DOROS HADJIZENONOS, Country Manager of Check Point South Africa, gives his security predictions for the coming year.
A year in cybersecurity can seem like an eternity. But despite the rapid changes, many things remain constant. Check Point’s top three predicted security threats for 2015 were the rapid growth in unknown malware, in mobile threats, and in critical vulnerabilities in commonly used platforms (Android, iOS and others). These were fully realised, and are likely to remain a significant threat. The cat-and-mouse game that has typified cybersecurity in recent years continues, with hackers constantly finding new ways in which to attack networks – as this year’s high-profile breaches at Anthem, Experian, Carphone Warehouse, Ashley Madison and TalkTalk showed.
Like most IT security professionals, I really want my predictions not to come true: I would prefer organisations didn’t get hacked or breached. But by anticipating the next wave of threats, we hope to help businesses stay on top of the evolving tactics and exploits that criminals will use to target them. So here are ten IT security threats and trends that I expect we will see during 2016.
‘Sniper’ and ‘shotgun’ malware
We believe that larger breaches in 2016 will be the result of custom-designed malware designed to get past the defences of specific organisations, such as the attack on US retailer Target. While generic, broad-brush attacks will continue to threaten individual users and small enterprises, hackers will raise their game when attacking larger organisations with more sophisticated security postures. They will use deeper, more sophisticated phishing and other social engineering tricks to gain access to the data that they want.
Moving to mobile
Mobile attacks continue to increase as mobile devices become more commonplace in the workplace, offering hackers direct and potentially lucrative access to personal and corporate data. Our 2015 Security Report found that 42% of organisations had suffered mobile security incidents which cost more than $250,000 to remediate, and 82% expected incidents to rise. This year has also seen several high-profile mobile vulnerabilities emerge, including Certifigate on hundreds of millions of Android devices and XcodeGhost, the first major malware infection targeting non-jailbroken iOS devices. We expect to find more major mobile vulnerabilities in the next year.
In the ongoing battle between hackers and security professionals, attackers are increasingly deploying more sophisticated, custom variants of existing malware and zero-days that can bypass traditional sandboxing technology. These new attack vectors require more proactive and advanced solutions that catch evasive malware. CPU-level sandboxing is able to identify the most dangerous threats in their infancy before they can evade detection and infect networks.
Attacks on critical infrastructure
In December 2014, a steel mill in Germany was hit by hackers who accessed the plant’s production network and caused ‘massive’ damage. Also, the US Department of Homeland Security that ‘Havex’ Trojan infections had compromised industrial control systems in over 1,000 energy companies across Europe and North America. Attacks on public utilities and key industrial processes will continue, using malware to target the SCADA systems that control those processes. And as control systems become increasingly connected, this will extend the potential attack surface – which will require better protection.
IoT and smart devices
The Internet of Things is still emerging and is unlikely to make a big impact in 2016. Nevertheless organisations need to think about how they can protect smart devices and prepare themselves for wider adoption of the IoT. The key questions users need to ask is ‘where is my data going?’ and ‘what would happen if someone gets hold of this data?’ A year ago, we discovered a flaw in SOHO routers worldwide that could allow hackers to hijack the router to launch attacks on any devices connected to it – and we will see more of these vulnerabilities in connected devices.
You wear it well
Wearables like smartwatches are making their way into the enterprise, bringing with them new security risks and challenges. There are a number of security concerns about data that is held on smartwatches, or that wearables could even be used by hackers to capture video and audio via mobile remote access Trojans, so organisations that permit these devices need to ensure that they are protected with encryption and strong passwords.
Trains, planes and automobiles
2015 saw the emergence of car hacking, in which the vehicle’s software is hijacked to take control of it. In July, Fiat Chrysler recalled 1.4 million Jeep Cherokee vehicles in the US after security researchers found that they could be hacked via the connected entertainment system. With modern cars featuring more gadgetry and connected systems than ever before, we need to apply protection to these in-car systems – and the same applies to the complex systems in passenger aeroplanes, trains and other forms of public transport.
Real security for virtual environments
Virtualisation has been adopted rapidly in the enterprise over recent years, whether it’s through SDN, NFV or cloud computing. Virtualised environments are complex and create new network layers, and it’s only now that we are seeing a real understanding of how to secure these environments. As organisations move to virtualised environments, security needs to be designed in from the outset to deliver effective protection.
New environments, new threats
2015 has seen the launch of a number of new operating systems, such as Windows 10 and iOS 9. The bulk of enterprise attacks in recent years have been on Windows 7, since adoption of Windows 8 was relatively low, but with Windows 10 experiencing a high uptake driven by the free download available, cyber-criminals will turn their attention to trying to exploit these new operating systems where updates are more frequent and users are less familiar with the environment.
Security consolidation – keep it simple!
To protect against multifaceted threats, security professionals are likely to increase their reliance on centralised security management solutions. With large enterprises having a plethora of different security products on their network, consolidation offers a way of reducing both complexity and cost. Having many point products and solutions quickly becomes unmanageable and can actually impede, rather than improve security, so consolidating security provides an effective way to cut complexity and make for easier management, so that new threats don’t get lost in the gaps between systems.
As selfie cameras rise, so must selfie etiquette
Selfies were once a sign of narcissism or self-obsession. Now they are the new normal, writes ARTHUR GOLDSTUCK.
You can blame Oxford Dictionaries for making the “selfie” respectable. After all, being named Word of the Year, as it was in 2013, does tend to soften some of the self-consciousness in this most self-conscious of actions.
Once seen as a symbol of narcissism and self-obsession, it is now the new normal, to the extent that most smartphones are sold on the basis of the front camera. Or, as that feature is now almost universally named by manufacturers, the “selfie camera”.
I was one of the hold-outs, having a near-allergy to the selfie. I still resist, but succumb more often than I would like. The reason for continued resistance is that it remains a big leap from the word becoming respectable to the action itself shedding its narcissistic image.
For most, it’s already happened, and for that you can blame Ellen DeGeneres. She choreographed the most famous group selfie yet at the 2014 Oscars, when she roped a bunch of actors into a group selfie, using the then-new Samsung Galaxy S5 smartphone. Her tweet of the photo became what was then the most retweeted posting ever on Twitter, and was estimated to have been worth a million dollars in marketing value to Samsung.
Ironically, it was Samsung’s up-and-coming challenger, Huawei, that came up with a new word for this type of selfie: the “groufie”. Thanks to an 8 Megapixel front camera on the new Huawei Ascend P7 camera that year which took the highest quality selfies – and groufies – possible on a smartphone at the time.
It didn’t end there, and selfies and groufies have morphed into variations like selfscapes (selfie in a landscape), skyfies (selfies from the air, using remote controlled devices) and jerkies (selfies to make an idiot out of yourself). I invented all of those on the fly, so it’s easy to imagine a new word emerging for every type of selfie.
Continue reading about selfie improvements through the years.
Mickey’s 90th for SA
Disney Africa announced the local launch of the Mickey the True Original campaign, joining the global festivities honouring 9 decades of Mickey Mouse, his heritage, personality and status as a pop-culture icon.
As 18 November 2018 marks 90 years since his first appearance in Steamboat Willie in November 1928, a series of world-wide celebrations will be taking place this year and South Africa is no different.
The campaign will come to life with engaging content and events that embrace Mickey’s impact on the past, present and future. The local festivities kick off in earnest this month, leading up to Mickey’s 90th anniversary on 18 November 2018 and beyond:
- An exclusive local design project where ten highly talented South African artists will apply their own inspiration and artistic interpretation on 6-foot Mickey Mouse statues.
- Once revealed to the public, the statues will form part of the Mickey the True Original South African Exhibition, inspired by Mickey’s status as a ‘true original’ and his global impact on popular culture. The exhibition will travel to 3 cities and delight fans and families alike as they journey with Mickey over the years. Featuring 4 sections highlighting Mickey’s innovation, his evolution, influence on fashion and also pop culture, the exhibition is in collaboration with Samsung and Edgars, and will visit:
o Sandton City, Centre Court: 28 September – 14 October
o Gateway Theatre of Shopping, Expo Explore Court: 19 October – 11 November
o Canal Walk Shopping Centre. Centre Court: 16 November – 26 November
- Samsung continues their collaboration with Disney as they honour Mickey’s 90th anniversary nationally at all Samsung and Edgars Stores. Entitled Unlocking the Imagination, fans are encouraged to visit these stores, take a selfie with a giant Mickey plush toy using their Samsung Galaxy Note9 and stand a chance to win not only a giant Mickey plush, but also an international family trip. Visit www.Samsung.com for more information
- Mickey’s 90th Spectacular, a two-hour prime-time special, will be screened on M-Net 101 later this year. The elegant affair will feature star-studded musical performances, moving tributes and never-before-seen short films. Superstars from music, film and television will join the birthday fun for the internationally beloved character.
- In addition, look out for special programming on Mickey’s birthday (18 November) across Disney Channel (DStv, Channel 303), Disney XD (DStv, Channel 304) and Disney Junior (DStv, Channel 309).
- In retailers, Edgars will be stocking a complete collection of trendy fashion, accessories and footwear for the whole family, inspired entirely by Mickey Mouse.
- Mickey will be the central theme of an in-store campaign nationwide this November and December, with brand new products, apparel, toys, as well as titles from Disney Publishing Worldwide, including books, arts & crafts and comics
- Discovery Vitality and Disney are celebrating healthy, happy families this festive season by offering helpful and exciting tips and tricks on how to eat nutritious, yet delicious, foods, all inspired by Mickey. There’s also a trip to Disneyland Paris up for grabs. Log on to www.discovery.co.za/vitality for information.
- And much more – check the press for updates
“Binding generations together more than any other animated character, Mickey Mouse is the “True Original” who reminds people of all ages of the benefits of laughter, optimism and hope,” says Christine Service, Senior Vice President and Country Manager of The Walt Disney Company Africa. “With his universal appeal and ability to emotionally connect with generations all over the world, no other character quite occupies a similar space in the hearts and minds of a global fan base and we are thrilled to be sharing these local festivities.”
Mickey’s birthday is celebrated in honour of the release of his first theatrical film, Steamboat Willie, on 18th November 1928, at the Colony Theatre in New York City. Since then, he has starred in more than 100 cartoons and can currently be seen on Disney Channel (DStv, Channel 303) in the Mickey Mouse cartoon series and on Disney Junior (DStv, Channel 309) in Mickey and the Roadster Racers.
South African fans are encouraged to share their Mickey Mouse moments on social media using the hashtag#Mickey90Africa.