Remy de Ruysscher - CISSP.

An old cyber attack from 2018, remains a valuable lesson learned and a continued weakness found in cyber risk assessments today. Wi-Fi focused cyber attacks are low-hanging fruit and due to the lack of diligence in setting up Wi-Fi correctly and managing the weaknesses and vulnerabilities continue to be one of the top threat vectors found when assessing small and medium-sized businesses. This type of vulnerability was one of the top ones my team found when we operated the defense industrial base cyber resilience and CMMC readiness compliance program funded by one a Pentagon headquartered office. At the time it was the only program that helped the DIB take action toward cyber resilience and compliance. From the article: Close or "drive-by" attacks on wi-fi networks are well known in the cyber-security world. They are an established technique for penetrating a target.  They work well because some wi-fi hotspots can harbour hardware weaknesses that can be exploited to grab traffic. Some run third-party software that can contain vulnerabilities. There have also been instances of hotspot makers picking passcodes that are easy to generate. And researchers have demonstrated fundamental weaknesses in the protocols used to create hardened passcodes.  Then there are the issues with the way wi-fi works, which make it possible to force gadgets that use wireless to hop onto fake, copycat networks. All of this would be well known to the average nation-state-backed hacker. In July there will be a cybersecurity executive briefing at the Alan B. Levan | NSU Broward Center of Innovation that I will be contributing to and my belief from experience is that the ability to gain support for and increase cyber resilience, especially in the small and medium sized business and especially the small defense industrial base is to showcase examples that the business owners, board and executives can relate to. Case studies they can visualize and relate to their businesses. Do they want to learn any of the NIST cybersecurity frameworks? My experience says not. Show them how a business similar to or related to their business has been impacted by weaknesses in cybersecurity controls, and then they pay attention. #cyber Maverc Technologies Alan B. Levan | NSU Broward Center of Innovation https://lnkd.in/ev_7B2bV

11

2 commentaren

Do you have a cyber incident that you must report according to the NIS2 rules? ⚠ You can now obtain a special incident form on our website! (also in Dutch/French) ➡ https://lnkd.in/eQA5RfSb ⬅ This form is designed to help you comply with reporting requirements quickly and accurately. 🔝 This way you ensure that your organization complies with legislation and remains protected against possible risks. Go to our website to request the form and be prepared! 👍 #nis2 #networksecurity #informationsecurity #nis #ciso #cybersecurity

3

Interesting visualization of the size of #cybercrime during a presentation of Mostyn Thomas NCSC CCP during the CompTIA Community meeting in the Benelux today. Cybercrime is the third biggest economy in the world, after the USA and China. And it's growing at a 'healthy' clip of 15 percent per year. As far as I'm concerned, this is an indication that organizations shouldn't skimp on security budgets, even though it may be tempting to invest in other things first. For the security industry, it's an indication that it needs to do better. Because it's still way too attractive to be a cybercriminal. #CompTIA

8