Social engineering is currently one of the significant threats to IT security, and the recent attack on Twitter made it clear again. Security expert CyberArk names five simple measures that significantly reduce the risk of social engineering.
The hacker attack on Twitter, which affected presidential candidate Joe Biden, ex-President Barack Obama, and Amazon boss Jeff Bezos, is one of the most significant attacks on a social media platform to date. According to Twitter, it is due to social engineering. The attackers could obtain privileged access data to an administrative tool that is usually only available to internal support teams.
People make mistakes, so companies will never rule out successful social engineering attacks entirely. But there are five measures a company can take to reduce the attacker’s success rate massively.
Table of Contents
Regularly raise employees’ awareness of security threats and ongoing training on cybersecurity best practices. In particular, attention should be drawn to the risks associated with money orders or the forwarding of confidential and personal information.
One of the best proactive ways to minimize the risk of privileged access is to implement the least privilege principle within privileged access management. This means that the access rights of users should be restricted to the minimum necessary for the respective role. This can prevent an attacker from moving sideways in the company network – even after a successful social engineering attack.
One-factor authentication, for example, with a password, is always a single point of failure. Therefore, multi-factor authentication should be mandatory for access to critical systems, and this means that every social engineering attack comes to nothing.
No employee should have full access to confidential platforms without multiple levels of security. At least a four-eyes principle must apply. An employee only receives access to a critical system if they have received approval for this from a second authorized user or additional system logic (e.g., a ticket management system).
The continuous monitoring of privileged sessions and analysis tools enable the automatic detection of risky behavior or unusual activities. Based on this information, a company can quickly initiate the necessary measures.
Also Read: The Art Of Cyber Risk Prediction And How To Stay One Step Ahead Of Cyber Attacks
In an era where digital presence is almost as significant as our physical one, creating…
Generative AI has ushered in a new era of possibilities across various industries, from marketing…
The right payroll software can significantly influence your business's operational efficiency, regulatory compliance, and even…
A credit score isn't the sole measure of financial wellness. Still, it can affect your…
In the fast-paced world of online betting, the ability to access your account effortlessly across…
Cloud services have emerged as a beacon of efficiency and innovation. These virtualized resources offer…