In the early days, Cybersecurity (then called IT Security or information security) used to be merely a username and password. If you ask to someone, they would say I have a username and password so I am safe. It wasn’t much of the internet at that time. Eventually, people have learned that password isn’t sufficient to protect their digital assets. So Antivirus (AV) software flourished and we saw a plethora of internet security solutions that revolve around AVs used to catch the known malicious code which was enough of a validation for the vendors. Again, fast forward a couple of years, and the internet became mainstream, and businesses along with consumers started to use the internet for many things and mainly emails and web browsing.
As businesses started using the internet for their emails and web, Firewalls became the solution to our cybersecurity issues. As it was for passwords and AVs.
What have we learned?
True we have a facelift as we learned from attackers where AVs became EDRs, passwords have their own managers and firewalls have Next Generation brand. This is not supposed to be a historical discussion of cybersecurity as we know it. However, 25 years have passed and we are still clung to passwords with cosmetic. The main point is that there is a correlation between going digital and the number of attacks happening.
COVID-19 is a pandemic that opened our eyes to a lot of things, one thing that is within the context of this blog, is that working remotely comes with its own risks and we got to know by doing that password are not enough, and firewalls are not meant to protect us while we are out of office.
That’s why Multifactor Authentication or MFA for short is becoming an important architectural component in protecting us in the new Working From Home (WFH). MFA is becoming what firewalls were in the internet era, the password, and AVs in the 80s.
MFA is not really a new concept, it has been there for a while, however, with the advent of mobile devices, it became mainstream.
Share this article:
Since the beginning of 2020 due to COVID-19 people have been social distancing and staying indoors as much as possible. Due to that the use of the Internet, E-commerce sites, and E-government operations have increased immensely and so have the attempts at phishing attacks. His Excellency Dr. Khaled bin Abdullah Al-Sabti, Governor of the Cybersecurity Authority, spoke during the opening of the Global Cybersecurity Conference on April 7th, 2021, about the high increase in phishing sites by about 300% and the importance of being aware. Below (Figure A-1 & A-2) we can see two different examples of Smishing Attacks during ...31st May 2021
Cyber-attacks come in a variety of formats and with the advancement of technology it continues to improve. Phishing is a common type of cyber-attack used by cyber criminals, and according to Proofpoint’s threat report, 75% of organizations experienced a Phishing attack in 2020 (Proofpoint 2021 state of the Phish report). Cyber criminals found a higher success rate in achieving their goals thorough email phishing rather than any other approach. This is due to the lack of awareness and knowledge on how to identify legitimate emails from fake ones. There are many ways that could help organizations in decreasing the numbers ...31st May 2021
Social engineers have found numerous approaches to exploit victims of their personal information. With the continuous increase of new cyber threats, society should be constantly informed and educated on how to distinguish and prevent them. Due to the direct interaction with the human user, social engineering is one of the most powerful methods of network penetration. Its success rate depends highly on the targeted individual’s knowledge and awareness. If they are oblivious of their tactics, then this makes the attacker’s job easy. Unfortunately, many fall for their schemes. Social engineering depends on human interactions and the flaws of humans. According ...29th Apr 2021
With the hit of the global pandemic and its effect on the world, cyber criminals took this to their advantage and capitalized on it. From the beginning of 2020, people’s lives changed drastically but especially employees and students. Online schooling and working from home are now the new norm and people needed to make this new adjustment while experiencing new threats and tactics from cyber criminals. Before the pandemic, cyber-attacks were a continuous issue for many but with more educational information on how to catch on to their tricks led to lower percentages of successful scams. But now, these criminals ...31st Mar 2021
Phishing attacks are not something that has come up recently. Such attacks have been around since the mid 90s, however, overtime, they have become more sophisticated. To make things worse, did you know that 32% of confirmed data breaches involved phishing? (Verizon 2019 Data Breach Investigations Report) And 57% of the organizations report having experienced mobile phishing attacks! (Wandera’s 2020 Mobile Threat Landscape Report). Before moving on to the latest trends in phishing, let us define it. What is Phishing? Phishing is one of the easiest and most common types of cyber attacks used by criminals and among the easiest ...25th Feb 2021