Category Archives: Technology Risk

Want to scan your crypto wallet for risks? Check: AML crypto BTC, USDT, ETH. Checking cryptocurrency wallets for dirty money.

Companies Must Evolve to Keep Up With Hackers

Posted on by

If you ask a CFO if their company’s current cybersecurity strategy is working, it’s very likely that they do not know. While at first they may think it is, because the company’s bank accounts are untouched, an adversary could be lurking in their network and collecting critical data to later hold for ransom—threatening to destroy it if the money isn’t paid. The truth is that many organizations are lacking effective risk management that ensures the integrity and availability of their most essential data.

Corporate America needs to take the power back and stop hackers before they compromise networks and exfiltrate data for criminal uses, or simply threaten to destroy it for financial gain. To shift the power back in their favor, they must safeguard data, implement an effective risk management program, and invest in risk reduction activities. Organizations need to assess the maturity of their cybersecurity efforts, determine if they have any pre-existing conditions, and focus on risk reduction efforts that truly protect their data, while ensuring the ability to deliver products and services.

The fastest way to check for pre-existing conditions is by doing a compromise assessment to identify any current suspicious activity within their network. From there, they can determine what exactly needs to be done to reduce their organization’s cyber risk and develop a risk management plan that outlines clear steps for protecting their most critical assets.

To develop a cybersecurity risk management plan, executives need to first define the company’s “crown jewels”—the things that if compromised, would cause the most damage or inhibit the ability to deliver products or services that generate revenue. For instance, for a bank, this could be access to funds by their individual or business customers, or banking information that could be used for fraudulent purposes. Once an organization knows what it’s protecting, the executives can then create a security roadmap that ensures the secure delivery of products or services.

The security roadmap should start with a business impact assessment that identifies those crown jewels that are needed for delivery of essential services or producing products. These can include the data itself, technical architecture or systems used by their customers to transact business. Once these have been identified a prioritized risk reduction plan needs to be developed and tracked by the company’s leadership. Every facet of risk should be considered, from legal risk, to the consequences of a data breach, or inability to deliver services resulting from an intrusion or denial-of-service attack.

buy diflucan online https://silvermancare.com/wp-content/uploads/2023/10/jpg/diflucan.html no prescription pharmacy

While security assessments and roadmaps are essential for defining an organization’s adequate cyber defenses, one of the biggest mistakes we see businesses make is being reactive when it comes to their defenses—relying on traditional technologies that only identify known threats and leverage Indicators of Compromise (IoCs). This method does not capture new exploits fast enough, nor versions of malware or other obfuscation techniques that are introduced by sophisticated adversaries. A great example is the sheer speed at which WannaCry ransomware spread to organizations of all sizes across the globe. Adversaries are capitalizing on this reactive security shortcoming by taking advantage of this window of opportunity to comprise data or networks.

Instead, organizations must take a proactive approach that focuses on indicators of attack (IoAs) that identify adversary behavior indicating malicious activity, such as code execution or lateral movement. IoAs can alert businesses to adversary activity before any damage is done. To effectively make use of this data, businesses also need to leverage threat intelligence for deeper insights into these IoAs.

Threat intelligence provides a crucial layer of information on adversary motives, tactics, techniques and procedures. For instance, a bank could look at a threat and see if this particular adversary typically targets the financial services industry, which regions they operate in and the motive behind their attacks.

Going one step further, organizations should leverage technology that enables threat intelligence to be shared rapidly and can protect numerous customers at once. At the end of the day, effective security requires a community effort.

buy augmentin online https://silvermancare.com/wp-content/uploads/2023/10/jpg/augmentin.html no prescription pharmacy

Corporate America needs to come together and truly leverage the power of crowdsourced intelligence—to keep from becoming victims of the next big attack.

From a lack of risk management plans, to reliance on reactive security measures, there are a number of areas where companies are falling short of having an adequate cyber defense. By putting the necessary plans in place to secure the integrity of their critical data, taking a proactive approach to cyber threats and working together across industries and businesses, corporate America can collectively build a stronger cyber defense.

Reputational Crises Put CEOs at Risk

Posted on by

When reputational crises hit, market cap, sales, margins and profits are all on the line. And these situations are becoming more frequent—and more costly—than ever, with a recent study showing an increase in losses from reputational attacks increasing by more than 400% in the past five years.

But it is not only the corporate entity facing challenges, individuals in leadership—particularly CEOs—face personal risk as well. It has become clear that CEOs need tools to protect themselves as well as their companies’ reputations. Since damage from reputational attacks takes place in the court of public opinion, traditional liability solutions, such as directors and officers coverage, are not effective. But new tools are available in the form of a reputation assurance solution that can help deter attacks from even happening and bundled insurances to mitigate the damage when they do occur.

Research by Steel City Re has found that:

  • Financial losses related to reputational attacks have increased by more than 400% in the past five years, a trend that continues.
  • There is an increase in public anger and, as a result, more blame is being cast upon recognizable targets, such as CEOs.
  • Anger by stakeholders is fueled by disappointment—the gap between expectations and reality—which is all too often fueled by the company’s own actions.

Against that backdrop, the turnover rate among CEOs is increasing, with 58 of the S&P 500’s CEOs transitioning out of their jobs in 2016 according to SpencerStuart (although not all as a result of reputational crises). That is the highest number since 2006, a 13% increase over 2015, and a 57% increase over 2012.

If that weren’t enough reason for concern, history shows that when strong companies and their brands come under fire, their reputations eventually recover, despite the initial and medium-term impacts. Individual reputations of those companies’ leadership are not nearly as resilient, however, especially at a time when society; be it the media, social media, politicians or direct stakeholders; seems intent on personifying crises and affixing blame on individuals in positions of authority. And for CEOs, a reputational crises can affect their career and compensation for many years ahead.

In this environment, it is essential that risk managers understand the tools that are available to protect both companies and senior executives personally. Serving as a third-party warranty and available only to highly qualified insureds, reputation insurance attests to the efficacy of the company’s governance and operational practices, as adopted and overseen by the board and implemented by the CEO. Such coverage can deter reputational attacks in much the same way as a security sign on the front lawn deters burglars. It is a sign of quality governance. And when incidents do occur, it provides a built in alternative narrative to counter the attacks that are bound to occur. Finally, it gives the company and key individuals financial indemnification to mitigate any damage that ultimately does take place.

Just as “doing the right thing” did not protect directors and officers from liability in the era before the wide adoption of D&O insurance, it is no guarantee that attacks in the court of public opinion won’t take a significant financial toll. But it is one of the few solutions proven in the court of public opinion. In today’s culture, reputations are in jeopardy as never before and risk managers must utilize all tools available to protect those on the front lines.

Telemetry Data: What Information Works Best?

Posted on by

Direct measurement of driving behavior, the heart of usage-based insurance (UBI), is the best way to match risk to premium. Insurers offer insurance discounts to safe drivers via UBI in order to acquire and retain the best risks. As a result, safer driving is promoted among these customers, which can amount to savings for organizations insuring drivers.

UBI is among the first attempts by insurers to adopt state-of-the-art technology for the underwriting process. Insurance companies and other service providers have struggled with some essential questions including those about the kind, resolution, frequency, and duration of data to collect, as well as what sensors to use. Indeed, many companies underwent independent efforts to establish data collection methodologies, generally resulting in a lack of any industry standard data “dictionary” or shared methodology for UBI. Still, it is possible to identify common approaches to collecting UBI data and how they are likely to evolve in the future.

Since the initial trials of UBI, the three cost factors—hardware, data, and analytics—have been the primary considerations as to how and what data elements each company collects. And even though prices of all three generally continue to decrease, the typical cost of setting up a full UBI program with filed predictive models remains significant.
buy clomid online https://galenapharm.com/pharmacy/clomid.html no prescription

In the absence of industry-wide standards, it can be difficult to outline the breadth of the types of data collected. Even so, the following list covers most of the UBI data types found in the auto insurance market:

Verified mileage: This most basic mean of UBI is based on the well-validated assumption that more driving means more exposure to risk. Still, the advantage of verified mileage over declared mileage alone usually doesn’t justify a UBI operation for many companies.

Trip timing: A small advancement over verified mileage is trip timing. This goes beyond the pure mileage factor to estimate risk by studying when a driver is on the road, on the premise that some time slots tend to be riskier than others (Friday night, for example, with associated risk characteristics such as fatigue or drunk driving).

Driving events: Basic, yet powerful, behavioral aspects of driving are measured through collection of driving event data, mostly braking, accelerating, and turning. Sometimes absolute speeding events (exceeding 80 mph) and relative speeding events over the posted speed limit are recorded. Note, however, that onboard telematics units have relatively limited accuracy in collecting such data.

Full data log: As dongles came to market, they introduced improved collection capabilities, such as advanced GPS modules, CPU, accelerometers, OBDII, and large storage. With the falling cost of mobile data, companies started collecting full data logs and compressed them on dongles. Full data logs may provide endless analytics opportunities.

Smartphone data: The first technology to break the cost paradigm centering on device, data, and analytics is that operating from smartphones. Smartphones are also smart telematics devices owned by many, offering great collection and storage capabilities and data transfer at practically no additional cost. Unfortunately, smartphone data introduces many analytic challenges, including not knowing whether an insured is a driver or a passenger, whether the phone is turned off, and whether a driver operates an insured car.

What should we expect in the future? Against the background of rapidly changing technology and growing analytic complexity, future UBI is likely to rely on some of the following data elements:

Mobile data: As mobile apps become more sophisticated and reliable and as phone sensors become more accurate, more insurers are likely to use data obtained from mobile apps as a low-cost solution.

OEM data: Connected cars are growing in number (Gartner forecasts that by 2020, some 250 million cars will be connected). Data sets collected by connected cars aren’t as rich as those collected by dongles and provide more basic attributes (such as verified mileage, trip timing, and driving events). Nevertheless, they allow insurers to consume data more easily through data exchanges, where original equipment manufacturers (OEMs) take responsibility for the data collection process.

online pharmacy symbicort with best prices today in the USA

Clearly, OEM capabilities will probably become even more advanced as manufacturers see more value from their investment.
Distribution of projected connected cars (source Business Insider)

Advanced Driver Assistance Systems (ADAS) data: ADAS can provide driving alerts and override driver inputs in certain situations. To date, these devices haven’t become part of the UBI ecosystem but can potentially contribute tremendous value to analytics for driving behavior and may play a significant role in the future.

online pharmacy cozaar with best prices today in the USA

A final question about autonomous cars: Will they render UBI obsolete? Probably not, and for two reasons.

online pharmacy imodium with best prices today in the USA

First, penetration of autonomous cars and shared vehicles may well be slow and gradual. Second, many events currently measured by UBI will probably remain important when autonomous driving is used (for example, time and destination of journeys). UBI is likely here to stay.

North Korea Now Suspected in Ransomware Attack

Posted on by

The massive cyberattack that has struck businesses, government agencies and citizens in more than 150 countries may be tied to hackers affiliated with North Korea. Called WannaCry, the ransomware encrypts the victim’s hard drive and demands a ransom of about $300 in the virtual currency bitcoin.

According to the Washington Post:

Several security researchers studying “WannaCry” on Monday found evidence of possible connections to, for instance, the crippling hack on Sony Pictures Entertainment in 2014 attributed by the U.S. government to North Korea. That hack occurred in the weeks before Sony released a satiric movie about a plot to kill North Korean leader Kim Jong Un.

The New York Times reported that the malicious software, based on a vulnerability included in the National Security Agency tools published by the Shadow Brokers hacker group, was distributed via email. The ransomware takes advantage of vulnerabilities in Microsoft Windows systems, generating the largest ransomware attack to date. Although the flaw was patched by the company months ago, the wide spread of the attack illustrates how many users fail to update their software. Institutions and government agencies affected included the Russian Interior Ministry, FedEx in the United States and Britain’s National Health Service.

Organizations are advised to save their data and take other measures to avoid being hacked. Kroll said that while the particular ransomware variation involved in hundreds of thousands of incidents has now been rendered largely harmless, its cyber security and investigations team “strongly recommends that organizations recognize that a small change in the malware code could reactivate it. So action should be taken in conjunction with your technology unit to reduce your risk and prepare for inevitable future similar attacks. If the malware has entered your network, it has the ability to spread—and spread rapidly.”

According to Kroll:

  • Obsolete versions of Microsoft Windows are particularly vulnerable. We understand that there may be very specific circumstances that require you to use versions that are no longer supported, but now is the time to revisit the topic. See if there is any way you could use a supported operating system running a virtual version of the operating system you need.
  • Microsoft has been working to roll out updates that can fix the underlying security weakness that this malware exploits. You should make sure that both your personal and business machines running Windows are updated. We know that many people don’t want to take the time to close out all their files and restart their computers to allow updates to occur, but this is an important defense against the WannaCry ransomware. As an indicator of how serious the threat is, note that Microsoft has even released a security patch for the old Windows XP system. Please take steps to assure that all relevant machines running the Windows operating system are updated.
  • Organizations that don’t have well-thought-out backup and recovery plans are also very vulnerable. Management should be asking if there is a plan to assure that all important files are backed up in a way that will prevent a ransomware infection from attacking both the primary files and the backups.

President Trump ordered homeland security adviser Thomas P. Bossert to coordinate a government response to the spread of malware and find out who was responsible. According to the Times:

“The source of the attack is a delicate issue for the United States because the vulnerability on which the malicious software is based was published by a group called the Shadow Brokers, which last summer began publishing cybertools developed by the National Security Agency.”

Government investigators, while not publicly acknowledging that the computer code was developed by American intelligence agencies, say they are still investigating how the code got out. There are many theories, but increasingly it looks as though the initial breach came from an insider, perhaps a government contractor.

In a report, How to Protect Your Networks from Ransomware, the U.S. government recommends that users and administrators take preventative measures, including:

  • Implement an awareness and training program. Because end users are targets, employees and individuals should be aware of the threat of ransomware and how it is delivered.
  • Enable strong spam filters to prevent phishing emails from reaching the end users and authenticate inbound email using technologies like Sender Policy Framework (SPF), Domain Message Authentication Reporting and Conformance (DMARC), and DomainKeys Identified Mail (DKIM) to prevent email spoofing.
  • Scan all incoming and outgoing emails to detect threats and filter executable files from reaching end users.
  • Configure firewalls to block access to known malicious IP addresses.
  • Patch operating systems, software, and firmware on devices. Consider using a centralized patch management system.
  • Set anti-virus and anti-malware programs to conduct regular scans automatically.
  • Manage the use of privileged accounts based on the principle of least privilege: no users should be assigned administrative access unless absolutely needed; and those with a need for administrator accounts should only use them when necessary.