Threat Intelligence

12/31/2015
09:30 AM
Connect Directly
Twitter
Twitter
RSS
E-Mail
100%
0%

Boldest Cybersecurity Predictions For 2016

Forget the boring, safe predictions -- here instead are the most interesting, cringe-worthy, humorous, or otherwise shocking predictions for the coming year.
Previous
1 of 10
Next

 

Yes, yes. We all know that in 2016 the Internet of Things is going to be kind of a big deal for security practitioners, that cyber espionage is a huge concern for the enterprise and that this will really, REALLY (for real this time) be the year that mobile malware makes a mark. At Dark Reading, we quite literally received over 60 pages of these kinds of boring predictions from techno-bloviators who just phoned it in with the prognostications this year. But amid all the allusions to the riskiness of the cloud (2012 retread, anyone?) and more cries of impending security talent shortages, there were some unique forecasts in the mix. Whether they were fun long-shot guesses, insightful projections, funny zingers, or otherwise off-the-wall prophecies, these were the boldest 2016 cybersecurity predictions to cross our paths before we could pop the champagne to close out another year. 

 

Ericka Chickowski specializes in coverage of information technology and business innovation. She has focused on information security for the better part of a decade and regularly writes about the security industry as a contributor to Dark Reading.  View Full Bio

Previous
1 of 10
Next
Comment  | 
Print  | 
More Insights
Comments
Newest First  |  Oldest First  |  Threaded View
Sagiss, LLC
50%
50%
Sagiss, LLC,
User Rank: Strategist
1/25/2016 | 4:13:44 PM
Re: CISOs or Security Investments?
I agree with you, Jason. We're already beginning to see a shift in focus as businesses devote more resources to security. However, CISO's won't be the "It Girl" of IT anytime soon due to the large gap in understanding between end-users and their IT departments when it comes to the importance of a comprehensive IT policy. Perhaps when employees begin to think of I.T. as a part of their day-to-day routines rather than a separate entity, CISOs will finally earn the title of "It Girl".
Jason Echols
100%
0%
Jason Echols,
User Rank: Apprentice
1/11/2016 | 11:01:14 AM
CISOs or Security Investments?
Ericka, this is easily one of the best prediction posts around, thanks for putting it together. 

While I share your hope that CISOs become the "It Girl" of I.T., I think that revolution will take a bit more time. I do think 2016 will see more investment in security (not a bold prediction), and that this investment in the coming years will eventually make the CISO role more powerful as application, network, and data security are brought into a unified team in the enterprise, possibly under the CISO. Either way, here's hoping security practice continues to be brought to the forefront of the priorities list!
macker490
50%
50%
macker490,
User Rank: Ninja
1/1/2016 | 7:18:48 AM
Re: Balkanization of the Internet
if we cannot control your behavior then we must limit your access

operating software that allows itself to be corrupted by the activity of an application program fails in the premise and leaves the conclusion as the necessary alternative
RyanSepe
100%
0%
RyanSepe,
User Rank: Ninja
12/31/2015 | 10:23:14 AM
Data Weaponization Means Extortapalooza
I agree with this one most heavily and for other reasons than the ones cited. Not only are phishing campaigns and Drive by Downloads effective at the corporate level but also at the individual level. With ransomware becoming more and more prevalent due to its modularity and ease of use, I see this prediction continuing the incline of the current trend.
RyanSepe
100%
0%
RyanSepe,
User Rank: Ninja
12/31/2015 | 10:12:48 AM
Balkanization of the Internet
Not sure this will come to pass on a global scale. Maybe setting up lines between "non-friendly" countries. But the idea of the Internet is the free flow of information, setting up walls is not the way to go....
High Stress Levels Impacting CISOs Physically, Mentally
Jai Vijayan, Freelance writer,  2/14/2019
Valentine's Emails Laced with Gandcrab Ransomware
Kelly Sheridan, Staff Editor, Dark Reading,  2/14/2019
Making the Case for a Cybersecurity Moon Shot
Adam Shostack, Consultant, Entrepreneur, Technologist, Game Designer,  2/19/2019
Register for Dark Reading Newsletters
White Papers
Video
Cartoon
Current Issue
5 Emerging Cyber Threats to Watch for in 2019
Online attackers are constantly developing new, innovative ways to break into the enterprise. This Dark Reading Tech Digest gives an in-depth look at five emerging attack trends and exploits your security team should look out for, along with helpful recommendations on how you can prevent your organization from falling victim.
Flash Poll
How Enterprises Are Attacking the Cybersecurity Problem
How Enterprises Are Attacking the Cybersecurity Problem
Data breach fears and the need to comply with regulations such as GDPR are two major drivers increased spending on security products and technologies. But other factors are contributing to the trend as well. Find out more about how enterprises are attacking the cybersecurity problem by reading our report today.
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2019-8980
PUBLISHED: 2019-02-21
A memory leak in the kernel_read_file function in fs/exec.c in the Linux kernel through 4.20.11 allows attackers to cause a denial of service (memory consumption) by triggering vfs_read failures.
CVE-2019-8979
PUBLISHED: 2019-02-21
Koseven through 3.3.9, and Kohana through 3.3.6, has SQL Injection when the order_by() parameter can be controlled.
CVE-2013-7469
PUBLISHED: 2019-02-21
Seafile through 6.2.11 always uses the same Initialization Vector (IV) with Cipher Block Chaining (CBC) Mode to encrypt private data, making it easier to conduct chosen-plaintext attacks or dictionary attacks.
CVE-2018-20146
PUBLISHED: 2019-02-21
An issue was discovered in Liquidware ProfileUnity before 6.8.0 with Liquidware FlexApp before 6.8.0. A local user could obtain administrator rights, as demonstrated by use of PowerShell.
CVE-2019-5727
PUBLISHED: 2019-02-21
Splunk Web in Splunk Enterprise 6.5.x before 6.5.5, 6.4.x before 6.4.9, 6.3.x before 6.3.12, 6.2.x before 6.2.14, 6.1.x before 6.1.14, and 6.0.x before 6.0.15 and Splunk Light before 6.6.0 has Persistent XSS, aka SPL-138827.