Cyber Security

Phishing attacks are offer sent as fraudulent communications that appear to come from a reputable source. The aim of phishing attacks is to steal a user’s data. These attacks are used to infiltrate an organisation as part of a larger attack.

Ways to prevent Phishing attacks:

• Always check the spelling of the URLs in email links before you click or enter sensitive information.
• If you receive an email from a source, you know but it seems suspicious, contact that source with a new email.
• Educate staff of how to catch a phishing email and use pen-testing to find weak spots.

Malware attacks are any type of malicious software designed to damage the performance of IT infrastructure without the user’s knowledge. It’s used to steal data, credentials, disrupt operations and corrupt critical OS files.

Ways to prevent Malware attacks:

• Update anti-virus software and follow application and Operating System patching best practices.
• Set up automatic backups for data to allow for easier disaster recovery.
• Perform regular website security audits and ensure your network is secure.

Ransomware attacks are especially dangerous for organisations as it locks or encrypts your files. Taking away access to your files, computer or mobile device until the ransom amount is paid.

Ways to prevent ransomware attacks:

• Train staff to detect and identify ransomware
• Keep operating systems and software updated and have the latest patches installed.
• Set up regular data back-up cycles and introduce additional cyber security protocols.

Zero-day exploit is a cyber-attack that targets a software vulnerability that is unknown by the software or antivirus vendors. There are a few methods however to help reduce zero-day vulnerabilities.

Methods to help detect zero-day vulnerabilities:

• Use only essential applications to reduce the potential of risk.
• Vulnerability scanning, these simulate attacks on software code and attempt to explore new software vulnerabilities.
• Have a good patch management system set up.

A Denial-of-Service (DoS) attacks shuts down a machine or network, so the user cannot utilise it and disrupts regular business operations, costing time and money. It occurs by flooding the target with traffic or sending information that triggers a crash. There are two main types of DoS attacks these are: Buffer overflow attacks and flood attacks.

How to prevent Denial of Service Attacks:

• Monitor the network and understand what is normal inbound traffic.
• Prevent spoofing and limit broadcastings.
• Protect endpoints with the latest patches and ensure your firewalls are only allows for necessary transactions.