• Search for:
    10Jan, 2023
    The Top 4 Internet Of Things Trends In 2023

    The Internet of Things (IoT) is a term that’s come to be used to describe the ever-growing networks of physical objects that are online, connected, and capable of communicating and sharing information with us and with each other.

    Computers and then smartphones were the first devices that were connected to the internet. Over the past decade, our homes have become filled with smart TVs, connected kitchen appliances such as kettles and fridges, and smart alarm systems, cameras, and lightbulbs. At the same time, we have become used to working alongside smart machinery in workplaces, driving smart cars, and even living in smart cities.

    In 2023, it’s predicted that there will be more than 43 billion devices connected to the internet. They will generate, share, collect, and help us to make use of data in all manner of ways. So, here’s an overview of some of the key trends that will affect how we use and interact with these devices during the coming year.

    Digital Twins and the Enterprise Metaverse

    This is a convergence of two very important tech trends that will define how technology is used across industry and enterprise during 2023. For business, one of the most valuable applications of the metaverse will be bridging the gap between the real and virtual worlds. By using data from IoT sensors, it will be possible to build increasingly realistic digital twins of many different systems – from manufacturing facilities to shopping malls. Business users will then be able to step inside these digital twins using experiential metaverse technology like VR headsets to get a better understanding of how they work and how adjusting individual variables is likely to influence business outcomes.

    We are already seeing applications of this technology convergence in retail, where store planners can monitor footfall in real-time and make adjustments to displays and promotions to monitor how this impacts customer behavior and, ultimately, revenue generation. In industrial settings, it allows designers of factories and manufacturing plants to experiment with different machinery configurations, as well as to highlight potential safety issues and predict when breakdowns might occur.

    IoT Security

    IoT devices make our lives easier and more convenient, but they also leave us open to new and varied forms of cyberattack. To put it simply, the more connected devices we have in our environments, the more doors and windows are potentially open to attackers. As the number of devices explodes during 2023 and beyond, businesses, device manufacturers, and security experts will step up the fight to keep “malicious actors” at bay, minimizing their chances of getting their hands on our valuable data.

    In the US, the White House National Security Council has stated that it hopes to have standardized security labeling in place for consumer IoT device manufacturers by early 2023. These will help buyers to understand what risks might be posed by specific devices they introduce into their homes. Many basic attacks, such as phishing attacks, rely on social engineering – tricking users into divulging access details – and can be thwarted by taking basic precautions. The UK is also expected to introduce its own Product Security and Telecommunications Infrastructure (PTSI) bill.

    For those involved in IoT – particularly in the consumer space where networks can be the only barrier between thieves and hugely sensitive personal data – spending on security measures is forecast to hit $6 billion during 2023.

    The Internet of Healthcare Things

    Healthcare is a huge area of opportunity for IoT technology, and the value of the market for IoT-enabled health devices is set to hit $267 billion by 2023.

    One of the biggest gamechangers is the use of wearables and in-home sensors to enable healthcare professionals to monitor the condition of patients outside of the hospital or doctor’s surgery. This enables 24/7 care while freeing up valuable resources for patients who need immediate and direct care. In 2023 more of us will become familiar with the concept of the “virtual hospital ward”, where doctors and nurses will oversee the monitoring and treatment of patients in their own homes thanks to sensors and telemedicine.

    On the consumer side, wearable devices allow everyone to gain better insights into their own health and fitness, which again will help reduce the strain on existing healthcare systems by allowing us to seek help earlier when something is wrong, as well as gain a better understanding of how diet and exercise impact our health. Smartwatches featuring ECG and Sp02 sensors are now commonplace, and over the next year, we can expect to see more products, such as wearable skin patches. We may even see devices from Elon Musk’s Neuralink, which is creating implants that read neurological signals – one of the first applications being targeted could help people with paralysis regain control of their bodies.

    Governance and regulation in the IoT Space

    During 2023, the EU is expected to introduce legislation requiring manufacturers and operators of smart devices to follow stricter rules about how data can be collected, where it can be stored, and what they need to do to protect against breaches. This is just one piece in a raft of new legislation that we can expect to be implemented around the world. This means that 2023 may very well be the year that governments start to get to grips with the legal and social ramifications of an ever-expanding IoT. EU legislation is also expected to address issues around edge computing, which utilizes devices designed to process data at the point where it is collected rather than sending it back to centralized cloud servers to be analyzed. Meanwhile, in Asia, 2023 marks the culmination of a three-year plan by the Chinese government to put policies in place to allow the widespread adoption of IoT technology across the country. In China, as elsewhere in the world, the IoT is seen as having the potential to drive massive business growth, but there is an understanding that it needs to be grown in a managed way to avoid potential clashes with privacy issues and personal rights.

    To stay on top of the latest on the latest business and tech trends, make sure to subscribe to my newsletter, follow me on Twitter, LinkedIn, and YouTube, and check out my books ‘Tech Trends in Practice’ and ‘Business Trends in Practice, which just won the 2022 Business Book of the Year award.

    Resource : https://www.forbes.com/sites/bernardmarr/2022/11/07/the-top-4-internet-of-things-trends-in-2023/?sh=a2baf5d2aea1

    5Jan, 2023
    Cybersecurity Statistics and Predictions for 2023

    The past few years have witnessed a surge in cyber threats, including data breaches, ransomware attacks, and DDoS attacks. As CIOs navigate the challenges of remote work, the pandemic, and geopolitical issues, it’s more important than ever to stay vigilant against these threats. By examining the current threat landscape and considering recent statistics and predictions, we can get a clear understanding of where the majority of attacks are occurring and take steps to protect the enterprises. In this blog, we’ll discuss the top highlights of 2022 and what we can expect in 2023, along with relevant cybersecurity statistics.

    2022 At a Glance

    Cybersecurity remains a top priority for CIOs across the globe as threat actors find new ways to infiltrate a network and exploit sensitive information. Here are some of the top highlights from 2022:

    Investment fraud was the most expensive form of cybercrime, with an average of ​​$70,811 lost per victim. Top attack vectors, according to IBM, were compromised credentials (19% of all breaches), phishing (16%), and cloud misconfiguration (15%).

    Statista predicts cybercrime costs to skyrocket from $8.44 trillion in 2022 to $23.84 trillion by 2027.

    The average data breach cost is rising, the average cost of a data breach has increased from $4.24 million in 2021 to $4.35 million in 2022. This represents a 12.7% increase from the 2020 average cost of $3.86 million.

    Kaspersky’s DDoS Intelligence system noticed 57,116 DDoS attacks in Q3, 2022.

    This is only the tip of the iceberg. 2022 has seen a massive surge in cybercrimes, which are expected to grow in the coming years. So let’s see what the future of cybersecurity holds.

    Cybercrimes Are Increasing at an Alarming Rate Globally

    Cybercrimes have been at an all-time high. According to Cybersecurity Ventures: “Cybercrime costs include damage and destruction of data, stolen money, lost productivity, theft of intellectual property, theft of personal and financial data, embezzlement, fraud, post-attack disruption to the normal course of business, forensic investigation, restoration and deletion of hacked data and systems, and reputational harm.”

    Global cybercrime cost is expected to rise by 15% YoY over the next five years, reaching USD 10.5 trillion annually by 2025, up from USD 3 trillion in 2015.

    Data breaches are at an all-time high, with roughly 15 million data being exposed during the third quarter of 2022.

    Education/research, government/military, and healthcare sectors are the top 3 sectors hurt by the increasing attacks of cybercriminals, as noted by CPR with 2,148, 1,564, and 1,426 average weekly attacks, respectively.

    Ransomware Continues to Escalate

    Ransomware has repeatedly broken the news headlines, yet it remains one of the biggest threats to organizations.

    Not only is the number of ransomware crimes increasing, but it is also becoming more complex. Earlier hackers encrypted the data and demanded ransom to release it, but now they’re threatening companies to pay the ransom, or the hackers will sell their data.

    Cybereason surveyed 1,400 global cybersecurity professionals and noted that:

    73% of organizations suffered at least one ransomware attack in 2022.

    Supply chains are being exploited for infiltrating target networks, as 64% of companies believe ransomware gang made their way into their network via one of their business partners or suppliers.

    35% of companies had to face C-level resignations following a ransomware attack.

    According to FortiGuard Labs, ransomware incidents have increased by nearly 1100% over the last year.

    Crypto Hacking Is Becoming an Increasing Threat

    DeFi (decentralized finance), the primary protocol used in cryptocurrency for investors to lend, borrow, and trade without a central mediator, is being largely exploited by hackers.

    Rug pull is one of the major crimes conducted by hackers to exploit DeFi. It is a malicious act where hackers lure investors to invest their money, then either run off with it or sell off their pre-mined holdings. According to The Chainalysis 2022 Crypto Crime Report:

    The overall revenue from crypto scams rose 82% in 2021 to $7.8 billion, of which $2.8 billion came from rug pulls.

    Over $3 billion were stolen in 2021 due to increased Defi (decentralized finance) thefts.

    Nearly $3.2 billion in cryptocurrency was stolen in 2021.

    Zero Trust Is Getting Embraced

    The zero-trust security model has gained significant traction in recent years, especially after the onset of remote working. This mode prioritizes verifying users and devices before granting access to network resources.

    Gartner predicts that by 2025, 60% of organizations will have implemented Zero Trust as their primary security model.

    IBM says that the share of organizations embracing zero-trust grew from 35% in 2021 to 41% in 2022. And organizations not deploying zero-trust will incur an average of USD 1 million greater breach cost compared to those with the technology deployed.

    80% of respondents in a Statista survey plan to adopt zero trust in the future or have already adopted it.

    Healthcare is starting to embrace zero-trust, with 37% of companies implementing it in 2021 and 58% in 2022.

    Operational Technology Will Need to Be Secured

    With the increased adoption of technology comes the responsibility of safeguarding it. The threats to OT infrastructure not only cause damage to the organization but also hurt human beings and the environment.

    Sectrio’s The IoT and OT CISO Peer Survey 2022 notes that nearly 90% of CIOs reported one major incident in the past year. Most respondents say their operations were halted for over four days, incurring a loss of over $2.5 million.

    3% of organizations find technical integration of legacy and aging OT with modern systems the most challenging, according to The State of ICS/OT Cybersecurity in 2022 and Beyond.

    Conclusion: How to Prepare for the Future

    Cybercrimes are at an all-time high. With threat actors constantly finding new methods to infiltrate and exploit organizations, CIOs globally have to take preventive measures to safeguard their organizations.

    Some of the most common, yet overseen methods, are using complex passwords, regularly updating patches and upgrading software, giving cybersecurity training, using anti-ransomware solutions, and more go a long way in keeping organizations safe.

    Not only this but employing security solutions that fit best for your enterprise is essential.

    To know how Array can help you protect your enterprise from malicious threat actors, reach out to our sales team today.

    Resource : https://www.cxotoday.com/specials/cybersecurity-statistics-and-predictions-for-2023/

    5Jan, 2023
    Cybersecurity trends in 2023 that will directly impact everyday life

    The scale of cyberthreats are growing, spilling into the mainstream. In 2023, expect the spotlight to add pressure to businesses that have underinvested in security.

    There are a few certainties in cybersecurity: ransomware will cause headaches for companies; third parties will spark cyber incidents; and every December, cybersecurity analysts will put together lists of their predictions and trends they believe will have an impact in the coming year. 

    Most of the predictions are designed to help organizations build out their security programs, but every so often a trend will build slowly over time until its impact is clear.

    Sometimes these trends will reach far beyond an individual company and impact society at large. 

    Here are some of the biggest trends Cybersecurity Dive is watching this year. Are there any security patterns you are watching closely? Email us at cybersecurity.dive.editors@industrydive.com.

    The global impact of state-sponsored activities

    State-sponsored threats trend every year, but as we begin 2023, those threats have a different, more menacing, feel to them. The countries responsible for much of the state-sponsored activity — Russia, China and Iran — are embroiled in conflict. 

    “In the past year, we’ve seen [Russia’s] invasion of Ukraine; a worsening of the relationship between China and the West combined with tightening control by Xi Jinping and further pressure on Taiwan; and a growing concern in Iran about dissident activity and pressures on the regime both internally and abroad,” said Mike McLellan, director of intelligence for the Secureworks Counter Threat Unit. 

    All those factors affect state-sponsored threat group tasking and activities and will be reflected in what they do in the coming year.

    “While cybercriminal threats such as ransomware are an ‘equal opportunity’ risk for organizations lacking robust cybersecurity defenses in all sectors, state-sponsored threats can be more targeted,” said McLellan. 

    As political tensions rise in these countries, it is expected that nation-state actors will use that to their advantage to broaden their attacks. 

    China, for example, is often interested in obtaining intellectual property from high-tech targets, and there is concern that other Russian groups will carry out large-scale covert foreign intelligence gathering activities, spurred by concerns about Russia’s general standing in the world.

    Certain sectors or countries have always been at greater risk of state-sponsored attacks, but 2023 may be the year that risk against critical infrastructure sectors, government, and high-tech companies escalates — especially if a nation-state sees outside interference.

    Resource : https://www.cybersecuritydive.com/news/cyber-security-trends/639480/

    30Nov, 2022
    5 cybersecurity predictions for 2023

    The cyber game is now an entire underground economy wrapped around cyberattacks. Thanks to increased international friction and the activity of groups such as Lapsus$, cybercriminals have upped the ante on cybercrime in order to turn a profit. Atakama outlines its top cybersecurity predictions for 2023.

    IoT blends with shadow IT to make a security headache

    With 43 billion devices connected to the internet in 2023, attackers have no shortage of targets. Although IoT devices can provide productive capabilities in commercial environments, risks abound. Manufacturers prioritize convenience and consumer-like appeal over security fundamentals. Unsurprisingly, devices are often deployed with weak or default credentials.

    To make matters worse, IoT has proliferated within shadow IT systems, leaving already-weakly-protected cameras, microphones and sensors well outside the control of organized security platforms. Even within a strong perimeter, a poorly configured IoT device is bad news. Susceptibility increases many fold when the same poorly configured IoT device is within a shadow IT system.

    Rise in sophisticated ransomware attacks put data exfiltration in the spotlight

    The rising prevalence and sophistication of attacks targeting sensitive data will continue to plague organizations into 2023 and beyond. Double extortion attacks, pack an even greater punch by encrypting sensitive and proprietary data, hold it for ransom, and worse, publish the data on the dark web unless organizations cough up the cash. As the Verizon 2022 Data Breach Investigations Report says: “There are now more ways for attackers to monetize data.”

    These attacks will increase as cyber criminals find it relatively easy to breach organizations’ defenses, and cash out.

    In response, organizations will need to look beyond conventional data protection practices toward technologies that protect data at the source, such as multifactor encryption to render files useless to threat-actors who will not be able to access the data, whether it is still inside the security perimeter or successfully exfiltrated.

    DevSecOps goes up a notch

    Securing developer environments will become one of the most critical components to achieving optimal security for organizations in 2023. Count on highly elaborate cyberthreats targeting these complex infrastructures, as seen with the success of the SolarWinds attack, which continues to inspire malicious actors because application development is such a rich target. Inserting a few lines of malicious code can potentially open up thousands of entities in the supply chain of partners and customers.

    Heightened DevSecOps practices in line with zero trust architectures and advanced encryption solutions will become more common as organizations realize these approaches are a critical business necessity.

    People will continue to be the weakest link in cyber teams’ security chain

    Sad to say, people will remain the main source of cybersecurity risk in any organization. Despite all the training, employees are still likely to provide threat actors with an entry point through social engineering, phishing or lapses that include sharing of passwords and log-in credentials. The Verizon 2022 report found the “human element” was a “key driver” in 82 percent of data breaches.

    Insider threats from corrupt employees or individuals bearing a grudge will continue to be a serious concern. Threats from employees at partner organizations and third-party suppliers will require continued vigilance and increased implementation of zero trust strategies.

    More awareness of CISO liabilities

    This year’s Uber data breach conviction will focus many minds on the C-suite that the CISO role is one that carries significant ethical responsibilities.

    Cybersecurity, like many other professions, has a code of ethics that’s expected of its practitioners. Individuals entrusted with the security and privacy of data, must behave ethically.

    We know that the cybersecurity landscape is not always a level playing field and even the most ethical and highly technical cybersecurity teams cannot prevent the most determined attackers.

    2023 may prove to be a more volatile year for CISO’s as they deal with the pressures of maintaining a ridged security posture, while also dodging the bullet of blame when attacks are successful.

    They are likely to rely on degrees in information security disciplines and a wide range of professional certifications such as CISSP. What’s important is for CISOs constantly to update their knowledge because it is not just the threats that will develop, solutions will too, and they need to keep up-to-date.

    Daniel H. Gallancy, CEO of Atakama adds: “Cyberthreats will continue to proliferate in number and grow in sophistication throughout 2023. While basic security practices will prevent many breaches, organizations are going to need more advanced solutions to protect themselves from the devastating consequences of a successful attack.”

    Resource : https://www.helpnetsecurity.com/2022/11/25/top-cybersecurity-predictions-2023/

    22Nov, 2022
    Top Five Cybersecurity Predictions for 2023

    KnowBe4 today announced its 2023 cybersecurity predictions from its team of industry experts.  

    The top five predicted cybersecurity trends for 2023 include:  

    • A shift in focus to creating a security culture within organisations across the globe 
      The need for security awareness training is now clear to most organisations and they are starting to evolve from just training to additional emphasis on behaviour and culture. There has been a positive momentum toward building a strong security culture globally that involves support from executives and the employee base as a whole.  
    • A new social engineering battleground purported by an increase in social media scams
      Social media scams will blossom, putting friends, family, organisations and colleagues at risk. With the ever-growing industry of social media commerce and marketplaces, people will be relying even more on indicators of trust, such as how many connections an account has and how long the account has been active, making them susceptible to scams that use stolen social media accounts to trick individuals and organisations. Also, with official verification now for sale for a small fee on various platforms, scammers are sure to take advantage.  
    • A rise in catastrophic attacks on critical infrastructure
      It is also likely that a major outage will occur due to critical infrastructure being compromised, especially given the ongoingwar in the Ukraine with Russia. This could have the potential to have societal and economic impacts for a large number of people or even an entire nation. With a global recession and rising cost of living, we may also see digital civil disobedience occurring in the form of people attacking their own government sites or national infrastructure as a form of protest. 
    • Dangerous deepfake attacks will become more convincing and damage reputations 
      Deepfakes are a dangerous tool used to build a level of trust, convincing unsuspecting people to accept the words and actions of someone at face value. Organisations do not have a deep level of understanding about the dangers this can present regarding reputation and thus do not yet train their employees enough on the topic.  
    • Larger attack surface introduces new threats with the Metaverse  
      There is an increasing number of threat vectors that are subsequently creating a larger attack surface, making it more difficult to adequately protect organisations worldwide. With the proliferation of the Metaverse, there are more opportunities for cybercriminals to perpetrate attacks.  

    “This list of predictions in cybersecurity trends has been gathered from our global group of experts who have decades of experience in the cybersecurity field,” said Stu Sjouwerman, CEO, KnowBe4.

    “They are at the forefront of what is happening in the industry, constantly following trends and staying up to date on the latest threats, tools and techniques. Many of them noted a fundamental shift in focus for organisations beyond security awareness training alone to striving for a strong security culture that is driven by measurable behavioural change. Also, social engineering will continue to dominate as an overwhelmingly successful method for cybercriminals to execute attacks.” said Sjouwerman.

    Resource : https://australiancybersecuritymagazine.com.au/top-five-cybersecurity-predictions-for-2023/