Dark Reading is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

Comments
5 Security Resolutions to Prevent a Ransomware Attack in 2020
Newest First  |  Oldest First  |  Threaded View
ernac
50%
50%
ernac,
User Rank: Apprentice
2/3/2020 | 2:42:44 AM
Nice Article
Definitely a curated piece of content. I'm working as a security testing freelancer and have several International clients by God's grace. Side by side I'm also working on a personal report based on security testing services. Your security testing blog is quite detailed so felt like asking for some help. Could you please suggest that whether adhering to the OWASP Top 10 safeguards the digital network architecture of a business ?
duetqqip
50%
50%
duetqqip,
User Rank: Apprentice
12/21/2019 | 12:40:24 PM
Re: Deploy key technologies to close critical vectors
nice
sethblank
50%
50%
sethblank,
User Rank: Author
12/18/2019 | 7:05:06 PM
Deploy key technologies to close critical vectors
Thanks for the article, Shawn.

There's one crucial item missing from your list. 90+% of cyberattacks, including ransomware, begin from email. And there are well known technologies, such as SPF, DKIM, and especially DMARC, that prevent these abuses before they ever get in front of a user.

These solutions don't cover every scenario, but they cover the majority of the sources of the threats. We've seen in the real world that when an organization has DMARC in place, attackers simply move on to abuse other organizations instead of moving to more difficult vectors.

If you want to stop ransomware, deploy these open standards and you've reduced your threat surface by more than half. Then apply the rest of your recommendations to continue closing the gap.


News
Inside the Ransomware Campaigns Targeting Exchange Servers
Kelly Sheridan, Staff Editor, Dark Reading,  4/2/2021
Commentary
Beyond MITRE ATT&CK: The Case for a New Cyber Kill Chain
Rik Turner, Principal Analyst, Infrastructure Solutions, Omdia,  3/30/2021
Register for Dark Reading Newsletters
White Papers
Video
Cartoon
Current Issue
2021 Top Enterprise IT Trends
We've identified the key trends that are poised to impact the IT landscape in 2021. Find out why they're important and how they will affect you today!
Flash Poll
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2021-24028
PUBLISHED: 2021-04-14
An invalid free in Thrift's table-based serialization can cause the application to crash or potentially result in code execution or other undesirable effects. This issue affects Facebook Thrift prior to v2021.02.22.00.
CVE-2021-29370
PUBLISHED: 2021-04-13
A UXSS was discovered in the Thanos-Soft Cheetah Browser in Android 1.2.0 due to the inadequate filter of the intent scheme. This resulted in Cross-site scripting on the cheetah browser in any website.
CVE-2021-3460
PUBLISHED: 2021-04-13
The Motorola MH702x devices, prior to version 2.0.0.301, do not properly verify the server certificate during communication with the support server which could lead to the communication channel being accessible by an attacker.
CVE-2021-3462
PUBLISHED: 2021-04-13
A privilege escalation vulnerability in Lenovo Power Management Driver for Windows 10, prior to version 1.67.17.54, that could allow unauthorized access to the driver's device object.
CVE-2021-3463
PUBLISHED: 2021-04-13
A null pointer dereference vulnerability in Lenovo Power Management Driver for Windows 10, prior to version 1.67.17.54, that could cause systems to experience a blue screen error.