Looking back at recent cyberattacks that have compromised company data and overall safety, we need to detect these attacks earlier and remediate them faster. While the dwell time between attack and remediation has dropped dramatically in the last 10 years, it is still not quick enough. For instance, the Colonial Pipeline ransomware attack emphasized the importance of improving our security posture for national infrastructure while identifying where organizations fall behind when protecting sensitive information. The SolarWinds and Exchange hacks have also enabled ransomware authors to more easily deploy ransomware, such as DoejoCrypt/DearCry, to vulnerable Exchange servers. This effort will enable the deployment of web shells on infected machines, potentially resulting in dire consequences since it allows attackers to execute arbitrary files on the system.
Recovery from these types of attacks will be difficult and very costly but could be prevented with the right computer network defense (CND) architecture and, more specifically, the proper cyber education and training. These breaches not only require a complete overview of current security measures, but an expanded outlook on how to train future generations of cybersecurity professionals to prevent similar attacks…
To read the original article please follow the link below…
