For Top Cyber Threats, Look in the Mirror

October 31, 2016 / G C Network / Comments Off

Twitter Feed

Cloud Computing as a Strategic Asset

By G C Network | April 30, 2009

For some reason, this week seems to have more in it than most. While the steady stream of briefing request seem to be increasing, the post briefing discussions also seem…

Vivek Kundra: “Engage the American People in their Daily Digital Lives”

By G C Network | April 25, 2009

Today I attended a very impressive talk by the Federal CIO, Mr. Vivek Kundra at a Northern Virginia Technology Council Public Policy event. His open and “matter of fact” approach…

McKinsey vs. Booz Allen Hamilton !

By G C Network | April 21, 2009

A community skirmish reminiscent of the recent “manifestogate” has apparently erupted around the McKinsey & Co. report “Clearing the air on cloud computing“. Booz Allen Hamilton Principals Mike Cameron and…

Oracle Buys Sun!!

By G C Network | April 20, 2009

Swooping in from nowhere, Oracle buys Sun for $7.4B!! “This morning, the companies announced that they’d struck a deal worth $7.4 billion or $5.6 billion net of Sun’s cash and…

Aneesh Chopra Nominated For Federal CTO

By G C Network | April 20, 2009

Although Aneesh Chopra is a new name for most, he is well know in Virginia as Governor Tim Kaine’s Secretary of Technology. For the Commonwealth, he was charged with leading…

Could Cloud Computing Cost More?

By G C Network | April 16, 2009

In a recent conference, analyst William Forrest says that large companies could end up paying more than twice as much by using cloud based services. According to a Forbes.com report,…

Cisco’s Cloud Computing Strategy

By G C Network | April 10, 2009

A couple of weeks ago, Krishna Sankar provided a glimpse into Cisco’s cloud computing strategy in a presentation titled “A Hitchhiker’s Guide to the Inter-Cloud” . The presentation outlined the…

NCOIC and Cloud Computing: An Update

By G C Network | April 8, 2009

As the NCOIC gets it’s arms around this new paradigm, the Cloud Computing Working Group has focused on establishing a roadmap for providing value to the industry. Using the established…

SUN-IBM Talks Breakdown

By G C Network | April 6, 2009

As reported in multiple sources today, including Reuters, Sun has apparently rejected a purchase offer by IBM. “Shares of Sun Microsystems Inc tumbled 22.5 percent after it rejected a $7…

Former DoT CIO on Cloud Computing

By G C Network | April 3, 2009

Last month, former Transportation Department CIO Dan Mintz offered his views on cloud computing to Eric Chabrow, Managing Editor of Government Information Security. According to Mr. Mintz, there is currently…

« Previous
1
…
46
47
48
49
50
…
73
Next »

A recent report by Praetorian, a cybersecurity company headquartered in Austin, TX, focused on threats that resulted in data compromise or access to sensitive information. Based on a review of 100 separate internal penetration test engagements the study identified the five most prevalent threats to corporate data. The amazing thing about these weaknesses is that the top four are all based on utilizing stolen credentials and the last one helps an attacker be more effective in using those stolen credentials. In other words, the enemy is right there in the mirror! The study spanned 75 unique organizations and only focused on security weaknesses that were used to obtain a full network compromise.

Where are your pain points?

The most prevalent threat is something we’ve all heard of before – Weak Domain User Passwords. Since most corporate environments use Microsoft’s Active Directory to manage employee accounts and access, it needs some improvements in order to fully address complex passwords. Since Active Directory only requires passwords to be a specific length and contain specific character sets so addressing this weakness will require the use of third-party software.

The next most common corporate threat is Broadcast Name Resolution Poisoning. Using this vector, an attacker responds to broadcast requests (i.e. LLMNR, NetBIOS, MDNS, etc) by providing its own IP. When this is done, the credentials of a user accessing network resources can be instead transmitted to the attacker’s system.

The next big no-no is when system administrators all use the same Local Admin password. If an attacker is able to compromise the LM/NT hash representation of the password, then the attacker can use the hash to authenticate and execute commands on other systems that have the same password. Using the hash, an attacker doesn’t need the actual password at all!

Microsoft Windows operating systems have another embedded password weakness. Believe it or not, the operating system stores domain credentials in cleartext within memory of the Local Security Authority Subsystem Service (LSASS) process. Although this weakness requires an attacker to have Local Admin or SYSTEM-level access, it ranks high on the threat list.

This last threat enhances all of the other – Insufficient Network Access Controls. Many organizations don’t restrict network access based on business requirements. This will enable unfettered attacker mobility after only a single system on the internal network has been compromised.

These threat vectors, last updated by Praetorian in June 2016, were evaluated as part of a complete corporate network compromise kill chain. They also highlight the importance of understanding the cybersecurity threat. Although the mirror is a good place to start improving on network security, you must also work to identify all your organization’s security pain points. With that knowledge you can more effectively enhance your team’s defenses and eventually evolve towards a better understanding of your security threat environment.

If you are serious about protecting your data, download the full report and read about the effective strategies your company can use to protect itself. If you are a CISO or corporate executives, IBM also provides some excellent information on how to secure the C-suite. They also provide an interactive toolthat can help better analyze your threats, protect your users and save your data from these and many other security challenges.