# data[].attributes.body
Group - 03 (Triple Threats)

1. Colin Earle

2. Elishia Sanche

3. Brian Ervin

4. Atithi Maharaj

5. Chukwu Mary

6. Maria Azhagiri

7. Devesh Kumar

8. Navoda Thilina

# data[].attributes.body
CONTENT

Introduction(What is Cyber security) - @Devesh

Types of Cyber crime - @ Navoda

Safety tips to Cyber crime - @Navoda

Major attack  @Atithi

Types of Security tools - @Colin

Advantage of Cybersecurity - @Mary

Security and Privacy - @Maria

Save the Endangered Canadian House Hippo @ Elishia

# data[].attributes.body
1)Impact: It affected over 200,000 computers across 150 countries, including hospitals, banks, telecommunications companies, and government agencies, causing widespread disruption.

2)Propagation:  It spread rapidly through a worm-like mechanism, exploiting a vulnerability in the Windows operating system called EternalBlue, which the NSA allegedly developed.

3)Targets: It primarily targeted computers running the Microsoft Windows operating system that were not updated with the latest security patches.

4)Encryption: WannaCry encrypted files on infected computers and demanded ransom payments in Bitcoin cryptocurrency to decrypt the files.

# data[].attributes.body
1)NotPetya Ransomware Attack (2017)

2)SolarWinds Supply Chain Attack (2020)

3)JBS Ransomware Attack (2021)

4)Colonial Pipeline Ransomware Attack (2021)

# data[].attributes.body
https://en.wikipedia.org/wiki/NIST_Cybersecurity_Framework https://en.wikipedia.org/wiki/Information_security#Key_concepts

# data[].attributes.body
Security in small-scale industries is paramount, especially in the realm of cybersecurity where vulnerabilities can lead to devastating consequences. Here are some key considerations and practices to enhance cybersecurity in small-scale industries:

# data[].attributes.body
1. Risk Assessment: Understand the specific risks your industry faces. Assess the types of data you handle, potential threats, and the consequences of security breaches.

2. Awareness Training: Educate employees about cybersecurity best practices, such as recognizing phishing emails, creating strong passwords, and being cautious with company data.

3. Access Control: Implement strict access controls to limit who can access sensitive information. Use role-based access control (RBAC) to ensure employees only have access to the data they need to perform their jobs.

4. Regular Updates and Patch Management: Keep all software and systems up to date with the latest security patches. Many cyber attacks exploit known vulnerabilities that could have been prevented with timely updates.

5. Firewalls and Antivirus Software: Install firewalls to monitor and control incoming and outgoing network traffic. Deploy antivirus software to detect and remove malware from your systems.

6. Data Encryption: Encrypt sensitive data both in transit and at rest to prevent unauthorized access, even if the data is intercepted or stolen.

7. Backup and Recovery: Regularly back up your data and systems to minimize the impact of a ransomware attack or other data loss event. Test your backups regularly to ensure they can be restored successfully.

8. Incident Response Plan: Develop a comprehensive incident response plan outlining the steps to take in the event of a cybersecurity incident. This should include procedures for containing the incident, mitigating the damage, and restoring normal operations.

9. Vendor Risk Management: If you use third-party vendors or cloud services, ensure they have robust security measures in place. Evaluate their security practices and include contractual obligations for security standards.

10. Continuous Monitoring and Auditing: Implement systems for continuous monitoring of network activity and regular auditing of security controls. This helps detect and respond to security incidents in real-time.

11. Employee Offboarding Procedures: Have clear procedures in place for revoking access to systems and data when employees leave the company or change roles.

12. Regulatory Compliance: Ensure compliance with relevant regulations and standards such as GDPR, HIPAA, or PCI DSS, depending on the nature of your business and the data you handle.

13. Cyber Insurance: Consider investing in cyber insurance to help mitigate the financial impact of a security breach.

14. Board and Executive Involvement: Ensure that cybersecurity is a priority at the highest levels of your organization. Board members and executives should be informed about cybersecurity risks and actively involved in decision-making related to security investments and strategies.

# data[].attributes.body
Pig-butchering is a rapidly growing catfish scam, so named for its elaborate setup and gradual execution.

Roughly $3 billion a year industry in the US alone since 2022. This is a rough estimate because it’s based on what has been reported to the FBI

Starts off with a random text, or a direct message on social media. like LinkedIn, instagram or Tinder

Moves into a seemingly harmless casual conversation with a nice stranger

Social media gives them your background information, and personal details so they can really connect with you.

The person you're talking to does not ask for your help or money directly.

Instead an opportunity arises. Money comes up naturally in the conversation; just a personal story of how much money the person is making on trading crypto currency.

One victim reported he met a man on a dating site, it was after more than a month of daily communication, before the “friend suggested he try it out.

Direct the target to a real or simulated crypto trading platfrom, they appear in the app stores, have positive verified reviews. 2Fa and customer service lines set up.

Some organizations generate their own images for the fake profiles, so they can’t be reverse image searched.

They give their employees detailed training manuals about connecting with the target, building trust, and breaking down peoples defenses.

After a couple months of their “investment” growing, when they try to cash out, that's when the victim find out that money was already gone.

# data[].attributes.attachment_link.title
10 Must-Know Cybersecurity Tips for Small Business Owners

# data[].attributes.body
Countless victims

Organized crime groups in China, started turning those casinos into bases for online scam operations and started these elaborate scams, targeting people online and trapping them into doing the scamming posing as a different user.

Workers baited with a thorough application process for a job in another country, as an IT professional, translator, or other skilled position. Then find their trapped after they arrive.

In 2023, a report by the United Nations estimated that hundreds of thousands of people have been victims of trafficking and trapped by gang members in this industry.

# data[].attributes.body
CyberTalents. (n.d.). What is cyber crime? types, examples, and prevention. CyberTalents Blog. https://cybertalents.com/blog/what-is-cyber-crime-types-examples-and-prevention

# data[].attributes.body
Maria Azhagiri

teachprivacy.com

https://teachprivacy.com/cartoon-privacy-and-new-technology/

Youtube - Security for small business owners

https://www.youtube.com/watch?v=qcHDF3mZu48&t=14s

# data[].attributes.attachment_link.readable_text
Cyber attacks have become increasingly common, targeting businesses, governments, and individuals alike. According to a report by Cyber Security Ventures, global cybercrime damages could reach a staggering $10.5 trillion annually by 2025, emphasizing the importance of cybersecurity. Through this blog, let's delve into what cyber security entails, its various types, key principles, and the advantages and disadvantages that come with it.

What is Cyber Security?

Cyber security involves safeguarding computer systems, networks, and data from theft, damage, or unauthorized access. It includes a range of measures like firewalls, antivirus software, and encryption techniques to defend against cyber threats. The primary goal is to maintain the integrity, confidentiality, and availability of information while reducing the risks associated with different types of cyber attacks.

Ethical hacking and Cyber security work hand-in-hand to protect and secure digital assets. Cyber security provides the necessary measures and strategies to protect computer systems, networks, and data, while ethical hacking aids in enhancing security by discovering overall weaknesses and vulnerabilities in the system. The main objective of ethical hacking is to improve the overall security of a system by finding vulnerabilities before they are exploited by malicious hackers. Organizations need both to maintain a robust defense against ever-evolving cybersecurity threats.

To learn more about Ethical hacking and how it works in identifying and covering loopholes, check out an ethical hacking course.

Advantages of Cyber Security

With the groundbreaking role of cyber security, its benefits are numerous, here are some of the advantages of cyber security.

1. Protection of Sensitive Data

Cyber security actions shield sensitive data from unsanctioned access, aiding in maintaining privacy and averting identity theft. It utilizes data loss prevention (DLP) techniques along with access control methods, firewalls, and web servers to ensure the protection of data against hackers.

2. Business Continuity

Cyber attacks can lead to technological issues, such as computer crashes and freezing screens. This can halt or delay business operations. By preventing cyber attacks, organizations can ensure the availability of their systems and services, minimizing downtime and potential losses.

3. Compliance with Regulations

Cyber security compliance is a risk management system that comprises predefined security measures and controls data confidentiality. It ensures that devices, systems, and networks follow regulatory compliance requirements. Therefore, adhering to cyber security standards and regulations can protect businesses from legal issues and potential fines.

4. Enhanced Customer Trust

Implementing strong cyber security measures help organizations build trust with their customers, partners, and stakeholders. These measures foster transparency and significantly reduce the risk of data breaches. This assures different stakeholders of the safety of their data.

5. Competitive Benefit

Companies with robust cyber security measures in place are less vulnerable to cyber-attacks and can gain a competitive edge over competitors who may not prioritize security. Publicly showcasing the implementation of cyber security measures can help a company distinguish itself as a much more secure option compared to the competitors. This can influence the customers to prefer companies with robust cyber security efforts. Also, implementing these measures allows companies to focus on their core business activities while their digital assets are protected.

6. Early Detection and Response

Proactive cyber security measures can help organizations detect threats early and respond effectively, minimizing potential damage and disruption. Threat detection activities include monitoring networks, applications, endpoints, user activity, and data to analyze traffic patterns, system logs, access attempts, and distrustful files. These activities highlight suspicious patterns, leading to early threat detection and response accordingly. Some common responses include disabling affected accounts, blocking IP addresses, and isolating infecting endpoints.

7. Intellectual Property Protection

Robust cyber security helps protect intellectual property (IP), such as patents, trade secrets, and copyrighted material, ensuring the organization's competitive advantage is maintained.

8. Reputation Protection

A strong cyber security posture helps organizations avoid reputational damage caused by data breaches and other cyber incidents, which can lead to loss of customer trust and decreased business opportunities. Organizations use cloud and network security to strengthen their security system and avoid any unexpected attacks. With data protected and safe from breaches, businesses can maintain their reputation as trusted entities and easily focus on future ventures and expansions.

9. Enhanced Collaboration

Secure communication platforms and tools enable teams to collaborate effectively and share sensitive information without worrying about unauthorized access or data leaks.

10. Remote Work Security

As remote work becomes increasingly common, cyber security measures ensure the secure access and use of organizational resources, maintaining productivity while reducing risks associated with remote work environments. Implementing strong security protocols and technologies for remote access and training the employees to identify risks are common practices for ensuring remote work security.

11. Improved Cyber Posture

Cybersecurity posture refers to the overall cyber security strength of an organization. It showcases the security of an IT network or system and practices in place to tackle a cyber threat. Implementing necessary cybersecurity measures ensures an improved cyber posture of an organization where all the systems are tracked with a single click.

12. Removing Unwanted Programs

Cyber security detects vulnerabilities in files, systems, applications, and networks, and deletes them to remove the threat, ensuring it does not infect the entire system. It protects the system from common threats like viruses, spyware, and malware.

13. Denying Unwanted Access

Cyber security denies unwanted access to protect an organization's network or system from cyber threats. Further, the system is notified about the threats to build a better defense mechanism.

14. Helps Educate the Workforce

Organizations train their employees with basic cyber security practices from time to time to add a layer of security to the business operations. The workforce is educated about common threats, such as phishing, ransomware, spyware, and more, so they can take the right course of action.

15. Easy Data Recovery

Data backup is an essential part of cyber security initiatives. It ensures critical information is secured from cyber threats. A reliable backup system enables organizations to quickly restore data. This reduces the downtime and maintains continuity in operations.

Disadvantages of CyberSecurity

Despite the numerous advantages of cyber security, there are also some disadvantages as well they include:

1. High Cost of Implementation

Implementing advanced cyber security measures can be expensive, particularly for small businesses with limited resources. This includes the cost of hardware and software, and hiring skilled professionals to maintain and manage the security infrastructure.

2. Complex Management

As cyber threats continue to evolve, managing the various components of cyber security becomes increasingly complex. This can be particularly challenging for businesses with limited technical expertise.

3. Potential False Sense of Security

Implementing cyber security measures may sometimes lead to a false sense of security, causing organizations to overlook other aspects of risk management, such as employee training and physical security.

4. Compatibility Issues

Cyber security tools and solutions may not always be compatible with existing systems and software, leading to integration challenges and potential security gaps.

5. Inconvenience to Users

Strict security protocols, such as multi-factor authentication and frequent password changes, can sometimes lead to inconvenience and reduced productivity among users.

6. Evolving Threat Landscape

Cyber threats are constantly evolving, making it difficult to keep up with the latest security measures and tools. Organizations must continually invest in research and development to stay ahead of potential attacks.

7. Human Error

Despite the best security measures in place, human error remains a significant risk factor. Users may inadvertently compromise systems through poor password practices, social engineering, or other mistakes.

8. Limited Effectiveness Against Insider Threats

Cyber security measures may not always be effective against malicious insiders who have legitimate access to systems and data, making it challenging to detect and prevent insider attacks.

9. Difficulties in Measuring ROI

Measuring the return on investment (ROI) in cyber security can be challenging, as it is often difficult to quantify the value of prevention or the impact of a successful cyber attack.

10. Balancing Security and Usability

Implementing stringent cyber security measures can sometimes hinder user experience and productivity, making it challenging for organizations to find the right balance between security and usability.
Also Read: Phishing in Cyber Security
Types of Cyber Security

As cyber security has become an indispensable part of our daily lives, it's essential to understand its different aspects and how they benefit us. Let's take a brief look at the various types of cybersecurity.

Network Security: This focuses on shielding network infrastructure from unauthorized access, misuse, and data modification.

Application Security:It involves securing software applications from threats that could exploit vulnerabilities during the development or deployment phase.

Cloud Security: It safeguards data and applications stored in the cloud against unauthorized access, data breaches, and other potential threats.

Information Security: This ensures the confidentiality, integrity, and availability of data, both in transit and at rest, through encryption, access controls, and monitoring.

Endpoint Security:It protects devices, such as laptops, smartphones, and tablets, from malicious attacks or unauthorized access.

Mobile Security: It focuses on securing mobile devices, applications, and data from cyber threats.

Identity and Access Management (IAM): It manages and controls user access to resources within an organization to minimize the risk of unauthorized access or misuse of information.

Internet of Things (IoT) Security: It safeguards connected devices and networks within the IoT from potential cyber-attacks.

Data Security: It ensures the integrity, confidentiality, and availability of data by implementing security measures, such as encryption and access control.

Operational Security (OpSec): It focuses on the protection of sensitive information that could be exploited by adversaries through policies, procedures, and security measures.

Also, explore Honeypots in cybersecurity.

Key Principles of Cyber Security

In today's world, the realm of cyber security plays a pivotal role in safeguarding our digital assets. Here are the key principles of cyber security.

Risk Management: Recognizing, evaluating, and organizing hazards in order to apply suitable steps that decrease their possible consequences.

Network Security: Employing safety precautions like firewalls and systems for detecting intrusions to defend the network structure.

Malware Prevention: Utilizing antivirus programs and additional tools to discover, stop, and get rid of harmful software.

Secure Configuration: Making certain that systems, applications, and devices have secure configurations to reduce susceptibility.

Security Beyond Firewall: Introducing more protective layers, such as encryption and two-factor authentication, for added protection of sensitive data.

User Education and Awareness: Offering education and resources to assist users in comprehending online dangers and adopting secure internet habits.

Conclusion

Cyber security is crucial in today's digital world to protect valuable information and infrastructure. Despite its challenges, organizations must prioritize it to minimize risks and safeguard assets. By integrating essential principles, they can navigate the digital landscape and mitigate potential threats which is why it is important to understand the advantages and disadvantages of cyber security.

Do you think the introduction of technologies like artificial intelligence have had an impact on cybersecurity practices? Share your thoughts in the comments section below. Also, learn more about information security in an organization with CIA cyber security.

FAQs

# data[].attributes.attachment_link.title
10 Advantages And Disadvantages of Cyber Security

# data[].attributes.attachment_link.description
Explore the advantages and disadvantages of cyber security, its types, key principles, and its role in protecting digital assets & infrastructure.