The Cyber Security Roundup

It's Not "If," But "When"

In today's digital battlefield, the question isn't whether your business will face a cyber attack – it's when. The threat landscape is relentless, and the stakes are higher than ever. Every 39 seconds, a business falls victim. The harsh truth is this: those who survive and thrive won't be the ones who miraculously avoid an attack, but those who are prepared to face it head-on.

At Cyber Security Hawaii, we're dedicated to equipping Hawaii's businesses with the knowledge and tools to not only withstand attacks but to emerge stronger. This issue of the Cybersecurity Roundup is packed with insights to help you navigate the ever-evolving world of cyber threats.

We'll dive deep into the must-have security controls for small businesses, explore the implications of a massive data breach affecting millions, and uncover the latest tactics hackers are using to target organizations like yours.

Remember, preparation is your greatest defense. Let's work together to fortify your business against the inevitable.

Ready to fortify your defenses? Book a free 15-minute IT strategy session with one of our friendly, local experts at https://strategy.cybersecurehawaii.com

The High Cost of Cyberattacks: Why Preparation is Key

The devastating impact of a cyberattack on a small business can't be overstated. According to CISA, the average downtime for a ransomware attack is a staggering 15-20 days. Imagine your business operations grinding to a halt for nearly three weeks – no sales, no customer service, no productivity. For many small businesses, this could spell financial ruin.

And that's just the downtime. The average cost of a cyberattack for a small business is a whopping $800,000. Think about the legal fees, the cost of data recovery, the potential fines for non-compliance, and the damage to your reputation.

In the aftermath of an attack, you'll need a whole team of experts to help you pick up the pieces: a forensics team to investigate the breach, a breach coach to navigate the legal and PR complexities, a data mining company to identify affected customers, a legal team to protect you from liability, and an IT team to restore your systems.

The takeaway is clear: preparing for a cyberattack isn't just about protecting your data; it's about ensuring the very survival of your business. At Cyber Security Hawaii, we understand these stakes. We're committed to helping you build a robust defense so that when an attack happens, you're not just surviving, you're thriving.

Cybersecurity News Roundup:

• 5 Must-Have Cybersecurity Control Measures for Small Businesses This article outlines five essential cybersecurity controls that small businesses should implement to protect themselves from cyberattacks. These controls include:

Using strong passwords and multi-factor authentication

Regularly updating software and applications

Backing up data regularly

Implementing a firewall

Educating employees about cybersecurity Read more

• Chinese Wi-Fi Router Vendor Draws US Congressional Ire This article discusses a Congressional inquiry into the security risks of TP-Link Wi-Fi routers. TP-Link is a Chinese company that makes the majority of Wi-Fi routers sold in the United States. There is concern that China could use these routers to spy on the US. Two congressmen are requesting the Commerce Department to investigate TP-Link. Read more
• National Public Data Confirms Massive Breach This article is about a massive data breach at National Public Data (NPD). It discusses the exposed data and the lack of consumer protection. The data breach included personal information like Social Security numbers and email addresses. Experts say the breach is one of the biggest ever. The article also calls for reform in how data is collected and secured. Read more
• RansomHub Rolls Out Brand New EDR Killing BYOVD Binary This article is about a new ransomware tool called EDRKillShifter. It is designed to disable endpoint detection and response (EDR) software. The tool exploits a vulnerability in a legitimate driver to gain privileges. This allows the ransomware to bypass security software. Experts recommend keeping software up to date and enforcing strong security practices to defend against this type of attack. Read more
• Malicious Links, AI-Enabled Tools, and Attacks on SMBs Among Top Cybersecurity Threats in H1 2024: Mimecast Global Threat Intelligence Report This article is about cybersecurity threats in the first half of 2024. It discusses malicious links and AI-enabled tools used in attacks. Small businesses are especially vulnerable. Attackers are using phishing emails with malicious links and fake login pages to steal credentials. AI is being used to create more realistic phishing emails. Mimecast is a company that offers cybersecurity solutions. Read more
• Unfixed Microsoft Entra ID Authentication Bypass Threatens Hybrid Clouds This article is about a security vulnerability in Microsoft Entra ID. It discusses how attackers can bypass authentication in hybrid identity infrastructures. This vulnerability affects organizations that sync multiple on-premises Active Directory domains to a single Azure tenant. Attackers can exploit this by gaining admin access to a server hosting a Pass-Through Authentication (PTA) agent. Once they have this access, they can log in as any user from any synced domain. Microsoft plans to fix the issue, but considers the threat medium-severity because attackers need admin access first. Read more

Remember, in the face of escalating cyber threats, the time to act is now. Reach out to Cyber Security Hawaii today, and let's build a resilient defense for your business. If you are connected to the Internet, your are reachable. If you are reachable, you are breachable!