For Top Cyber Threats, Look in the Mirror

October 31, 2016 / G C Network / Comments Off

Twitter Feed

The Time is Now for 21st Century Leadership

By G C Network | November 10, 2013

I’ve just had the opportunity to preview my good friend Melvin Greer’s newest effort, “21st Century Leadership: Harnessing Innovation, Accelerating Business Success“. Now in pre-release, this book highlights the compelling…

Public Cloud IaaS : A Price/Performance vs. Security Analysis

By G C Network | October 25, 2013

Industry’s transition from custom made, one-of-a-kind IT infrastructures to the standardize, commodity based cloud paradigm is well on it’s way. IBM’s recent “Under Cloud Cover” study highlights the rapidly of…

Catch the Cloud with DorobekINSIDER LIVE!

By G C Network | October 17, 2013

Yesterday I thoroughly enjoyed an opportunity to participate in the DorobekINSIDER LIVE edition on cloud computing. The conversation was both lively and informative. Joining me on the show were:…

Cloud Shines Brightly as Future of Disaster Response IT

By G C Network | September 14, 2013

The call for help began as a rumble. Twenty miles beneath the ocean’s surface, a rupture in a massive tectonic plate ripped a 310 mile-long break in the sea floor,…

NCOIC/NGA Demonstrates Use of Cloud in Disaster Response

By G C Network | September 5, 2013

When the world’s next major earthquake, tsunami or other disaster hits, military, government and civilian NGA project is available on the NCOIC website. responders will need to manage and…

NBC4 Puts On A Great GovCloud Show !!

By G C Network | August 25, 2013

NBC 4 in Washington, DC highlighted government cloud computing today as part of their GovInnovate show. Below is just a taste of the informative public service they provided. Go to…

OMB’s Evidence Memo: A Call for Cloud Services Brokerage

By G C Network | August 21, 2013

by Ray Holloman and Kevin Jackson In a late July memo the Office of Management and Budget requested cloud services brokerage. Well, not in so many words. Rather, OMB requested…

Cloud Services Brokerage Lessons From Alex Rodriguez, Baseball’s Trade Deadline

By G C Network | August 8, 2013

( A guest post from Ray Holloman, NJVC Corporate Communications) Two stories sat atop baseball’s marquee in the final days of July. The first was the non-waiver trade deadline, baseball’s…

Lessons Learned: VA Cloud Email Termination

By G C Network | July 17, 2013

According to a Federal Computer Week article by Frank Konkel, The Department of Veterans Affairs terminated its five-year, $36 million cloud computing contract for email and calendaring services with HP…

Deconstructing Cloud: An Excellent Guide to the Cloud Computing World

By G C Network | July 15, 2013

On an almost daily basis, I’m approach for my views on “cloud computing technology”. Although typically innocent in nature, I always cringe at the thought of enduring yet another hours…

« Previous
1
…
26
27
28
29
30
…
73
Next »

A recent report by Praetorian, a cybersecurity company headquartered in Austin, TX, focused on threats that resulted in data compromise or access to sensitive information. Based on a review of 100 separate internal penetration test engagements the study identified the five most prevalent threats to corporate data. The amazing thing about these weaknesses is that the top four are all based on utilizing stolen credentials and the last one helps an attacker be more effective in using those stolen credentials. In other words, the enemy is right there in the mirror! The study spanned 75 unique organizations and only focused on security weaknesses that were used to obtain a full network compromise.

Where are your pain points?

The most prevalent threat is something we’ve all heard of before – Weak Domain User Passwords. Since most corporate environments use Microsoft’s Active Directory to manage employee accounts and access, it needs some improvements in order to fully address complex passwords. Since Active Directory only requires passwords to be a specific length and contain specific character sets so addressing this weakness will require the use of third-party software.

The next most common corporate threat is Broadcast Name Resolution Poisoning. Using this vector, an attacker responds to broadcast requests (i.e. LLMNR, NetBIOS, MDNS, etc) by providing its own IP. When this is done, the credentials of a user accessing network resources can be instead transmitted to the attacker’s system.

The next big no-no is when system administrators all use the same Local Admin password. If an attacker is able to compromise the LM/NT hash representation of the password, then the attacker can use the hash to authenticate and execute commands on other systems that have the same password. Using the hash, an attacker doesn’t need the actual password at all!

Microsoft Windows operating systems have another embedded password weakness. Believe it or not, the operating system stores domain credentials in cleartext within memory of the Local Security Authority Subsystem Service (LSASS) process. Although this weakness requires an attacker to have Local Admin or SYSTEM-level access, it ranks high on the threat list.

This last threat enhances all of the other – Insufficient Network Access Controls. Many organizations don’t restrict network access based on business requirements. This will enable unfettered attacker mobility after only a single system on the internal network has been compromised.

These threat vectors, last updated by Praetorian in June 2016, were evaluated as part of a complete corporate network compromise kill chain. They also highlight the importance of understanding the cybersecurity threat. Although the mirror is a good place to start improving on network security, you must also work to identify all your organization’s security pain points. With that knowledge you can more effectively enhance your team’s defenses and eventually evolve towards a better understanding of your security threat environment.

If you are serious about protecting your data, download the full report and read about the effective strategies your company can use to protect itself. If you are a CISO or corporate executives, IBM also provides some excellent information on how to secure the C-suite. They also provide an interactive toolthat can help better analyze your threats, protect your users and save your data from these and many other security challenges.