{"id":68405,"date":"2022-12-21T15:45:08","date_gmt":"2022-12-21T11:45:08","guid":{"rendered":"https:\/\/techxmedia.com\/?p=68405"},"modified":"2025-04-17T11:48:55","modified_gmt":"2025-04-17T07:48:55","slug":"cybereasons-greg-day-urges-cisos-to-adjust-their-cyber-readiness-footing-in-2023","status":"publish","type":"post","link":"https:\/\/techxmedia.com\/en\/cybereasons-greg-day-urges-cisos-to-adjust-their-cyber-readiness-footing-in-2023\/","title":{"rendered":"Cybereason\u2019s Greg Day urges CISOs to \u2018adjust their cyber readiness footing\u2019 in 2023"},"content":{"rendered":"\n
\"\"<\/figure>
\n

In the coming year, cybersecurity professionals across the region will have to combat an increase in Deepfakes being used to conduct\u00a0 cyberattacks, new device-hopping threats and next- generation of ransomware, according to Greg Day, Cybereason\u2019s Vice President and Global Field CISO. Day also warns of critical-infrastructure attacks on Energy companies, and targeted supply-chain breaches amid evermore strict regulatory frameworks.<\/p>\n<\/div><\/div>\n\n\n\n

<\/p>\n\n\n\n

As 2023 approaches, Day predicts that security leaders across EMEA will need to implement a slew of new policies, strategies, and approaches to keep attackers at bay. His predictions are as follows:<\/p>\n\n\n\n

Increased cloud credential attacks, unless\u2026<\/strong> The big shift to SaaS has fragmented more than a decade\u2019s worth of work to simplify and consolidate corporate Identity and Access Management (IAM) systems. What\u2019s more, many new SaaS applications don\u2019t integrate with organizations\u2019 existing single sign-on (SSO) solutions, yet organizations continue to accelerate adoption of new SaaS software, even without the security controls of SSO. Consequently, adversaries will increasingly focus on finding these weaker access points (new SaaS applications) to gain access to corporate and personal data, unless IT and Security departments manage to get IAM back under control. <\/p>\n\n\n\n

Deepfakes play a larger role in blended attacks.<\/strong> In recent years, we have seen the increased success of blended attacks that combine social engineering tactics with malicious links, for example. With end users becoming more aware of social engineering, we can expect more sophisticated attackers will increasingly turn to deepfakes to trick end users into clicking on malicious links, downloading infected files, and the like. It won\u2019t be long before deepfakes become yet another common and core element of the blended attacks being used in the cybercrime kill chain.<\/p>\n\n\n\n

The fifth generation of ransomware emerges.<\/strong> A recent report by Cybereason found that 73% of organizations suffered at least one ransomware attack in 2022, compared with just 55% in 2021. As the world reaches saturation of ransomware, adversaries will explore new methods to get money from the same victims. This will be the fifth generation of ransomware. <\/p>\n\n\n\n

Lawmakers refocus regulation. <\/strong>In the coming year, regulation in the E.U. will have more of an emphasis on ensuring businesses have truly identified and remediated breaches. This regulatory focus will close the gap between shutting the attack door in the immediate aftermath of an incident and understanding the attack\u2019s impact. In the U.S., regulatory bodies like the SEC are taking a different approach, one that focuses on enhancing cyber risk reporting and board-level governance. <\/p>\n\n\n\n

Ransomware will test cloud storage access controls.<\/strong> Cloud storage can give organizations a significant data protection advantage, along with more flexible recovery options. But as ransomware moves from the endpoint to target cloud-only spaces, it creates new risks for organizations, especially those that accelerated cloud adoption during the pandemic and lost sight of where sensitive data lives and who has access to it. This creates weaker credential management, leaving room for ransomware to infiltrate. <\/p>\n\n\n\n

Cyberattacks will be transferable between smart devices.<\/strong> The typical cyberattack moves from hacker to device, but 2023 may bring the first cyberattack that jumps between smart devices, including smart cars. We haven\u2019t seen the in-smart environment replication just yet, but with the pace of innovation, a smart car attack could be riding shotgun to the vehicle next to you.<\/p>\n\n\n\n

The risk of a significant attack on critical national infrastructure rises.<\/strong> As both direct and indirect cyber warfare domains grow, so too does the potential for a substantial cyberattack, most likely in an area such as the energy space. This risk is most presently in EMEA, but it\u2019s certainly top of mind among cybersecurity and national defense experts globally. <\/p>\n\n\n\n

Burnout will impact cyber resilience.<\/strong> Security teams around the world have been working long hours from home, adapting their organization\u2019s security posture to support all the shifts in key business systems. In an industry that is still facing a massive skills shortage, we shouldn\u2019t be surprised if burnout impacts security teams\u2019 ability to maintain the round-the-clock coverage required to respond to a crisis in a timely fashion.<\/p>\n\n\n\n

Security leaders will need to develop new strategies for supply chain threats. <\/strong>The standard due diligence and security assessments that CSOs have performed on third parties is no longer adequate given the escalating frequency and impact of supply chain attacks. Regulations like the E.U. NIS Directive 2.0 and cyber insurance providers are forcing companies to conduct more frequent and dynamic assessments of their supply chain risk and to better control the access third parties have to their networks. <\/p>\n\n\n\n

\u201cDefenders don\u2019t have to face an uphill fight in the battle to fend off cyberattacks. There is no test to our resolve, our ingenuity, and our defenses,\u201d said Day \u201cIn the new year, the cybersecurity industry as a whole should re-examine its threat posture and adjust its readiness footing by seeking out the right partners and implementing best practices.<\/p>\n","protected":false},"excerpt":{"rendered":"

As 2023 approaches, Greg Day predicts that security leaders across EMEA will need to implement a slew of new policies, strategies, and approaches to keep attackers at bay.<\/p>\n","protected":false},"author":40,"featured_media":68407,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"inline_featured_image":false,"_monsterinsights_skip_tracking":false,"_monsterinsights_sitenote_active":false,"_monsterinsights_sitenote_note":"","_monsterinsights_sitenote_category":0,"footnotes":""},"categories":[1],"tags":[1890,1271],"contributor":[9732],"class_list":["post-68405","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-other-tech-events","tag-cyberattacks","tag-cybereason","contributor-news-desk"],"featured_image_src":"https:\/\/techxmedia.com\/en\/wp-content\/uploads\/2022\/12\/cyber-readiness-Featured.png","author_info":{"display_name":"Techx Admin","author_link":"https:\/\/techxmedia.com\/en\/author\/techxadmin\/"},"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/techxmedia.com\/en\/wp-json\/wp\/v2\/posts\/68405","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/techxmedia.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/techxmedia.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/techxmedia.com\/en\/wp-json\/wp\/v2\/users\/40"}],"replies":[{"embeddable":true,"href":"https:\/\/techxmedia.com\/en\/wp-json\/wp\/v2\/comments?post=68405"}],"version-history":[{"count":0,"href":"https:\/\/techxmedia.com\/en\/wp-json\/wp\/v2\/posts\/68405\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/techxmedia.com\/en\/wp-json\/wp\/v2\/media\/68407"}],"wp:attachment":[{"href":"https:\/\/techxmedia.com\/en\/wp-json\/wp\/v2\/media?parent=68405"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/techxmedia.com\/en\/wp-json\/wp\/v2\/categories?post=68405"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/techxmedia.com\/en\/wp-json\/wp\/v2\/tags?post=68405"},{"taxonomy":"contributor","embeddable":true,"href":"https:\/\/techxmedia.com\/en\/wp-json\/wp\/v2\/contributor?post=68405"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}