If you're a business leader, you've heard, read or thought about it more than you probably want to: the ceaseless war to protect your company's network and data from a hacker underworld that's increasingly sophisticated and ambitious.
\r\nMajor breaches are a PR nightmare that no company wants to experience. Recall when ride-sharing giant Uber belatedly announced it had suffered a breach that exposed the personal information of 57 million people. Of those affected, 25 million lived in the United States, and more than 4 million were Uber drivers. In this case, the hacker agreed to destroy the data in exchange for a \"bug bounty\" payment from Uber, which was far less than the cost of the damage to the brand when details surrounding its mishandling of the breach were revealed.
\r\nIf the hacker had more malicious intentions than monetary gain, there's no telling how bad it might have been for Uber. Most companies that suffer such breaches aren't as lucky.
\r\nWhen hackers hold data for ransom, their threats are usually for real. Just ask victims of the WannaCry virus or Sony hacks, which forced several major companies to lose time, money, credibility and irreplaceable data when they refused to give in to the hackers.
\r\nBusinesses today must understand how hackers operate and stay on top of the ever-evolving threats in our digital world.
\r\nSecurity breaches often occur where we least expect them, and many areas still fly under the radar. Here are three lesser-known attack vectors and ways to mitigate the risk they pose to your company.
\r\nYou might not consider your office printers a serious security threat, but several recent incidents have called attention to the fact that modern printers are more than just paper pushers. They're sophisticated network computers, which means they deserve the same levels of security attention and protection as servers and employee workstations.
\r\nTo lock down your office printers, start by implementing firewalls and using strong passwords. When manufacturers push updates to cover new security risks, download them quickly. Stay current with industry best practices, and make sure your printers are included in your organization's security policy and procedures.
\r\nIt's also critical that you deploy secure pull-printing technology: This allows employees to submit their print jobs to a single secure queue and use their access cards or login credentials to release (pull) their documents from any printer on the network. This simple workflow prevents unauthorized access to sensitive documents and provides the added benefit of reducing waste and resource costs.
\r\nThe BYOD (bring your own device) trend is still going strong, as companies small and large let employees use their personal smartphones for work. And according to Gallup, the number of remote workers has grown from 39 percent to 43 percent in just four years. While many of these people claim using their own devices makes them more efficient, the added security risks should not be overlooked.
\r\nWhen everyone is operating a unique device connected to the company network, the opportunities for hackers multiply. One hacked personal account can lead attackers into other accounts, which might store sensitive company information. Then there's the added risk of offsite theft: If a smartphone is stolen, the thief could obtain your intellectual property or financial information and publish or try to sell it.
\r\nTo help stop thieves and hackers from turning personal invasions into company crises, you can use one of many firewall-as-a-service offerings. These cloud services work from anywhere, freeing employees to use their smartphones while reducing risk and giving employers peace of mind. The technology prevents thieves from accessing protected data and gives companies greater control of their networks.
\r\nHackers don't always have to be elite programmers – not when employees inadvertently tell them what they need to know.
\r\nSocial hackers, for example, use social media profiles to gather information on their targets, then pretend to be their victims so employees reveal sensitive information. WHMCS, an online company that stores credit card data, fell victim to this scheme when members of a hacker group stalked a database administrator online and later called in for a password reset. Because the administrator's social media profile had revealed answers to his security questions – hometown, important dates, family names – the group was able to impersonate him, gain access to the network, download over a gigabyte of credit card numbers, and wipe the company's databases clean.
\r\nEncourage employees to always use strong passwords, and educate them about the increasing use of fake social media accounts among identity thieves. Regular employee training will create a culture of informed vigilance and help protect your company from social engineering threats.
\r\nTwo-factor authentication is another best practice to follow. Secure passwords aren't enough these days; adding a second factor – such as biometrics (thumbprint or facial recognition) or code verification via text message – provides an important extra layer of security. Many people consider additional authentication methods a nuisance (only 10 percent of Gmail accounts use it, for example), which again points to the critical role of employee education. A vigilant workforce might be the single best defense against hackers.
\r\nThe next big data breach is always lurking around the corner, but businesses don't have to live in fear of losing critical data. By including these and other threats in a comprehensive security program, you'll have done more than many companies do to secure your network and data.
\n","docType":"article","guid":"articles_255472a734e19a2c67d4c6d49032a8e8","lastModified":"2018-04-05T07:00:00.000Z","published":"2018-04-05T07:00:00.000Z","structuredData":null,"subtitle":"Many don't consider these three common security weaknesses.","template":"legacy","title":"Has Your Company Secured These Overlooked Attack Vectors?","type":"article","author":{"avatar":null,"bio":"Kevin Pickhardt is the CEO of Pharos Systems International, an enterprise print solutions provider based in Rochester, New York. Kevin guides the continuing evolution of Pharos’ service to enterprise clients around the world, with a specific focus on cloud services, corporate strategy, change management and leadership development.","name":"Kevin Pickhardt","image":null,"slug":null,"social":{"facebook":"","linkedin":"https://www.linkedin.com/in/kevin-pickhardt/","twitter":"https://twitter.com/kevinpickhardt","website":"https://pharos.com/"},"status":"enabled","title":null,"type":"New BDC Member","user":{"imagePath":"https://staging.business.com/images/uploads/user/profile/b4017d779df163e6d3bb91bcec5d74eb88dc7.jpg","profile":{"company":"Pharos Systems International","jobTitle":"CEO","website":"https://pharos.com/"}}},"breadcrumbs":null,"channels":{"primary":{"name":"Technology","slug":"technology"},"sub":{"name":"Security","slug":"security"}},"meta":{"robots":"index, follow","description":"Many companies don't consider these three common security weaknesses. Here's what they are and how to make them more secure.","title":"3 Overlooked Attack Vectors in Business - business.com"},"parsedContent":{"toc":[{"id":"3-security-vectors-you-may-not-have-considered","title":"3 security vectors you may not have considered"}],"json":[{"component":"p","children":["If you're a business leader, you've heard, read or thought about it more than you probably want to: the ceaseless war to protect your company's network and data from a hacker underworld that's increasingly sophisticated and ambitious."]},{"component":"p","children":["Major breaches are a PR nightmare that no company wants to experience. Recall when ride-sharing giant Uber belatedly announced it had ",{"component":"a","props":{"href":"https://www.reuters.com/article/us-uber-cyber-congress/uber-says-hackers-behind-2016-data-breach-were-in-canada-florida-idUSKBN1FQ2YO","target":"_blank","rel":"nofollow"},"children":["suffered a breach"]}," that exposed the personal information of 57 million people. Of those affected, 25 million lived in the United States, and more than 4 million were Uber drivers. In this case, the hacker agreed to destroy the data in exchange for a \"bug bounty\" payment from Uber, which was far less than the cost of the damage to the brand when details surrounding its mishandling of the breach were revealed."]},{"component":"p","children":["If the hacker had more malicious intentions than monetary gain, there's no telling how bad it might have been for Uber. Most companies that suffer such breaches aren't as lucky."]},{"component":"p","children":["When hackers hold data for ransom, their threats are usually for real. Just ask victims of the ",{"component":"a","props":{"href":"https://www.forbes.com/sites/kevinmurnane/2017/05/13/how-to-protect-yourself-from-the-global-wanacry-ransomware-attack/#2de89d5982dd","title":"","rel":"nofollow"},"children":["WannaCry virus"]}," or ",{"component":"a","props":{"href":"https://www.washingtonpost.com/news/the-switch/wp/2014/12/18/the-sony-pictures-hack-explained/","title":"","rel":"nofollow"},"children":["Sony hacks"]},", which forced several major companies to lose time, money, credibility and irreplaceable data when they refused to give in to the hackers."]},{"component":"p","children":["Businesses today must understand how hackers operate and stay on top of the ever-evolving threats in our digital world."]},{"component":"h2","props":{"id":"3-security-vectors-you-may-not-have-considered"},"children":["3 security vectors you may not have considered"]},{"component":"p","children":["Security breaches often occur where we least expect them, and many areas still fly under the radar. Here are three lesser-known attack vectors and ways to mitigate the risk they pose to your company."]},{"component":"h3","children":["1. Lock down your office printers and secure your documents."]},{"component":"p","children":["You might not consider your office printers a serious security threat, but several ",{"component":"a","props":{"href":"https://www.nytimes.com/2016/03/29/nyregion/hacker-weev-says-he-printed-anti-semitic-and-racist-fliers-at-colleges-across-us.html","target":"_blank","rel":"nofollow"},"children":["recent incidents"]}," have called attention to the fact that modern printers are more than just paper pushers. They're sophisticated network computers, which means they deserve the same levels of security attention and protection as servers and employee workstations."]},{"component":"p","children":["To lock down your office printers, start by implementing firewalls and using strong passwords. When manufacturers push updates to cover new security risks, download them quickly. Stay current with industry best practices, and make sure your printers are included in your organization's security policy and procedures."]},{"component":"p","children":["It's also critical that you deploy secure pull-printing technology: This allows employees to submit their print jobs to a single secure queue and use their access cards or login credentials to release (pull) their documents from any printer on the network. This simple workflow prevents unauthorized access to sensitive documents and provides the added benefit of reducing waste and resource costs."]},{"component":"h3","children":["2. Protect employee devices."]},{"component":"p","children":["The BYOD (bring your own device) trend is still going strong, as companies small and large let employees use their personal smartphones for work. And according to Gallup, the number of remote workers has grown from ",{"component":"a","props":{"href":"http://news.gallup.com/reports/199961/7.aspx","target":"_blank","rel":"nofollow"},"children":["39 percent to 43 percent in just four years"]},". While many of these people claim using their own devices makes them more efficient, the added security risks should not be overlooked."]},{"component":"p","children":["When everyone is operating a unique device connected to the company network, the opportunities for hackers multiply. One hacked personal account can lead attackers into other accounts, which might store sensitive company information. Then there's the added risk of offsite theft: If a smartphone is stolen, the thief could obtain your intellectual property or financial information and publish or try to sell it."]},{"component":"p","children":["To help stop thieves and hackers from turning personal invasions into company crises, you can use one of many firewall-as-a-service offerings. These cloud services work from anywhere, freeing employees to use their smartphones while reducing risk and giving employers peace of mind. The technology prevents thieves from accessing protected data and gives companies greater control of their networks."]},{"component":"h3","children":["3. Beware of social engineering."]},{"component":"p","children":["Hackers don't always have to be elite programmers – not when employees inadvertently tell them what they need to know."]},{"component":"p","children":["Social hackers, for example, use social media profiles to gather information on their targets, then pretend to be their victims so employees reveal sensitive information. WHMCS, an online company that stores credit card data, ",{"component":"a","props":{"href":"https://www.inc.com/magazine/201312/lindsay-blakely/what-a-security-pro-avoids-online.html","target":"_blank","rel":"nofollow"},"children":["fell victim to this scheme"]}," when members of a hacker group stalked a database administrator online and later called in for a password reset. Because the administrator's social media profile had revealed answers to his security questions – hometown, important dates, family names – the group was able to impersonate him, gain access to the network, download over a gigabyte of credit card numbers, and wipe the company's databases clean."]},{"component":"p","children":["Encourage employees to always use strong passwords, and educate them about the increasing use of fake social media accounts among identity thieves. Regular employee training will create a culture of informed vigilance and help protect your company from social engineering threats."]},{"component":"p","children":["Two-factor authentication is another best practice to follow. Secure passwords aren't enough these days; adding a second factor – such as biometrics (thumbprint or facial recognition) or code verification via text message – provides an important extra layer of security. Many people consider additional authentication methods a nuisance (only ",{"component":"a","props":{"href":"https://www.theregister.co.uk/2018/01/17/no_one_uses_two_factor_authentication/","target":"_blank","rel":"nofollow"},"children":["10 percent of Gmail accounts"]}," use it, for example), which again points to the critical role of employee education. A vigilant workforce might be the single best defense against hackers."]},{"component":"p","children":["The next big data breach is always lurking around the corner, but businesses don't have to live in fear of losing critical data. By including these and other threats in a comprehensive security program, you'll have done more than many companies do to secure your network and data."]}]},"resource":null,"sponsorship":null,"thumbnail":{"path":"https://staging.business.com/images/content/5ac/649ee92a3a4d15e8b4582/1500-0-","caption":"Rawpixel.com/Shutterstock","isBlurred":true},"bestPicks":null},"related":{"relatedArticles":[{"title":"From COVID-19 to Hurricane Season: Disaster Preparedness for Small Business","canonical":"https://www.business.com/articles/business-disaster-prep/","slug":"business-disaster-prep","thumbnail":"https://www.business.com/images/content/5e7/a495e5a215eb11d8b4569/1500-0-","dek":"Natural disasters – whether a hurricane, tornado or outbreak like COVID-19 – can have a disastrous effect on small businesses, but they don't have to. Here's how to weather a disaster successfully.","lastModified":"2020-03-25T15:19:00Z","published":"2018-09-26T07:00:00Z","sponsored":false},{"title":"Using Lean Strategies to Achieve Team Synergy and Efficiency","canonical":"https://www.business.com/articles/lean-strategies-team-efficiency/","slug":"lean-strategies-team-efficiency","thumbnail":"https://www.business.com/images/content/5be/480e49c658a51108b458c/1500-0-","dek":"Learn more about lean manufacturing strategies and how to implement them in your business.","lastModified":"2018-11-08T08:00:00Z","published":"2018-11-08T08:00:00Z","sponsored":false},{"title":"5 Preventable Human Errors That Leave Your Company Vulnerable to a Cyberattack","canonical":"https://www.business.com/articles/preventable-human-errors/","slug":"preventable-human-errors","thumbnail":"https://www.business.com/images/content/5b0/306f192a3a4090f8b4577/1500-0-","dek":"Most cyberattacks stem from internal human error, but companies can protect themselves.","lastModified":"2018-05-21T07:00:00Z","published":"2018-05-21T07:00:00Z","sponsored":false},{"title":"How to Assess the Cybersecurity Risk of Your Small Business","canonical":"https://www.business.com/articles/assess-small-business-cybersecurity/","slug":"assess-small-business-cybersecurity","thumbnail":"https://www.business.com/images/content/5ed/118db7b437422298b4576/1500-0-","dek":"Security risk profiles can help quantify cybersecurity risk.","lastModified":"2020-06-03T13:41:00Z","published":"2018-06-15T13:30:00Z","sponsored":false},{"title":"PowerShell: Everything You Need to Know","canonical":"https://www.business.com/articles/powershell-everything-you-need-to-know/","slug":"powershell-everything-you-need-to-know","thumbnail":"https://www.business.com/images/content/5b8/998581039eb8f738b457b/1500-0-","dek":"What you need to know to unlock Microsoft PowerShell's full capabilities.","lastModified":"2018-09-05T17:00:00Z","published":"2018-09-05T17:00:00Z","sponsored":false},{"title":"Mobile Wallet Guide: Google Pay vs. Apple Pay vs. Samsung Pay - 08-05","canonical":"https://staging.business.com/articles/google-pay-vs-apple-pay-vs-samsung-pay/","slug":"google-pay-vs-apple-pay-vs-samsung-pay","thumbnail":"https://staging.business.com/images/content/5c5/afd7f54d26d67178b458d/1500-0-","dek":"Edit 07-24 - subtitle","lastModified":"2019-08-05T20:58:00Z","published":"2018-06-21T16:05:00Z","sponsored":null},{"title":"Mobile Wallet Guide: Google Pay vs. Apple Pay vs. Samsung Pay","canonical":"https://www.business.com/articles/google-pay-vs-apple-pay-vs-samsung-pay/","slug":"google-pay-vs-apple-pay-vs-samsung-pay","thumbnail":"https://www.business.com/images/content/5c5/e0a269c658a457c8b4591/1500-0-","dek":"You no longer need to carry a bulky wallet filled with numerous credit cards or cash.","lastModified":"2018-06-21T16:06:00Z","published":"2018-06-21T16:05:00Z","sponsored":false},{"title":"Decoding the Hierarchy of Data Protection","canonical":"https://www.business.com/articles/data-protection-hierarchy/","slug":"data-protection-hierarchy","thumbnail":"https://www.business.com/images/content/5ad/e2b331039eba5148b456a/1500-0-","dek":"What are your options for protecting your data and how do you decide on a strategy?","lastModified":"2018-04-23T19:00:00Z","published":"2018-04-23T19:00:00Z","sponsored":false},{"title":"5 Tips for Developing a More Secure IoT Policy for Your Organization","canonical":"https://www.business.com/articles/developing-a-more-secure-iot-policy/","slug":"developing-a-more-secure-iot-policy","thumbnail":"https://www.business.com/images/content/5a8/320ed51ee478b128b4568/1500-0-","dek":"Eliminate vulnerabilities, strengthen your data and protect your business.","lastModified":"2018-02-13T08:00:00Z","published":"2018-02-13T08:00:00Z","sponsored":false},{"title":"What to Do if ICE Serves Your Business With a Form I-9 Audit","canonical":"https://www.business.com/articles/ice-serves-i-9-audit/","slug":"ice-serves-i-9-audit","thumbnail":"https://www.business.com/images/content/5e6/64def7b43740a2a8b456e/1500-0-","dek":"Make sure you're prepared should Immigration and Customs Enforcement come knocking.","lastModified":"2020-03-10T15:00:00Z","published":"2018-09-17T18:00:00Z","sponsored":false},{"title":"How Crooks Hack Passwords and How You Can Protect Your Business","canonical":"https://www.business.com/articles/how-crooks-hack-passwords/","slug":"how-crooks-hack-passwords","thumbnail":"https://www.business.com/images/content/5a7/2321651ee47ea618b4568/1500-0-","dek":"The use of traditional passwords is a slippery slope for companies these days.","lastModified":"2018-01-31T08:00:00Z","published":"2018-01-31T08:00:00Z","sponsored":false},{"title":"How to Protect Your Web Application – Even If You Don't Own Sensitive Data","canonical":"https://www.business.com/articles/protecting-web-applications/","slug":"protecting-web-applications","thumbnail":"https://www.business.com/images/content/5b5/204c251ee47ed578b4568/1500-0-","dek":"Keep you web application and customer data secure by following these 4 steps.","lastModified":"2018-07-20T07:00:00Z","published":"2018-07-20T07:00:00Z","sponsored":false}],"relatedReviews":[{"doc_type":"category","thumbnail":"https://staging.business.com/images/rz/5df908cc5a215e8c4a8b4568/conferencecall_Antonio_Diaz_Getty.jpg","canonical":"https://staging.business.com/categories/best-conference-call-services/","title":"The Best Conference Call Services of 2021","dek":"Which conference call service is right for your business in 2021? We review the top-rated services.","slug":"best-conference-call-services","lastModified":"2021-03-17T18:17:00Z"},{"doc_type":"category","thumbnail":"https://staging.business.com/images/rz/5e00d4787b43745d6a8b456e/Laptop_undrey_getty.jpg","canonical":"https://staging.business.com/categories/employee-monitoring-software/","title":"The Best Employee Monitoring Software of 2021","dek":"We've narrowed down the best employee monitoring software for businesses. Check out our best picks and reviews.","slug":"employee-monitoring-software","lastModified":"2021-03-05T15:40:00Z"},{"doc_type":"category","thumbnail":"https://staging.business.com/images/rz/5df905909c658a7e538b4567/Faxing_junce_Getty.jpg","canonical":"https://staging.business.com/categories/online-fax-services/","title":"The Best Online Fax Services of 2021","dek":"Online fax services are growing as more companies divest from conventional fax machines in favor of an automated, scalable and cost-effective option. Here's a look at some of the best online fax services on the market. ","slug":"online-fax-services","lastModified":"2021-03-02T16:07:00Z"}],"relatedSponsoredArticles":null}},"pageContext":{"displayModified":"2018-04-05T07:00:00.000Z","template":"legacy","title":"Has Your Company Secured These Overlooked Attack Vectors?","meta":{"robots":"index, follow"},"docType":"articles","slug":"3-overlooked-attack-vectors","canonical":"https://staging.business.com/articles/3-overlooked-attack-vectors/","skipTOC":false}},"staticQueryHashes":[]}