Cisco: Companies More Proactive About Cybersecurity

The ransomware attacks of 2017 and high-profile credit card system hacks in recent years have convinced organizations that they need to address security before they become victims.

The high-profile hacks of credit card systems over the past few years and the scourge of ransomware attacks that reached lofty levels in 2017 appears to have convinced businesses to become more proactive about cybersecurity, according to an expert in Cisco Systems security services group.
In an interview with Security Now at this weeks Cisco Live 2018 conference in Orlando, Fla., Sean Mason, director of threat management and incident response for Ciscos Security Advisory Services, said he has seen a shift over the past couple of years in customers becoming increasingly interested in learning how to protect themselves against hacks and other cybercrimes rather than simply reacting when an attack occurs.
For years there was a lot of news and a lot of press around nation-state attacks, and to be fair, a lot more organizations were impacted than truly thought they were, Mason said, adding that their thinking was, Im not doing X, Y, Z, so I dont have to worry about that problem. That wasnt necessarily true, but that was the mentality. Then we started seeing a lot of credit card hacks.
(Source:
iStock
)

Many well-known companies were victims of attacks in which cybercriminals stole personal data from millions of customers -- think Equifax, Target, Home Depot, Chipotle and, most recently, MyHeritage. Still, there were businesses that still rationalized their situation by thinking that since they dont process credit card data, they didnt need to worry. (See
MyHeritage Data Breach of 92M Accounts Raises Many Questions
.)
Then what really went mainstream a couple of years ago was ransomware, he said. I hate saying that, because its a lot less sophisticated in some cases than dealing with a nation-state or even cybercriminals going after credit card data. Its a different way of doing things. Its extremely noisy … and the types of organizations that were hit, all of a sudden it was, Oh my gosh, that could be us, and it really hit home that it no longer just somebody elses problem. It was, This could be us tomorrow. That might have really been the trigger.
Ransomware wasnt new; stealing corporate or personal data and holding onto it until a ransom is paid, usually in cryptocurrency like Bitcoin. However, the malware has become increasingly sophisticated, and broke into the headlines last year with WannaCry, which infected hundreds of thousands of vulnerable Windows PCs and attacked such major companies as Nissan Renault, FedEx and Telefonica until a kill switch was found for it. WannaCry also spawned an array of new ransomware that built off its success. (See
WannaCry: How the Notorious Worm Changed Ransomware
.)
Security firms such as Check Point have noted that incidences of ransomware have waned a bit from 2017 as threat actors are focusing more on stealing PC CPU cycles to mine cryptocurrencies, but warned that doesn’t mean ransomware is no longer a threat, as the cities of Atlanta and Baltimore learned earlier this year.
WannaCry and other ransomware attacks caught the attention of many customers, Mason said. Ciscos Security Advisory Services group is seeing an increase in requests from companies for help in learning how to protect their corporate networks and data and how to respond when an attack occurs.
The top requests are for tabletop exercises, where participants are put into a low-stress environment and walk through scenarios of potential emergencies to learn and discuss such aspects as operational plans, responses, dealing with stakeholders and communications.
And what most customers want to run tabletop exercises in is ransomware, he said. Theyre less interested in situations like someone stealing their IP. They want to know what to do if someone takes over their systems and takes control of their data. Many companies can use the training, Mason said. Not many have deep expertise in Bitcoin and some havent backed up their data, but they understand that if ransomware hits, its not just about having to pay to regain control of the data, but also the lost productivity. (See
Bitcoin & Other Cryptocurrency Prices in Flux Following Hack
.)
Literally, customers with tens of thousands of machines down, he said. You cannot do work, you cannot run your business, you cannot operate.
The shift toward customers becoming more proactive about security has become pronounced over the past couple of years, with Mason estimating that the split in the security services teams work hitting 70% proactive and 30% reactive.
It used to be more reactive, he said. You look at a couple of years ago, it used to be fire, fire, fire, fire, but now its really starting to shift the other way. Thats a good thing. The reactive work is not going away, but were having more and more asks and requests [for proactive help]. Its actually kind of nice to see that over the last couple of years its been ticking up more. [Being proactive is] planning ahead for your worst day. That day will come eventually. Its going to happen.
Now entering its fifth year, the
2020 Vision Executive Summit
is an exclusive meeting of global CSP executives focused on navigating the disruptive forces at work in telecom today. Join us in Lisbon on December 4-6 to meet with fellow experts as we define the future of next-gen communications and how to make it profitable.
Ciscos security services group also has the ability to leverage the work of the Cisco Talos threat team, which looks at issues around the globe.
While were focused on maybe one customer or two customers or whatever number it might be, theyre off looking at thousands upon thousands of customers and pulling down data and trying to figure out, OK, how can we get ahead of this? Mason said. We may be with a client and may see one thing going on, and we take what little information we may have and say, Hey, Talos, what are you seeing? They see a lot more than we would just see. They might say, Guys, this is XYZ, or, This is new or This is old stuff, or, Whoa, we need to get ahead of this. My team tends to see things nobody else sees quite yet.
Related posts:
Talos: VPNFilter Malware Still Stands at the Ready
Cryptomining Malware, Cryptojacking Remain Top Security Threats
Check Point: Cryptomining Malware Targeting Vulnerable Servers
Equifax Filing Sheds Light on 2017 Data Breach Carnage
— Jeffrey Burt is a long-time tech journalist whose work has appeared in such publications as eWEEK, The Next Platform and Channelnomics.

Last News
▸ ArcSight prepares for future at user conference post HP acquisition. ◂ Discovered: 07/01/2025 Category: security	▸ Samsung Epic 4G: First To Use Media Hub ◂ Discovered: 07/01/2025 Category: security	▸ Many third-party software fails security tests ◂ Discovered: 07/01/2025 Category: security

**Cyber Security Categories**
Google Dorks Database	Exploits Vulnerability	Exploit Shellcodes

CVE List

Tools/Apps

News/Aarticles

Phishing Database

Deepfake Detection

Trends/Statistics & Live Infos

Tags:
Cisco: Companies More Proactive About Cybersecurity