You are here

IT Security Breaches Last Over a Year Before Discovery- FireEye

PrintPrintEmailEmail
bankole orija

Consumers must remain vigilant despite the good news that increased focus on secure operating systems and applications means they (consumers) only have to perform basic security hygiene to remain reasonably protected, according to FireEye “2017 Security Landscape”.

FireEye “FEYE”, a leader in cyber security, protecting organizations from advanced malware, zero-day exploits, APTs, and other cyber attacks, suggests that attackers, most times, operate in an environment for over a year before individuals or organization affected could discover. 

The Company advised that consumers take basic steps to stay ahead of threats by enabling two-factor authentication on all of their systems and accounts, using password managers to protect their systems and accounts, and automatically backing up data in the event that they are affected by ransomware or their data becomes compromised by a threat actor.

They also warned that enterprises on the other hand will continue to be under attack in what seems to be an asymmetric battle.

Mandiant, a FireEye company and the leader in helping organizations respond to and proactively protect against advanced cyber security threats has been advising clients to prepare for when attacks happen, not if they happen, and to be ready to respond to and contain an incident. 

“Consumers must remain vigilant,” the Company said. “Other basic steps consumers can take to stay ahead of threats include enabling two-factor authentication on all of their systems and accounts, using password managers to protect their systems and accounts, and automatically backing up data in the event that they are affected by ransomware or their data becomes compromised by a threat actor. Enterprises on the other hand will continue to be under attack in what seems to be an asymmetric battle.

“One way to be prepared is to hold incident response tabletop exercises to simulate typical intrusion scenarios, thus exposing participants – such as executives, legal personnel and other staff – to incident response processes and concepts.

“One sobering thought is that the threat activity we expect to hear about in 2017 may be taking place right now, with adversaries already inside many of the systems and networks necessary to be in for them to achieve their mission. We know that most cyber threat actors operate within environments for many months before they are discovered, and in some instances for longer than a year.

“These adversaries, many of which are tracked and monitored by FireEye, are likely moving through corporate or government networks at this moment and exfiltrating datasets – activity that could continue into next year. Therefore, most of the events that will make headlines in 2017 – and the many that won’t – are already underway”.

FireEye reiterated the need to keep in mind that many organizations are still responding to cyber attacks from 2016, but in 2017, they expect there will be more actuarial data on the cost of breaches and the security products and technologies that are likely to be effective.

“This increased focus on numbers in 2016,” FireEye said “will prove useful to the community at large. With this information, organizations will be able to make more informed decisions on what to protect, and how to protect it”.

 

Section