Social engineering is currently one of the significant threats to IT security, and the recent attack on Twitter made it clear again. Security expert CyberArk names five simple measures that significantly reduce the risk of social engineering.
The hacker attack on Twitter, which affected presidential candidate Joe Biden, ex-President Barack Obama, and Amazon boss Jeff Bezos, is one of the most significant attacks on a social media platform to date. According to Twitter, it is due to social engineering. The attackers could obtain privileged access data to an administrative tool that is usually only available to internal support teams.
People make mistakes, so companies will never rule out successful social engineering attacks entirely. But there are five measures a company can take to reduce the attacker’s success rate massively.
Table of Contents
Regularly raise employees’ awareness of security threats and ongoing training on cybersecurity best practices. In particular, attention should be drawn to the risks associated with money orders or the forwarding of confidential and personal information.
One of the best proactive ways to minimize the risk of privileged access is to implement the least privilege principle within privileged access management. This means that the access rights of users should be restricted to the minimum necessary for the respective role. This can prevent an attacker from moving sideways in the company network – even after a successful social engineering attack.
One-factor authentication, for example, with a password, is always a single point of failure. Therefore, multi-factor authentication should be mandatory for access to critical systems, and this means that every social engineering attack comes to nothing.
No employee should have full access to confidential platforms without multiple levels of security. At least a four-eyes principle must apply. An employee only receives access to a critical system if they have received approval for this from a second authorized user or additional system logic (e.g., a ticket management system).
The continuous monitoring of privileged sessions and analysis tools enable the automatic detection of risky behavior or unusual activities. Based on this information, a company can quickly initiate the necessary measures.
Also Read: The Art Of Cyber Risk Prediction And How To Stay One Step Ahead Of Cyber Attacks
If you have lost or damaged your vehicle's registration certificate, you must be tense and…
Phaneesh Murthy's career is a masterclass in leadership and innovation within the IT services sector.…
Few companies miss out on redesigning the logo: it is an essential step in the…
In today’s fast-paced world it’s easy to miss the treasures hidden in online libraries. These…
AI video generators are presently transforming the way companies and content creators create videos. With…
Strong anti-malware program IObit Malware Fighter 11 Free guards personal computers against a broad range…