Contact Us

MicroAI Admin, Author at www.micro.ai - Page 29 of 33

-1

archive,paged,author,author-newone,author-1,paged-29,author-paged-29,wp-theme-bridge,wp-child-theme-bridge-microai-child,bridge-core-1.0.4,mega-menu-top-navigation,ajax_fade,page_not_loaded,,qode_grid_1400,qode-content-sidebar-responsive,qode-child-theme-ver-1.0,wpb-js-composer js-comp-ver-8.4.1,vc_responsive

Author: MicroAI Admin

Hackathon Banner

Internal Company Hack-a-thon

During the month of March in 2020, the entire ONE Tech office had to transition to a work-from-home reality due...

15 April, 2020

iotworld

IoT World 2020

Join us at IoT World this April 6th-9th in San Jose, CA! Use our exclusive code "ONETECH" to get 30%...

06 April, 2020

COVID-19

COVID-19, Changing the Way the World Works

The impact of COVID-19 on businesses is yet to be fully realized, and it will not be for quite some...

03 April, 2020

iotWorld-1

IoT World Today Security Summit

[vc_row css_animation="" row_type="row" use_row_as_full_screen_section="no" type="full_width" angled_section="no" text_align="left" background_image_as_pattern="without_pattern" css=".vc_custom_1764594913456{padding-top: 20px !important;padding-bottom: 60px !important;}" z_index=""][vc_column width="2/3"][vc_column_text css=""]Date: [post_date][/vc_column_text][vc_empty_space height="20"][vc_column_text css=""]We're thrilled...

01 April, 2020

iot-one

IoT, AI, Blockchain, and Big Data

ONE is Glad to Announce It’s Participation in IoT, AI, Blockchain, and Big Data. Join us!...

01 April, 2020

IoT-World-2020

Join ONE Tech at IoT World 2020

Here at ONE Tech, we are thrilled to share with you our involvement in this year’s IoT World exhibition! Join...

25 February, 2020

RSAC

ONE Tech announce our participation at RSA Conference

ONE Tech is extremely thrilled to announce our participation at RSA Conference, Monday, February 24th through Friday, February 28th in...

24 February, 2020

A flaw that resides in software, hardware or firmware, a zero-day exploit is one of the toughest types of attacks to detect and prevent. While zero-day attacks are one of the lesser-known types of cybersecurity attacks, they are more common than you may think. “Nearly one out of three malware attacks is a zero-day attack that cannot be detected by traditional antivirus programs, and over nine out of every ten malware threats makes it way into an organization because of a compromised file downloaded from email.” What is a Zero-day Attack? A zero-day attack is defined as the period between when an unpatched vulnerability is discovered and the actual attack. Day zero refers to the day that the recipient of the attack discovers the exploit and begins working on a solution. Thus, the race begins for the attack recipient to patch the vulnerability before the attack fully commences. Basically, attackers are looking for vulnerabilities in your systems, such as unpatched software, and exploit that opportunity. Zero-day exploits may take the form of malware, viruses, polymorphic worms or trojans. Hackers may post the exploits on the dark web, where they buy, sell or trade them. The Cost In some cases, financial gain is sought. In other cases, confidential corporate data is sold on the dark web or public file-sharing websites. Either way, your team spends time troubleshooting the problem while a negative public relations storm ensues as a result of your data breach. One zero-day exploit was listed for sale on the dark web for $90,000 by cybercriminals. The vulnerability “was believed to be able to affect machines running any form of windows, which could have impacted millions.” Or there’s the IoS one-click jailbreak that was up for sale for $1.5 million by exploit broker Zerodium. In order to better understand zero-day attacks, let’s examine a few examples that occurred in recent years. Examples of Zero-day Attacks One of the most famous zero-day attacks was the Stuxnet worm, which used infected code that sat idle for a period of time. Eventually, the full-scale attack was launched, which in turn sped up and destroyed several centrifuges that featured sensors in Iran’s nuclear power plant. Back in 2011, attackers went after RSA, a security vendor, by using an unpatched vulnerability in Adobe Flash Player. By distributing emails via Excel file attachments, a Flash file was activated and customer data was stolen, which included information used by RSA customers in their SecurID security tokens. The Sony hack is another famous example of a zero-day attack. Teams of hackers, known as the Guardians of Peace, took down Sony’s network. Sensitive corporate data, including films, emails and contracts, were released on public file-sharing websites. While money wasn’t the motive, the attackers did affect the release of the Sony film, “The Interview.” Another popular zero-day attack was the DNC (Democratic National Committee) hack. In this case, “there were at least six zero-day vulnerabilities that were exploited to gain access to stolen data.” The vulnerabilities were discovered in Microsoft Windows, Adobe Flash and Java and were exploited by a well-planned spear-phishing attack that targeted specific individuals. 7 Ways Prevent a Zero-day Attack Patch and update Apply patches to servers, systems and networks as soon as they are available. Never let patches go for an extended period of time. This helps to reduce the number of flaws within your systems. Companies should also factor zero-day attacks into patch management policies and overall cybersecurity policies and procedures. Use multiple layers of security Don’t just depend on patches and device security to prevent zero-day attacks. There’s more work to be done. Use firewalls or AI-based intrusion detection systems that filter out malicious traffic or network activities. Also, utilize sandboxes to quarantine suspicious files or as working environments. Restrict the use of open-source software By restricting the use of and securing your open-source software, zero-day attacks can better be prevented. Be sure to keep track of open-source software usage across your organization and update as often as required by the issuing company. This will help to ensure that vulnerabilities occur less often. Use virtual local area networks By segregating areas of the network with dedicated physical or virtual network segments, otherwise known as a VLAN (Virtual Local Area Network), you can isolate sensitive traffic that flows between servers. VLANs make it possible for network administrators to partition a switched network to match your own needs. Secure email gateways, servers and networks Secure these equally as zero-day attacks can present themselves to various parts of an organization. Whether the hackers seek to deploy malware or deliver payloads, it’s important to consider every potential impact in order to prevent a zero-day exploit from launching. Also, implement IPsec to apply encryption and authentication to network traffic. Change all default passwords Most IoT devices come with default passwords, which can be easier for humans to guess. Additionally, “default passwords are easy targets for automated attacks that scan the internet for devices with default credentials, and it should also reduce the risk of an organization falling victim to brute-force attacks.” Regularly practice cybersecurity Cybersecurity efforts should be an ongoing part of your efforts to secure your network and data. Promote a culture of awareness when it comes to cybersecurity and how users might get lured via a phishing attack, as an example. Educate employees regularly on the dangers lurking and how they can help protect your company’s data. Have a disaster recovery strategy If you are affected by a zero-day attack, it’s imperative to have a disaster recovery plan in place. This will allow you to mitigate the damage if an attack occurs. Utilize a combination of on and off-site storage for backing up your data. Just like most types of cybersecurity attacks, hackers are becoming more adept at deploying and launching zero-day attacks. By applying the aforementioned techniques, you will increase your chances of staving off a zero-day attack. However, it’s important to constantly stay vigilant when it comes to your cybersecurity.

A Guide to Understanding Zero-day Attacks

A flaw that resides in software, hardware or firmware, a zero-day exploit is one of the toughest types of attacks...

13 January, 2020

Trends in IoT

Trends in IoT for 2020

We are in the midst of a technology revolution. The internet is everywhere; it’s on our PCs, our wrists and...

08 January, 2020

Edge Computing

Understanding Edge Computing

The world is changing at a rapid pace. Not only are smartphones and technology a way of life, but there...

10 December, 2019

26
27
28
29
30
31
32