Latest / CYBR.Signal / Recent Social Engineering Attacks

Transcript

Recent Social Engineering Attacks · CYBR.Signal

• 0:00
  SPEAKER_00: And hello everybody, happy Cyber Sunday.
• 0:01
  SPEAKER_00: Hope you're doing well.
• 0:02
  SPEAKER_00: If you watch me, you know that I'm usually in my truck, and I am not in my truck today.
• 0:07
  SPEAKER_00: I am in sunny Tampa, Florida.
• 0:10
  SPEAKER_00: If you can notice, I'm about to attend a Buccaneers game with a customer, customer event down here and a vendor.
• 0:16
  SPEAKER_00: But wanted to talk about real quick the recent breach over at Okta and MGM Caesars, all of those breaches that are happening.
• 0:25
  SPEAKER_00: Um it's not knocking anybody here at all.
• 0:28
  SPEAKER_00: The goal of this is just to kind of bring up the issue of social engineering again.
• 0:34
  SPEAKER_00: So if you look at all these attacks, the basic root cause was that somebody within those organizations, support, help desk, other places, were social engineered in some way, which gave the attackers access to those environments.
• 0:49
  SPEAKER_00: And it just goes to show, and I think this is common sense, but you still kind of have to point it out that you put all of these things in place, all of these tools in place to protect things, and you still have the humans as a weakness.
• 1:07
  SPEAKER_00: And it is what it is.
• 1:08
  SPEAKER_00: I mean, it's human nature to have some of these problems and to fall prey to them, but it just shows that there has to be other things in place to block some of these attempts.
• 1:19
  SPEAKER_00: And it takes security awareness training of some kind.
• 1:22
  SPEAKER_00: And you know, I know that can be a dirty word for some people or a dirty term because security training, security awareness training can tend to be kind of draconian and really, really hard to deal with and dry, and people do everything they can to get past it.
• 1:37
  SPEAKER_00: I think there are some ways of getting around that where you're doing kind of spot training, you're doing things that are very focused.
• 1:45
  SPEAKER_00: Maybe you take a look at what are some of the biggest possibilities within a certain area of them getting social engineered, socially engineered, and trying to give them training that's even though they need the broader training, maybe give them some specific training in that area where they have the most risks.
• 2:07
  SPEAKER_00: And you know somebody at a in a help desk that has access to a lot of different things, you do everything you can to limit their access, but you you do know they're gonna have access to certain things that others don't, certain sensitive uh files.
• 2:22
  SPEAKER_00: Uh in the Okta case specifically, they were um Okta in the help desk area does some gathering of data and screen share screenshots and all this stuff that can give some uh clues for an attacker to go after a customer and to breach a customer.
• 2:39
  SPEAKER_00: So just things to think about there in the security awareness space, maybe just do it a little more targeted.
• 2:45
  SPEAKER_00: Um, give them the broader one, broader security awareness training, but maybe not make it so draconian and so hard to deal with and so dry and everything else.
• 2:55
  SPEAKER_00: And there are a lot of companies that do some really cool security awareness training stuff that's it's a little more fun to deal with, um, it's just uh a little more entertaining and help somebody get through it a little better.
• 3:08
  SPEAKER_00: I don't think it's ever gonna be the most fun thing in the world, but anyway, just bringing up the point that social engineering is still a huge attack vector.
• 3:18
  SPEAKER_00: You can put everything in place and you're still gonna run into this from time to time.
• 3:22
  SPEAKER_00: The folks at Okta are fighting hard against this.
• 3:25
  SPEAKER_00: I know they're doing a good job.
• 3:26
  SPEAKER_00: Uh, we're here to support you, and everybody else is dealing with these issues.
• 3:31
  SPEAKER_00: We're here to support you.
• 3:32
  SPEAKER_00: This is not an attack type of video.
• 3:34
  SPEAKER_00: And anybody who's out there attacking them and saying, hey, you should have prevented this, that, and the other, you're you're really not helping.
• 3:42
  SPEAKER_00: Um, yeah, there are lessons to be learned, but don't go after them with a hammer.
• 3:47
  SPEAKER_00: Let them know you're there to support them, like a lot of people are doing.
• 3:50
  SPEAKER_00: Um, it's just it's just not useful to attack them.
• 3:53
  SPEAKER_00: So um, so anyway, again, just to summarize, social engineering, still a big issue.
• 4:00
  SPEAKER_00: Make sure you're doing some kind of security awareness training, and then actually take a look at the risks in the areas of your company and maybe do some more targeted security awareness training to try to alleviate some of these issues, remediate them.
• 4:15
  SPEAKER_00: So, thanks everybody.
• 4:16
  SPEAKER_00: See you next time.