Threat hunts for proactive cybersecurity
February 2023
IT in Manufacturing
By Simeon Tassev, MD and QSA at Galix Networking.
Simeon Tassev.
Ransomware remains one of the top cyber threats facing businesses in South Africa and the world, causing financial, reputational and collateral damage. In addition, there is a growing trend toward cyber extortion, where data encrypted for ransomware purposes is then leaked to the public, or even used against individuals. Backup and recovery, while they remain essential, are no longer sufficient to protect businesses adequately against this threat.
Lucrative targets
The threat of cyberattack is real and growing, and the likelihood of businesses being attacked is increasing daily. In fact, South Africa is the second most targeted country in Africa, with ransomware among the top five cyberthreats. Public sector, infrastructure and large organisations are the most attractive targets for a number of reasons, chiefly because they have both information that is valuable and the means to pay the ransom.
The cost to benefit ratio for cybercriminals of an attack on large organisations is highest, whereas smaller businesses may be a lot of effort, with little reward, for cybercriminals. However, realistically, any business could potentially fall victim to a cyberattack, and it pays to be prepared.
Changing angles
In addition to becoming more frequent and more sophisticated, ransomware attacks have also shifted away from just encrypting the data to hold it to ransom. The entire modus operandi has changed from denying data availability to disclosing data that has been stolen. There are a number of repercussions to this, including extortion of individuals based on stolen data, reputational damage resulting from leaked information, together with compliance breaches and fines.
It also means that the approach of having a backup and restoring from a clean copy of data is no longer an effective approach to mitigating risk. Once data has been stolen, there is no way to get it back, even if a business has another copy of the data with which they can attempt to carry on business. A more proactive approach to threat prevention and detection has become critical, and threat hunts have evolved as part of this strategy.
Seek and find
Threat hunts are automated tools that proactively search for security risks on the internet, the dark web, and within an organisation’s network. Where threat detection systems will identify known threats, threat hunting looks for threats that are unknown, undetected, and unpremeditated. When potential threats are identified, an alert can be triggered so that they can be investigated further, and the appropriate action taken.
These technologies make use of intelligent software that combines next-generation technologies like big data processing, artificial intelligence, and machine learning, with human intelligence, to complement existing security solutions, add another layer into the security mix, and drive an enhanced security posture.
Prevention is better than cure
In today’s world, responding after the fact to a ransomware attack may be too late. While it remains essential to always have backup, and the ability to recover from a clean copy of data, this is no longer sufficient to mitigate the threat of ransomware. Increasingly, the data itself is being used for extortion purposes, so the goal post has shifted from reactive recovery to proactive prevention.
There are many tools available to assist with this, including threat hunting, which offers a proactive solution to preventing threats from dwelling on networks, wreaking havoc and stealing data that can then be used for nefarious purposes. Threat hunting helps organisations stay a step ahead and mitigate the growing risk from cybercrime.
Further reading:
Fortifying the state in a time of cyber siege
IT in Manufacturing
In an era where borders are no longer physical, South Africa is being drawn into a new kind of conflict, one fought not with tanks and missiles, but with lines of code and silent intrusions. The digital battlefield is here, and cyber space has become the next frontier of conflict.
Read more...
Levelling up workplace safety - how gamification is changing the rules of training
IT in Manufacturing
Despite the best intentions, traditional safety training often falls short, with curricula either being too generic, too passive, or ultimately unmemorable. Enter gamification, a shift in training that is redefining how businesses train for safety and live by those principles.
Read more...
Reinventing data centre design: critical changes to meet surging
Schneider Electric South Africa
IT in Manufacturing
AI technologies are pushing the boundaries of what is possible which, in turn, is presenting data centres with a whole new set of challenges. Fortunately, several options are emerging which include optimising design and infrastructure for efficiency, cooling and management systems
Read more...
Watts next - can IT save the planet
IT in Manufacturing
The digital age’s insatiable demand for computing power has collided with an urgent and pressing need for sustainability. As data centres and AI workloads consume unprecedented energy, IT providers are pivotal in redefining how technology intersects with environmental stewardship.
Read more...
South Africa’s digital revolution:
IT in Manufacturing
South Africa stands at a pivotal moment in its technological evolution, poised to redefine itself as Africa’s leading digital powerhouse. Over the past two years, political leaders and media narratives have painted a picture of rapid digital transformation, underscoring the government’s ambition to position South Africa at the forefront of innovation.
Read more...
Smart manufacturing, APC and the SA marketplace
Schneider Electric South Africa
IT in Manufacturing
Manufacturers are prioritising the integration of smart technologies into their daily operations to stay one step ahead of the competition. In South Africa, some experts believe the country has the potential to leapfrog its global peers through the creation of smart factories.
Read more...
Schneider Electric’s Five-Pillar Strategy takes the guesswork out of equip
Schneider Electric South Africa
IT in Manufacturing
Schneider Electric’s Field Service Cycle, otherwise known as the Five-Pillar Strategy, is a structured approach to managing the lifecycle of equipment to prolong asset lifespan while reducing the total cost of ownership for customers.
Read more...
Enhancing operational safety and efficiency through advanced risk-based modelling
IT in Manufacturing
Now, more than ever, capital and operational cost can be reduced while enhancing operational safety and increasing production uptime by applying transformative methods such as Computational Fluid Dynamics modelling.
Read more...
Laying the groundwork in IT/OT
IT in Manufacturing
In the realm of manufacturing, the core mandate is to deliver value to stakeholders. For many in the industry, this is best achieved through a risk-averse approach. Only upon establishing a robust foundation should a business consider venturing into advanced optimisation or cutting-edge technological innovations such as industrial AI.
Read more...
Looking into the future of machine vision
Omron Electronics
IT in Manufacturing
Artificial intelligence (AI) is driving a significant transformation in all areas of industrial automation, and machine vision is no exception. Omron’s AI-powered machine vision systems seamlessly integrate state-of-the-art algorithms, enabling machines to analyse and interpret visual data meticulously.
Read more...
printer friendly version