Have you noticed? Cyber threats are like a disease. They can infect your systems, spread quickly, and cause damages to your business.
Cyber threats are also evolving, just like new virus strains can emerge anytime (remember COVID?!) – so you need to prepare for them.
We present here what to expect with cyber threats this year, alongside the 2024 cyber threats countermeasures. Read on or click on any topic below:
- Ransomware Double Extortion
- Internet of Things (IoT) Devices
- Supply Chain Attacks
- State-Sponsored Attacks (SSA)
- Quantum Computing
1. Ransomware Double Extortion
Ransomware is a form of malware that infects your IT systems and encrypts your data. You will only get your accesses back once you pay a ransom. After you do so, the cyber criminal should release your data but there isn’t any guarantee that things will go back to business as usual.
Ransomwares are not new. The double extortion steps are. The attackers will not only encrypt the victim’s data, they will also steal it and threaten to release it publicly unless you pay another ransom.
On the 2nd of January 2024, the Court Services Victoria (CSV) reported that Victoria’s court system had been hit by ransomware. The attack affected recordings of hearings in County Court cases, the Supreme Court, and the Magistrates Court. “It’s a double extortion approach. They take the data out, and then encrypt it. If you don’t pay, they leak your data, and you will never access it,” noted Robert Potter of Internet 2.0.
How can you prepare for ransomware double extortion?
- Have a strong backup and disaster recovery plan in place so you can restore your data without paying the ransom.
- Keep your computer updated with the latest security patches
- Use strong passwords
- Master email security by avoiding clicking on suspicious links or downloading attachments from unknown sources
- In case you’re victim of a ransomware attack, immediately isolate the affected systems and power them down to prevent further damage. Then, get help from a cyber security solutions provider to chase the bad actors out of your systems and try to recover as much of your data as possible. But remember IT specialists are not magicians, without strong recovery measures in place there isn’t much they can do about that!
2. Internet of Things (IoT) Devices
The Internet of Things (IoT) is the network of devices that can communicate and exchange data online. IoT devices can include smart appliances, sensors, cameras, wearable technology, and more.
Because IoT devices can help with efficiency, productivity, and customer satisfaction, they will become even more prevalent this year. The Australian government estimates 21 billion IoT devices by 2030. However, these can pose a threat to businesses. IoT devices are often not very secure and can be easily hacked, so attackers can use them to gain access to the target’s network.
The most recent available data from Check Point Research showed an average of nearly 60 IoT attacks per week per organisation. The most affected region was Europe, followed by APAC. One of the most affected sectors is Education & Research.
To defend against IoT attacks, organisations should follow these best practices:
- Purchase IoT devices from brands that prioritise security.
- Secure your IoT devices with complex passwords, multi-factor authentication (MFA), encryption, and firewalls.
- Update your IoT devices regularly with the latest software and firmware patches.
- Use separate networks for IT and for IoT.
- Monitor your IoT devices for any suspicious or abnormal activity.
- Educate your staff and customers about the risks and responsibilities of using IoT devices.
- Implement a comprehensive IoT security strategy for your business and a zero-trust policy for connected devices.
3. Supply Chain Attacks
A supply chain attack targets the software, hardware, or services used by an organisation or its suppliers. Attackers will often target the weakest link in the supply chain, which can be a third-party vendor. After gaining access through the supply chain, the attackers will then move laterally to the target’s network.
A memorable supply chain attack happened back in 2021 when cybercrime group, Revil, targeted businesses by exploiting a vulnerability in their Kaseya software platform. The attackers demanded ransoms of up to $7 million. Such attacks will increase this year due to the complexity of global supply chains, the reliance on third-party suppliers and the sophistication of cyber attackers with the widespread use of generative AI tools.
Your business can reinforce its defences against supply chain attacks via these measures:
- Conduct regular risk assessments and audits of your suppliers and partners, verifying their security practices and compliance standards
- Implement robust security controls and policies for your systems and networks, ensuring they are updated and patched regularly*
- Train your staff and stakeholders on how to recognise and report suspicious or malicious activities or communications
- Establish clear communication channels and protocols with your suppliers and partners, so you can verify their identity and authenticity before transacting or sharing any sensitive information
- Develop contingency plans and backup strategies for your supply chain operations, testing them periodically
*Ask your cyber security services Brisbane consultant or cyber security solutions Townsville provider for guidance.
4. State-Sponsored Attacks (SSA)
State-sponsored attacks (SSA) are orchestrated or supported by a government or nation-state. They are often sophisticated and well-funded, targeting specific individuals, organisations, or government entities for political, economic, or espionage purposes. Some examples of such attacks are the hacking of political party conventions, multi-country ransomware attacks, and spying on certain technologies and industries.
SSA pose a serious threat globally as they can cause damage to critical infrastructure, disrupt business operations, steal sensitive data, influence public opinion, and undermine trust. These are expected to increase in 2024, with the spread of AI use and the 2024 elections happening in the United States, India, Russia, the United Kingdom, Taiwan, and Mexico.
Government entities and critical infrastructures must take proactive steps for protection against SSA, such as:
- Implement a robust and tailored cyber security strategy that covers all specific aspects of your network, systems, data, and people
- Monitor your network for any signs of intrusion or compromise, and respond quickly to any incidents
- Collaborate with industry associations, and other government agencies to share information and best practices on SSA prevention and mitigation
5. Quantum Computing
While practical quantum computing could still be a few years away, significant developments will happen in 2024. As quantum computers are able to perform tasks much faster than classical computers, it can be both good and bad for cyber security.
Quantum computing could improve cryptography and create more secure communication channels. But quantum computers can also pose a serious threat to cyber security solutions: They can break some of the current encryption methods that protect data and communications.
Further developments in quantum computing in 2024 could include the following:
- Cyber actors collecting encrypted data now (so they can crack them open when quantum computing allows them to do so)
- Continued investment and research in developing quantum computers by both governments and private companies
- Increased interest in using quantum computers for artificial intelligence, machine learning, optimisation and simulation, cryptography, chemistry, physics, biology, medicine, and finance
To prepare for quantum computing, monitor its developments and trends, and start exploring quantum-resistant encryption methods that would be hard for both classical and quantum computers to solve.
You’re Only As Strong As Your Weakest Link
Considering human error is the leading cause of cyber security incidents, you can start preparing for all these cyber threats by understanding your human risk areas.
ADITS offer a free Human Risk Report to all businesses in Brisbane, Townsville and surrounding areas.
This solution will:
- Scan your domain and employees’ email addresses on the dark web
- Test your staff against a phishing attack
- Give you a security score and the timeframe of your future data breach
- Provide actionable steps you should take to reinforce your infrastructure from the bottom up
Get your free report now: