AI can be an excellent tool for your business and cybercriminals who use it to improve attacks on your systems. They’re using AI to learn how to bypass spam filters, probe for malware detection’s weak spots, and target employees based on their social media profiles.
How can you protect your business? One of the best ways is to train your employees on security policies and why following them is vital. Have the procedures in a written format that’s easy to find.
Updating your anti-virus software as soon as changes are released and automatically backing up data is necessary but may no longer keep your business safe. Hackers up the ante with “CEO fraud and “spearphishing.” A sophisticated form of phishing, an email appears to come from the CEO or professional LinkedIn connection.
To prevent CEO fraud, secure your executives’ work-from-home networks. Train everyone in the company to check the sender’s email address, no matter who sent it. Everyone should recognize red flags in the message, like urgency and new account routing numbers.
With LinkedIn, it’s best not to click on links sent via messaging and scrutinize the profile before connecting. Red flags include spotty employment history and mismatched credentials.
The “pass-the-cookie” scheme bypasses passwords and is very dangerous. Hackers steal the authentication or session cookie that web browser-based accounts create so users don’t have to log in each time. There’s no way to detect the theft.
A few ways to discourage pass-the-cookie attacks include client certificates, dynamic tokens, and browser fingerprinting. There is no easy solution right now. Clearing cookies frequently will frustrate employees.
Author: Kris Keppeler is a writer who finds technology fascinating and loves humor. She writes on Medium.com, and for Women of Wisdom. An award-winning podcast producer who enjoys telling funny stories. Follow her on Twitter @KrisNarrates or on LinkedIn.
Small Business Solutions 