The same technology driving faster collaboration and data transfer also enables cybercriminals to quickly spread ransomware.
Businesses are moving to the cloud, taking advantage of the increased speed and efficiency it provides for data transfer and collaboration. Unfortunately for them, threat actors are abusing the same technology to accelerate the spread of cybercrime.
Cloud Security Alliance CEO Jim Reavis says the intrinsic nature of the cloud, which makes it appealing to businesses, is also viewed by malicious actors as a "fast lane" for ransomware proliferation. The foundation for strong ransomware protection in the cloud is a clean, secure internal network.
"It is important to have the best internal network hygiene possible: least privilege network architectures, microsegmentation, disabling extraneous network services running on desktops is a must," he says.
In many ways, protecting your business from ransomware in the cloud isn't different from endpoint ransomware protection, says John Pironti, president of IP Architects. He emphasizes the importance of maintaining basic security practices to protect against ransomware.
"It's the basics that always solve the problem," he explains. Patching and hardening systems are especially critical regardless of where data is stored. "It's IT security hygiene. If you do these things, the other things are irrelevant."
However, many businesses are not properly protecting themselves, and are leaving their data vulnerable to potentially disastrous attacks.
"Ransomware is different than traditional confidentiality attacks that infosec has obsessed over for many years," says independent security consultant Gal Shpantzer. "It's an availability attack, but unlike, say, DDoS, the attack is more intrusive, shuts down servers and not just pipelines, and can destroy vast quantities of data if not properly restored."
Here, cloud security pros share their advice on how businesses can protect their cloud environments from ransomware, and what they should do to mitigate the effects of an attack after it occurs.
About the Author(s)
You May Also Like
Guarding the Cloud: Top 5 Cloud Security Hacks and How You Can Avoid Them
April 4, 2024Cybersecurity Strategies for Small and Med Sized Businesses
April 11, 2024Defending Against Today's Threat Landscape with MDR
April 18, 2024Securing Code in the Age of AI
April 24, 2024
Black Hat USA - August 3-8 - Learn More
August 3, 2024Cybersecurity's Hottest New Technologies: What You Need To Know
March 21, 2024Black Hat Asia - April 16-19 - Learn More
April 16, 2024