Cyber Security 2020 - Some Other Predictions

With 2020 approaching, various leading experts have been giving  given their predictions for cyber security in the year year ahead.

Although innovative cybersecurity solutions offer a way forward to ensure privacy protections are workable and effective, most people see that the continuing impact of data breaches, ransomware, identity theft, denial-of-service attacks and other cyberattacks as proof that cybersecurity has become the Achilles Heel, not the savior, for innovation. 

Even as exciting advances occur in artificial intelligence (AI), autonomous vehicles, 5G networks cloud computing, mobile devices and the Internet of Things (IoT), these same developments also seem to cause disruptions that all to often make the  headlines.   

Phishing Attacks Persist
According to some experts, companies could be about to see a continuation of a struggle against phishing attacks.
A recent Report by Europol found that spear phishing is currently the most frequent on EU companies.

Jeremy Hendy, the CEO of Skurio, has expressed belief that this will continue to be a common problem. “Throughout 2020 we’ll continue to see a rise in this form of attack and it’s not only the largest enterprises that will be preyed upon.... all businesses will need to be prepared for more CEO fraud attacks, a well-crafted email, imitating communications from a trusted executive, usually convincing someone to make an urgent money transfer. It’s made to look like the ‘real deal’, and it works.....These usually happen as a result of leaked email credentials finding their way on to dark web marketplaces, which can be used for account takeovers (ATO’s) for even more specific and credible phishing emails.”

Cyber attackers increasingly focus more on SME’s
As for what kind of company is likely to be at risk of a cyberattack, it’s been said that a lack of sufficient security talent and pulling power for attracting better talent will put small and medium-sized firms in danger in 2020. “Skilled professionals will be increasingly difficult to retain...Market forces will put the option of full time, in-house security specialists, commanding high salaries, out of reach for many smaller businesses" James Hendsy thimks.

Jason Cort, director of product planning at Sharp UK, identifies connected printers as a potential pitfall. “As print solutions within small and medium-sized businesses become ever more connected, we continue to see multi-functional printers becoming digital hubs rather than standalone devices; for example, the need to understand, implement and maintain security has never been more topical,” he said. “There are still a significant number of small to medium sized businesses that need to take up the mantle. Too many think “it won’t happen to me, I’m too small”, which is dangerous and naïve.”

Accounts with re-used passwords will be more vulnerable
Another aspect of company operations that may befall security in 2020 is re-used passwords.
“With users continuing to reuse the same passwords across multiple services, the account checking Armageddon is close at hand,” said Liv Rowley, Threat Intelligence Analyst at Blueliv. “Cybercriminals take lists of compromised usernames, emails and passwords from prior breaches and use them to gain access to other sites. Thanks to password reuse, this means one breach turns into multiple compromises....poor password hygiene will make this an issue of growing importance.”

New adaptions for RATs
Rowley went on to state how attackers could go about adapting their tactics.
Although cyber security teams may well have familiar viruses scouted, it’s important to remember that these kinds of attacks, much like their biological namesakes, can mutate. “Cybercriminals are constantly redesigning Remote Access Trojans, or RATs, so they get better at bypassing security protections......Attackers will continue to adapt RATs to exploit new targets and evade detection, so we expect to see increasingly sophisticated malware in 2020.” said Rowley.

The health sector will be increasingly targeted by ransomware
Ransomware is also set to cause havoc within the next year, according to experts, but there may be one sector in particular that will be targeted. “After a short dip in ransomware popularity in 2018, it has re-emerged as a major threat, in particular to healthcare institutions......“Researchers attribute this to several factors, one of the most prominent being how malicious actors have refined their tactics: creating more efficient malware, negotiating with their victims, being more persuasive with their demands." continued Rowley. “Healthcare organisations may indeed be more willing to pay the ransom, as the sensitivity of the data handled combined with the criticality of IT systems means that any disruption would pose a huge risk, after all, patients’ lives could be at stake.”

Cyber security teams will be more diverse
Improving levels of diversity within tech workforces has been touted as a necessary step forward by experts, as companies seek to successfully protect their systems and data. Jon Fielding Managing Director of Apricom, said that employers will heed this advice when hiring cyber security staff. “The most effective way to defend a modern business against cyber threats is to build a diverse security team, equipped with a range of different skillsets and experience, including business acumen, and the ability to communicate, collaborate and lead.

Cheaper quantum computing will come higher risks
Much like any resource, as quantum technology becomes increasingly acquired and used within business, it will become more affordable.However, this could prove a trigger for cybercriminals to start turning their attention towards quantum data. “2020 will see more data breaches in anticipation of cracking the data when quantum computing becomes cheap and more affordable down the road,” said Ashvin Kamaraju, CTO for cloud protection and licensing activity at Thales.  “With potential breakthroughs like Google’s this year, it’s only a matter of time before more quantum computing power is achieved. When this happens, the encryption techniques used to sign messages and protect encryption keys will be rendered obsolete.....Next year will see an increase in the encrypted communications and encrypted data stolen by hackers as they stockpile information waiting for the tools to unlock it. So, in effect, quantum breaches will have already happened, long before the computing power comes to fruition.”

The first AI-powered cyberattack will occur, if not before the end of 2019
AI is making its way into many areas of tech, increasing efficiencies within company practices. But, it may only be a matter of time before it makes its way to the dark side of the cyber space. “If we haven’t seen it before we celebrate the arrival of the new year, 2020 undoubtedly holds the first AI-powered cyberattack,” said Marcus Fowler, director of strategic threat at Darktrace. “Advanced malware that adapts its behaviour to remain undetected has long been on the rise, and should it reach its full potential, 2020 could see a true cyber arms race....5G will only facilitate the rise of machine-speed and automated attacks. At wireless connection speeds up to 100 times faster than 4G, malware could download and spread throughout a victim’s network long before they realise that anything is amiss."

Information Age:      GovTech:

You Might Also Read:

Ransomware, Phishing And Botnets:

 

« Cyber Security Talent Crunch - 3.5m Jobs Vacant
Digital Shock: The 4th Industrial Revolution »

CyberSecurity Jobsite
Perimeter 81

Directory of Suppliers

Perimeter 81 / How to Select the Right ZTNA Solution

Perimeter 81 / How to Select the Right ZTNA Solution

Gartner insights into How to Select the Right ZTNA offering. Download this FREE report for a limited time only.

ManageEngine

ManageEngine

As the IT management division of Zoho Corporation, ManageEngine prioritizes flexible solutions that work for all businesses, regardless of size or budget.

Cyber Security Supplier Directory

Cyber Security Supplier Directory

Our Supplier Directory lists 6,000+ specialist cyber security service providers in 128 countries worldwide. IS YOUR ORGANISATION LISTED?

DigitalStakeout

DigitalStakeout

DigitalStakeout enables cyber security professionals to reduce cyber risk to their organization with proactive security solutions, providing immediate improvement in security posture and ROI.

NordLayer

NordLayer

NordLayer is an adaptive network access security solution for modern businesses — from the world’s most trusted cybersecurity brand, Nord Security. 

TBG Security

TBG Security

TBG provides a portfolio of services including cyber security, compliance and continuity solutions.

Prolinx

Prolinx

Prolinx provide secure Data Centre hosting services and other fully managed security services for networks and information systems.

Varonis

Varonis

Varonis provide a security software platform to let organizations track, visualize, analyze and protect their unstructured data.

North American Electric Reliability Corporation (NERC)

North American Electric Reliability Corporation (NERC)

NERC is a not-for-profit international regulatory authority whose mission is to assure the reliability and security of the bulk power system in North America.

Cymulate

Cymulate

Cymulate is a SaaS-based breach and attack simulation platform that makes it simple to know and optimize your security posture any time, all the time.

TÜV Informationstechnik (TÜViT)

TÜV Informationstechnik (TÜViT)

TÜViT is a leading service provider in the IT sector offering unbiased and independent tests and certifications of IT products, hardware, software, systems and processes.

Me Learning

Me Learning

Me Learning provides engaging, informative and clearly explained learning materials for complex and challenging professional environments in areas including GDPR and Information Governance.

Euro-Recycling

Euro-Recycling

Euro-Recycling is a leading UK provider of Secure On-Site Data Media Destruction Services.

Barikat Cyber Security

Barikat Cyber Security

Barikat is a provider of information security solution and services including security analysis and compliance, security testing, managed security services, incident response and training.

SessionGuardian

SessionGuardian

SessionGuardian (formerly SecureReview) is the world's first and only technology which ensures second-by-second biometric identity verification of your remote user, from log on to log off.

TotalAV

TotalAV

TotalAV Antivirus is a free-to-use app packed with all the essential features to find and remove malware, keeping you safe.

VicOne

VicOne

With a vision to secure the vehicles of tomorrow, VicOne delivers a broad portfolio of cybersecurity software and services for the automotive industry.

Port-IT

Port-IT

Port-IT is a leading partner in cybersecurity solutions tailored for the maritime industry.

Cyber and Fraud Centre – Scotland

Cyber and Fraud Centre – Scotland

The Cyber and Fraud Centre – Scotland exists to ensure Scottish organisations are as resilient as they can be against cyber and fraud crime.

Ethnos Cyber

Ethnos Cyber

Ethnos Cyber is Africa’s leading cybersecurity and compliance management company. We provide Information Security, Risk Management, Cybersecurity and Compliance Management solutions to clients.

Gcore

Gcore

Gcore is an international leader in public cloud and edge computing, content delivery, hosting, and security solutions.