Cyber security is one of the most debated topics today. In 2017, for example, a report pointed out that the number of registered cyber incidents had jumped from 82,000 in 2016 to 159,700 in 2017.
However, since most managers do not report all the threats suffered by their organization, the authors of the report estimate that the actual number of incidents exceeds 350,000.
The previous number may not seem so significant if we consider all companies worldwide. However, still according to the same report, for 22% of small and medium-sized enterprises, a cyberattack represents the end of their commercial activities.
In other words, discussing cyber security is essential for companies. The good news is that simple measures could have prevented 90% of IT security incidents, according to the mentioned guide. The bad news is that organizations usually build their governance strategy and security policy as a formality or corporate requirement. Yet, on a daily basis, they adopt few effective practices to prevent threats.
Want to know the main forms of attacks and how to adopt good cyber security practices? Then keep reading!
How to apply cyber security measures against the main cyber attacks?
Malware
Current malware aims to steal data processing power and benefit from the corporate IT infrastructure to execute cryptocurrency mining. According to a survey conducted in 2017, there was a 92% percentage increase in the versions or creations of malware circulating on the internet. In addition, miner detection increased by 8,500%.
The simplest way to avoid malware is to keep the antivirus updated. Furthermore, internal policies that restrict software installation, using only trusted sources, and establishing a scanning routine can help eliminate these invaders.
Ransomware
The best-known example of ransomware was WannaCry. This virus exploited a security flaw in the Windows operating system to encrypt files of individuals, companies, and government organizations. Moreover, it demanded a payment in Bitcoins to deliver the key to the affected parties.
To protect against these threats, it would suffice to regularly update the programs and operating systems used by devices, alongside having good antimalware protection against these risks.
Despite being a simple practice, the same research points out that only 2.3% of smartphones running the Android operating system use the most updated version of the device. This can be one of the vectors used by ransomware to infect the corporate network or hijack cloud data of the organization, raising extra concern regarding BYOD and BYOA practices.
Phishing
The way to reduce phishing incidents is by raising user awareness and making them less susceptible to the social engineering strategies used in this cyber attack. To avoid it, for example, users need to inspect the URL of the destination page in incoming communications and recognize those used by the official cloned sites.
Ignoring this simple practice exposes company data to a large number of threats. Although it is the easiest strategy to prevent, in 2020 there was a 300% increase in cybercrimes in Brazil.
The main incidents related to cyber security are simple to avoid, but require the adoption of technologies and some changes in user habits. On the other hand, the average financial impact caused to companies is 1% of annual gross revenue. Therefore, investing in prevention and vulnerability reduction is the best way to eliminate this loss!
Did you like these examples of cyber security? Want to know other ways to protect your business, reduce costs, and improve your company’s performance? Then follow Teclógica on social media and don’t miss our updates! We are on LinkedIn, Facebook, Instagram, Twitter and YouTube!
