible only to the account owner. However, yesterday several people reported that ChatGPT began showing them other people’s chat histories. At the same time, one of the users emphasized that he does not see all someone else’s correspondence, but only the names of different conversations with the bot.

Alien logs in the sidebar

After a number of messages about this problem, the chat histories began to give an error “Unable to load history”, and then the service was completely disabled. According to the OpenAI status page and company representatives’ comments, given by Bloomberg, the problem did not extend to the full conversation logs, and only their titles were disclosed.

The developers are now saying they have found the cause of the crash, which appears to be related to unnamed open-source software used by the OpenAI.

The service has been restored, but many users still do not see the old conversation logs, and the team assures that they are already working on restoring them.

The media note that this is an important reminder of why you should not share any sensitive information with ChatGPT. After all, the FAQ on the OpenAI website has its reasons to say: “Please do not share any confidential information in your conversations.” The fact is that the company cannot remove certain data from the logs, and conversations with the chatbot can be used to train AI.

The post ChatGPT Users Complained about Seeing Other People’s Chat Histories appeared first on Gridinsoft Blog.

According to a new report from Gartner, by 2025, nearly 50% of cybersecurity leaders will change jobs, and 25% will move to other roles solely because of multiple job-related stressors.

Let me remind you that we also wrote that Malware developers are increasing the use of the unusual programming languages, and also that Microsoft estimated that ransomware attacks take less than 45 minutes.

Also the media noted that The number of ransomware DDoS attacks has dropped significantly.

Given these dynamics, as well as the huge market opportunities for security professionals, employee turnover is a major threat to security teams.

Gartner research shows that compliance-focused cybersecurity programs, low management support, and poor industry maturity are all signs of an organization that does not consider security risk management critical to business success. Such companies are likely to have higher turnover rates as talents move into positions where their impact is felt and appreciated.

Eliminating work stress is nearly impossible, according to Gartner experts, but employees can handle incredibly complex and stressful work in teams where they are supported.

Gartner predicts that by 2025, the lack of highly qualified specialists or human error will be the cause of more than 50% of disruptive cyber incidents. The number of cyberattacks and social engineering attacks is on the rise as attackers increasingly see humans as the most vulnerable point of exploitation.

A Gartner survey conducted in May and June 2022 of 1,310 employees found that 69% of employees violated their organization’s guidelines for cybersecurity over the past 12 months. In a survey, 74% of employees said they would be willing to bypass cybersecurity guidance if it helped them or their team achieve a business goal.

Gartner vice president of analytics Paul Furtado argues that contention, which slows down employees and leads to unsafe team behavior, is an important factor in an insider attack.

To counter this growing threat, Gartner predicts that by 2025, 50% of midsize and large businesses will implement insider attack risk management programs (compared to 10% currently).

A targeted insider attack risk management program should proactively identify behavior that could lead to potential theft of corporate assets or other malicious activities and provide corrective recommendations.

Furtado noted that cybersecurity directors should consider the risk of insider attacks when developing a cybersecurity program. Traditional cybersecurity tools have limited visibility into threats coming from within.

Reference:

Gartner is an American research and consulting company specializing in information technology markets. Considered a key researcher of IT markets.

The post Nearly 50% of Cybersecurity Leaders Will Change Jobs by 2025 appeared first on Gridinsoft Blog.