# data[].attributes.body
Mitnick, Kevin D., and William L. Simon. The Art of Intrusion: The Real Stories Behind the Exploits of Hackers, Intrudes and Deceivers. Wiley Publishing, Inc, 2006.

# data[].attributes.body
We are the greatest threat to cyber security. Our innovation and human thinking make our networks more sensitive and vulnerable.

# data[].attributes.body
Gerstein, Daniel M. “Better Anticipating and Managing Today’s Growing Cyber Risks.” The Cyber Defense Review, vol. 7, no. 4, 2022, pp. 15–30. JSTOR

# data[].attributes.body
There are several occurrences where the manipulation of people compromises cybersecurity (McConnell)(Rhysider). Research suggests our innovation and progression creates a sensitive network infrastructure (Gerstain)(Laudrain). Most hacks use open-source tools and resources in hands of skilled people, they are the ones who innovate to find vulnerabilities (Mitnick).

# data[].attributes.attachment_link.title
Better Anticipating and Managing Today's Growing Cyber Risks on JSTOR

# data[].attributes.attachment_link.description
Daniel M. Gerstein, Better Anticipating and Managing Today's Growing Cyber Risks, The Cyber Defense Review, Vol. 7, No. 4 (FALL 2022), pp. 15-30

# data[].attributes.body
Therefore, based on previous events and government-supported works, it is us who truly jeopardize cybersecurity.

# data[].attributes.body
As time goes on our technology becomes more advanced and more complex. Our Technology is evolving exponentially and that poses a massive risk to our security. So cybersecurity needs to be taken more seriously and advance just as quickly.

# data[].attributes.headline
Reasoning why you are/are not using this source

# data[].attributes.subject
Reasoning why you are/are not using this source

# data[].attributes.body
I'm using this source, Gerstein qualifies well as a national security and technology professional with a Ph.D. The article details our rapid progression in technology, thus causing cybersecurity to become more sensitive.

# data[].attributes.body
Real stories of hackers. The stories shared are the results of modern ingenuity, intellect, and curiosity. We learn the general vulnerabilities that are exploited to understand how important our security is.

# data[].attributes.headline
Reasoning why you are/are not using this source

# data[].attributes.subject
Reasoning why you are/are not using this source

# data[].attributes.body
I'm using this source. Stories told are based on real events and the author Kevin Mitnick is a well-known hacker who was on the top of the FBI's most wanted list. The book provides insight and timeless general knowledge for security.

# data[].attributes.body
Laudrain, Arthur, et al. “Cyber Policy and Resilience.” Annual Report 2022, Hague Centre for Strategic Studies, 2022, pp. 59–63. JSTOR

# data[].attributes.body
http://www.jstor.org/stable/resrep46997.10

# data[].attributes.attachment_link.title
Cyber Policy and Resilience from Annual Report 2022 on JSTOR

# data[].attributes.attachment_link.description
JSTOR is a digital library of academic journals, books, and primary sources.

# data[].attributes.body
At this point in modern technology, our data is more confidential than ever. There are new policies to implement to protect our data. These policies encourage habits to defend against human thinking exploitation.

# data[].attributes.headline
Reasoning why you are/are not using this source

# data[].attributes.subject
Reasoning why you are/are not using this source

# data[].attributes.body
Arthur Laudrain is a research student from the Centre for Doctoral Training in Cybersecurity, he has several government-supported cybersecurity publications. The article details new defensive measures for national cybersecurity, in which they discuss the problems of human error and innovation.

# data[].attributes.body
Rhysider, Jack, and Jayson E. Street "THE BEIRUT BANK JOB." Darknet Diaries, 15 November 2017

# data[].attributes.body
https://darknetdiaries.com/episode/6/

# data[].attributes.attachment_link.description
Jayson E. Street tells us a story about the time he broke into a bank in Beirut Lebanon.

# data[].attributes.body
Jayson was hired by a bank to do penetration tests, and by using social networking, he was able to infect every computer in the bank. However, he shortly realized that he went to the wrong bank. Jason was not charged, as it was a big misunderstanding.

# data[].attributes.body
McConnell, Holt. “What Is the Biggest Threat to Information Security?” Mainstream Technologies, 17 Nov. 2022

# data[].attributes.body
https://www.mainstream-tech.com/what-is-the-biggest-threat-to-security/#:~:text=When%20we%20think%20of%20cybersecurity,but%20from%20our%20own%20employees.

# data[].attributes.attachment_link.readable_text
When we think of cybersecurity risks, often the first thing that pops into our heads is the threats we face from hackers. However, based on a survey from the Ponemon Institute the reality is that the most significant threat to information security isn't from hackers, but from our own employees.

Our employees are our biggest cybersecurity risk

According to their report, "The biggest problem identified in this year's research is the negligent or careless employee with multiple mobile devices using commercial cloud apps and working outside the office."[2]

Negligent employees pose an even bigger risk to our data security than external threats. Most of the data breaches identified in this survey were "internal and unintentionally caused by employees who were negligent, careless, or ignored security policies."

"While external attackers and their evolving methods pose a great threat to companies, the dangers associated with the insider threat can be equally destructive and insidious," said Larry Ponemon, chairman of the research firm, in a recent interview. "Eight years of research on data breach costs has shown employee behavior to be one of the most pressing issues facing organizations today, up 22% since the first survey."[3]

Organizations should consider an effective workforce education strategy to equip their staff to become human firewalls.

Endpoint security threats

The biggest threats to endpoint security identified in the survey were:

Negligent or careless employees who do not follow security policies - 78%

Personal devices connected to the network (BYOD) - 68%

Employees' use of commercial cloud applications in the workplace - 66%

Other findings in the survey that are of interest:

The number of employees and others using multiple mobile devices in the workplace has increased - 65%

The number of insecure mobile devices used in the workplace has increased significantly - 45%

Malware infections are more stealthy and difficult to detect - 45%

More employees are working offsite and using insecure WiFi connections - 38%

Unfortunately, an information security team can't simply install an appliance to solve this behavior. However, they can educate staff with solutions like KnowBe4 to raise awareness of security policies and the associated risks if they're ignored.

Preventing an employee-caused data breach can be incredibly difficult. But there are several ways to get a better handle on the issue:

Raise Awareness

Routine reminders and training can go a long way to assure that everyone understands that information security is everybody's responsibility. Make sure everyone is familiar with the basics.

What are the established security policies, and that

Removable storage devices (USBs, disks, etc.) are easily lost or stolen.

Emails containing sensitive data should be encrypted so if they're sent to the wrong person they remain protected, and

Third-party file-sharing and storage websites (Dropbox, Google Drive, etc.) are not secure.

Assess the risk

Identifying data storage and distribution practices is the first step to uncovering any vulnerabilities that could exist.

Have there been any breaches in the past? If so, what were the causes?

How confidential files are typically transferred and stored?

What are the common practices for accessing mobile information?

Many organizations are required to audit and report on their data security initiatives to remain compliant. As security tools mature there is the opportunity to implement routine security health checks on people, processes, and technologies.

Secure and manage data in motion

Data that is being transferred is at risk of being lost, stolen, or otherwise compromised from internal breaches and human error. The security team must implement systems that can effectively secure and manage data in motion. Transparency is important. Visibility into what was sent, how it was sent, to whom it was sent, and who accessed it is imperative.[4]

Data security will always be a priority. Whether the risk is internal or external, diligence is required. If you would like to find out how Mainstream can equip your employees to protect your information, please click here.

ABOUT MAINSTREAM

Mainstream Technologies is a Little Rock, AR IT firm with offices in Conway and Bentonville, AR. Mainstream creates, manages, and secures technology for clients in both the private and public sectors across the country. We offer software development services, managed IT services, data center services, and cybersecurity solutions,

[2] http://www.ponemon.org

[3] http://www.darkreading.com

[4] http://www.darkreading.com

# data[].attributes.attachment_link.title
What Is The Biggest Threat To Information Security?

# data[].attributes.attachment_link.description
When we think of cybersecurity risks, often the first thing that pops into our heads is the threats we face from hackers. However, based on a survey from the Ponemon Institute the reality is that the most significant threat to information security isn't from hackers, but from our own employees.

# data[].attributes.body
A list of how end users can compromise a network in a business setting. Then some recommendations on how to improve your security.

# data[].attributes.headline
Reasoning why you are/are not using this source

# data[].attributes.subject
Reasoning why you are/are not using this source

# data[].attributes.body
The article directly supports how the users are the biggest threat to cyber security. Holt McConnell has made several other articles on cyber security.

# data[].attributes.headline
Reasoning why you are/are not using this source

# data[].attributes.subject
Reasoning why you are/are not using this source

# data[].attributes.body
Jayson is a professional hacker that has years of experience. His use of social engineering aligns with exploiting human thinking. The site also has documented proof that this event did happen.

# data[].attributes.body
https://www.forbes.com/advisor/business/common-cyber-security-threats/

# data[].attributes.attachment_link.readable_text
Cyber threats are notorious amongst billion-dollar companies, but they're not alone. Small- and medium-sized businesses (SMBs) are also victims of the most common cyber threats-and in some cases, more commonly as SMBs tend to be more vulnerable with fewer security measures in place. In fact, last year, 1-in-5 breach victims were SMBs-with a medium-cost of losses at $21,659, according to the 2021 Verizon Data Breach Investigations Report.

While attacks may seemingly happen overnight, the majority take days, if not weeks or even months to be discovered. In return, highlighting one of the biggest challenges small businesses face when it comes to cybersecurity: awareness and available resources to defend against the threat actors. In order to overcome these challenges, the key is to know what you're up against so we put together the top cyberthreats SMBs face.

In addition to good security practices and training to keep your data safe, it can be worth employing the assistance of third-party software and tools to added protection. For example, it's advisable to use one of the top antivirus providers to help further safeguard your site and monitor for potential threats, as well as a VPN to keep your web activity private.

The Top Four Cyberthreats Facing SMBs

1. Ransomware

Ransomware can come in many shapes and sizes, but it all functions with the same basic concept: You must pay a ransom in order to gain access to your data. Oftentimes, attackers follow with a second ransom in order to keep stolen data from being sold online.

If you've been following cybersecurity news, then you've probably heard of one of the many high-profile ransomware attacks. The Colonial Pipeline attack was the most recent example of this, with a nearly $5 million ransom being paid in order to regain access to files and data. Similarly, the city of Baltimore was hit by ransomware in 2019, forcing the city to stop processing all payments in and out.

Ransomware is typically the final step in the cyberattack process. It is the payload that is deployed after an attacker gains access to the victim's network. The first step into a network typically involves some sort of phishing, social engineering or web application attack. As soon as they have a foothold in the network, they can start to deploy ransomware to all the endpoints they can reach.
How To Protect Yourself
While there is no one-size-fits-all approach to ransomware prevention, a strong defense against this attack is to prevent that initial breach. Research shows that small businesses received 94% of their detected malware by email. Educating your workforce about these attacks and how to identify them is vital to preventing financial loss and downtime due to ransomware.

Ransomware prevention is a difficult task, and usually involves a combination of several mitigation techniques. Unless the attacker is feeling particularly virtuous that day, not much can be done to prevent a ransomware attack after the network is compromised. However, there are several strategies that can limit the damage of a ransomware attack.

Network segmentation, frequent backups and a strong incident response process can limit the number of systems affected by a ransomware attack. This can be the difference between paying a hefty ransom and simply restoring the few encrypted systems from backups.

Network segmentation is the practice of separating the branches of your organization's network, typically through the use of firewall rules. For instance, many organizations disallow the printers on their network from initiating traffic with workstations and servers. This prevents an attacker from taking hold of your entire network if a single device is compromised.

Backing up your data and maintaining a strong incident response policy are always good ideas, regardless of the context. When it comes to ransomware mitigation, keeping good backups in a safe location can be the difference between paying a ransom of thousands of dollars and quickly identifying a breach and restoring your data after a brief period of downtime.

2. Misconfigurations and Unpatched Systems

Security misconfigurations arise when security settings are not defined and implemented, or when default values are maintained. Usually, this means the configuration settings do not comply with the industry security standards such as CIS Benchmarks or OWASP Top 10. Misconfigurations are often seen as an easy target, as they can be easy for attackers to detect.

Misconfigurations can be much more than an accidental firewall rule. Some of the most common misconfigurations are unpatched systems, broken access control, sensitive data exposure and vulnerable and outdated components. Attackers can purchase tools from deep web marketplaces to scan for these vulnerabilities, much like a penetration testing contractor could do for your organization.
How To Protect Yourself
Addressing misconfigurations requires a multifaceted approach across your entire security stack. Patch management is a great first step to clean up the "low-hanging fruit" that these automated attacks look for. Many automated tools can scan for outdated applications and missing patches, making remediation more efficient.

Proper cybersecurity training for your technical staff is also a great way to minimize the chance of a misconfiguration sticking around too long. A well-educated technical team will obviously be less likely to make mistakes, but will continue to make better, more experienced decisions about the organization's security posture.

3. Credential Stuffing

Credential stuffing happens when an attacker uses stolen credentials from one organization to access user accounts at another organization. These credentials are typically obtained in a breach or purchased off of the dark web. You may have seen news stories about Disney Plus accounts getting hacked, yet Disney found no evidence of forced entry. This is because credential stuffing simply involves logging into a victim's account with their own username and password.

Unfortunately, due to the ease of execution, this type of attack is becoming increasingly common. With the rise of dark web marketplaces in the last decade, cybercriminals are able to simply place an order for a dataset of valid usernames and passwords just like you'd order a new book on Amazon.

Once they obtain a list of usernames and passwords, hackers can recruit an automated network of bots to attempt to log in to services such as Microsoft 365, Google, AWS or anything else. If they find a credential set that works, they've successfully gained access to that account with little to no trace.

The success of these attacks relies on personal password reuse by an organization's employees. A 2019 Google survey found that 65% of people reuse passwords on multiple accounts, if not all of them. This only perpetuates the likelihood of a credential stuffing attack.
How To Protect Yourself
The good news is that this type of attack is preventable if you implement multi-factor authentication and limit password reuse. With multi-factor authentication, the attacker must also have access to the victim's phone in order to access the account-even if they log in with valid credentials. Likewise, limiting password reuse will nip a credential stuffing attack right in the bud. This introduces more passwords to keep track of, but will eliminate the threat to your vital systems when a popular streaming service suffers a credential breach.

Implementing a security policy that requires the use of a password manager is key to keeping track of all these passwords. Password managers work by storing your passwords in an encrypted vault secured with a "master password"-giving you just one important password to remember. They eliminate the need to remember several strong passwords, which allows you to use a unique strong password for every account.

4. Social Engineering

Social engineering isn't the breach of a system, but rather the compromise of a person, which causes them to unknowingly release confidential information. This most commonly takes the form of an email phishing attack in which the individual is tricked into downloading malware or giving up their credentials. Typically, social engineering is the first step in a multistep cyberattack.

What's more concerning is that over 70% of social engineering and phishing incidents are discovered by external parties. This means that when employees are falling for the bait, they usually don't realize they've been hooked. On top of that, attackers are constantly coming up with new ways to evade automated security tools.
How To Protect Yourself
Social engineering comes in many variations, which makes it a challenge to prepare your organization for everything that gets thrown at it. Luckily, the best way to prevent a social engineering attack is with a strong cybersecurity awareness training program. Engaging and educational security content will not only prepare your employees for what they'll see, but it can shift the culture of your organization to a security-first mindset.

Bottom Line

There is no singular approach to minimizing the human risks that lead to breaches. Employees will need to browse the web, open emails and even answer the phone with a healthy amount of suspicion. An organization with a strong cybersecurity culture is an organization with a small social engineering attack surface.

With 60% of small businesses closing within six months of a cyberattack, improving your security posture isn't just logical, it's vital to the survival of the organization. Maintaining up-to-date backups, regularly updating software and adequately training your employees can make the difference between business as usual and closing up shop.

For more information about keeping your organization secure, the U.S. Cybersecurity & Infrastructure Security Agency maintains a collection of resources for SMBs.

# data[].attributes.attachment_link.title
Most Common Cyber Security Threats In 2023

# data[].attributes.attachment_link.description
Cyber threats are notorious amongst billion-dollar companies, but they're not alone. Small- and medium-sized businesses (SMBs) are also victims of the most common cyber threats-and in some cases, more commonly as SMBs tend to be more vulnerable with fewer security measures in place. In fact, last ye

# data[].attributes.body
The article's focus is too broad for my research. While the author Jack Koziol is qualified as the founder of a security awareness and anti-phishing training provider. The editors are not qualified and have little to no experience.

# data[].attributes.body
https://www.embroker.com/blog/top-10-cybersecurity-threats-2022/

# data[].attributes.attachment_link.authors[].name
Embroker Team December 7, 2022 9 min read Top 10 Cybersecurity Threats in 2022
Blog Risk Management

# data[].attributes.attachment_link.title
Top 10 Cybersecurity Threats in 2022 | Embroker

# data[].attributes.attachment_link.description
Are you prepared for all that 2022 will bring in the world of cybercrime? Here are the top 10 cybersecurity threats you can expect in the coming year.

# data[].attributes.body
This article didn't provide as much information as needed. The article lacks the focus points for my research.