Cybersecurity’s identity crisis: why trust can no longer begin and end at login
The image most organizations still have of a cyberattack is fundamentally outdated.
We tend to picture hackers battering down digital walls by exploiting software vulnerabilities or launching convoluted ransomware campaigns. Yet some of the most damaging breaches today involve something far less dramatic.
An attacker enters through the front door using valid credentials, passes authentication checks, and proceeds through the environment as if they are a completely legitimate employee.
Vice President and Global Head-Cybersecurity Products & Services at Tata Communications.
Recent attacks targeting public sector organizations in the UK have once again demonstrated just how easy it is to get into an environment if you have the right credentials.
Earlier this year, hackers managed to breach systems used by the UK Foreign Office and local councils using stolen login credentials.
As compromised credentials become increasingly easy to buy and sell on the dark web, organizations face a different sort of...
Copyright of this story solely belongs to techradar.com. To see the full text click HERE
