Dark Reading is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

Vulnerabilities / Threats

03:00 PM
Connect Directly
E-Mail vvv

Things Keeping CISOs Up at Night During the COVID-19 Pandemic

Insights from discussions with more than 20 CISOs, CEOs, CTOs, and security leaders.

Every cybersecurity professional knows that crisis often breeds threats. That said, the anecdotes we're seeing during the COVID-19 pandemic are uniquely frightening: health agencies getting attacked, growth in mass phishing operations, and the discovery of security flaws in leading communications platforms are just a few worth highlighting.  

As an IT professional myself, I set out to discover what was unique about the current threat landscape through discussions with cybersecurity professionals on the battlefield's front lines. After discussions with more than 20 CISOs, CEOs, CTOs, and security leaders, I found six recurring core themes worth highlighting. Some are obvious, some less so.

1. Lack of security at remote access sites. This is the most obvious. Nearly everyone who was working in an office is now working from home, which means there are many more endpoints to secure from potential attack, and exponentially more loose ends. Dr. Anton Chuvakin (security strategy leader at Google) puts it best: "A lot more access from a lot more places, a lot more BYOD, a lot more VPN, a whole lot of new permissions created and rules loosened." Policies, procedures, and new technologies must be rolled out at lightning speed to enable things like multifactor authentication, remote device monitoring, and rule sets for application utilization and email management. 

2. Safe access to on-premises infrastructure. For most of the enterprise universe that was not born in the cloud, the biggest industry worry has been around providing secure access to on-premises infrastructure, typically involving some type of remote VPN. However, most VPN solutions deployed were not designed for a 100% remote workforce, forcing many companies to increase bandwidth and get clever with network design. Bhargav Acharya (of Schellman & Co.) notes that he's seen "local VPN servers get overloaded with the sheer amount of traffic and network connections required for supporting such a large workforce."

3. Overly speedy digitization. Companies are cramming years of digitization capex into months, at times forcing them to overlook potential security risks. Cloudsine CEO Matthias Chin stated that this could "lead to higher chances of threats like DDoS, defacements, data breaches happening." When things are built quickly, it's more likely that holes exist.

4. Phishing. Lots of it. This is the most expected security issue to arise during any period of panic, and it's compounded by the fact that employees are working from home with fewer potential safeguards in place. Although phishing activity is always a threat that's constantly evolving, there has been a massive increase in COVID-19-specific phishing activity, and a period of panic can make people more susceptible to fraud or social engineering. Dr. Salvatore Stolfo of Allure Security has seen "a dramatic uptick in the number of COVID-19 scams, largely phishing campaigns and an onslaught of fake emails trying to trick people to click on links sending them to malicious sites to steal their credit card information and their credentials."

5. Increased cybersecurity vulnerabilities. Cybercriminals are most likely to attack when a firm's guard is down. Ron Abisi of Tala Security notes that his company is seeing "a 20% to 30% increase in Magecart and XSS attacks across the board," primarily targeting retail and e-commerce.

6. Issues with third-party applications. Everyone has read about the security issues that have been brought to light regarding Zoom. The unfortunate reality is that companies are scrambling to deploy third-party, cloud-based productivity tools, and are in turn exposing themselves to the same set of risks that exist within these applications. Companies may also not take into account the impact that third-party applications may have on their broader on-premises or hybrid network if deployed quickly, as many of these productivity tools can integrate with users' personal accounts and allow them to transmit private company data with ease.

The threat landscape is expansive and ever-changing, so this list is meant to function as a list of common themes rather than an exhaustive list of threats. If you'd like to read full, unabridged quotes from 11 professionals who shared on-record statements with us, check them out here.

Related Content:

A listing of free products and services compiled for Dark Reading by Omdia analysts to help meet the challenges of COVID-19. 

Dennis Thankachan is the founder and CEO of Lightyear, a web platform that helps businesses comparison shop for IT infrastructure services (internet access, VoIP, managed services, etc.). He regularly writes on various IT infrastructure and telecom topics here. Dennis is ... View Full Bio

Recommended Reading:

Comment  | 
Print  | 
More Insights
Newest First  |  Oldest First  |  Threaded View
Overcoming the Challenge of Shorter Certificate Lifespans
Mike Cooper, Founder & CEO of Revocent,  10/15/2020
US Counterintelligence Director & Fmr. Europol Leader Talk Election Security
Kelly Sheridan, Staff Editor, Dark Reading,  10/16/2020
7 Tips for Choosing Security Metrics That Matter
Ericka Chickowski, Contributing Writer,  10/19/2020
Register for Dark Reading Newsletters
White Papers
Current Issue
Special Report: Computing's New Normal
This special report examines how IT security organizations have adapted to the "new normal" of computing and what the long-term effects will be. Read it and get a unique set of perspectives on issues ranging from new threats & vulnerabilities as a result of remote working to how enterprise security strategy will be affected long term.
Flash Poll
How IT Security Organizations are Attacking the Cybersecurity Problem
How IT Security Organizations are Attacking the Cybersecurity Problem
The COVID-19 pandemic turned the world -- and enterprise computing -- on end. Here's a look at how cybersecurity teams are retrenching their defense strategies, rebuilding their teams, and selecting new technologies to stop the oncoming rise of online attacks.
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
PUBLISHED: 2020-10-21
Prior to 0.10.0-beta, LND (Lightning Network Daemon) would have accepted a counterparty high-S signature and broadcast tx-relay invalid local commitment/HTLC transactions. This can be exploited by any peer with an open channel regardless of the victim situation (e.g., routing node, payment-receiver,...
PUBLISHED: 2020-10-21
Prior to 0.11.0-beta, LND (Lightning Network Daemon) had a vulnerability in its invoice database. While claiming on-chain a received HTLC output, it didn't verify that the corresponding outgoing off-chain HTLC was already settled before releasing the preimage. In the case of a hash-and-amount collis...
PUBLISHED: 2020-10-20
Cross-site request forgery in Nagios XI 5.7.3 allows a remote attacker to perform sensitive application actions by tricking legitimate users into clicking a crafted link.
PUBLISHED: 2020-10-20
Improper neutralization of special elements used in an OS command in Nagios XI 5.7.3 allows a remote, authenticated admin user to execute operating system commands with the privileges of the apache user.
PUBLISHED: 2020-10-20
Improper neutralization of argument delimiters in a command in Nagios XI 5.7.3 allows a remote, authenticated admin user to write to arbitrary files and ultimately execute code with the privileges of the apache user.