UK Business Faces Particular Lockdown Security Threats

The Cyber security experts at CrowdStrike, has issued a stark warning to British businesses, telling them to crack down on lax remote working policies now or risk catastrophic exposure at the hands of adversaries after lockdown is over. 

Its research, carried out in in cooperation with YouGov, has found that over half (52%) of people in the UK working from home do so on their own personal devices, creating potential backdoors into corporate systems for adversaries. CrowdStrike has also seen a 100X increase in COVID-19 related malicious files circulating in February and March, yet two thirds (65%) of remote workers in the UK say they had no extra training against cyberattacks.

Mike Sentonas, CTO at CrowdStrike, said: “Most companies had to improvise in order to keep their operations running during lockdown. But the rush of creating a fully remote workforce has meant that proper cyber security practices have fallen by the wayside. We have seen a rapid increase in attempted cyber-attacks by criminals taking advantage of the situation.”

Despite the rapid evolution and expansion of the cyber security threat landscape during the pandemic, only a third (33%) of respondents believe that cyber-attacks are more likely now than before the lockdown. Similarly, only 6% of respondents believe their personal devices are less secure than corporate ones, highlighting the urgent need for education around cyber security threats.

"It is important to stress that businesses in the UK are at huge risk of cyber security breaches right now....Most companies had to improvise in order to keep their operations running during lockdown. But the rush of creating a fully-remote workforce has meant that proper cyber security practices have fallen by the wayside." Semtaonas said.

"If companies don't take urgent action to tighten security measures around remote working practices, adversaries will gut organisations from the inside out. The time for UK businesses to wake up from their COVID-19 induced cyber security slumber is now," concludes Sentonas.

Crowdstrike:       Intelligent CIO:        Security Informed:      NextGov

You Might Also Read: 

Remote Working Is Transforming The Security Landscape:

 

 


 

 

« Healthcare, Finance, Industry & Human Behaviour Will Be Transformed
COVID-19 Tracing App Problems »

Infosecurity Europe
CyberSecurity Jobsite
Perimeter 81

Directory of Suppliers

Jooble

Jooble

Jooble is a job search aggregator operating in 71 countries worldwide. We simplify the job search process by displaying active job ads from major job boards and career sites across the internet.

TÜV SÜD Academy UK

TÜV SÜD Academy UK

TÜV SÜD offers expert-led cybersecurity training to help organisations safeguard their operations and data.

BackupVault

BackupVault

BackupVault is a leading provider of automatic cloud backup and critical data protection against ransomware, insider attacks and hackers for businesses and organisations worldwide.

CSI Consulting Services

CSI Consulting Services

Get Advice From The Experts: * Training * Penetration Testing * Data Governance * GDPR Compliance. Connecting you to the best in the business.

Alvacomm

Alvacomm

Alvacomm offers holistic VIP cybersecurity services, providing comprehensive protection against cyber threats. Our solutions include risk assessment, threat detection, incident response.

Infinigate UK

Infinigate UK

Infinigate is a value-added distributor of IT security solutions to protect and defend IT networks, servers, devices, data, applications, as well as the cloud.

Potomac Institute for Policy Studies

Potomac Institute for Policy Studies

Potomac Institute undertakes research on key science, technology, and national security issues facing society, Study areas include cybersecurity.

Electric Imp

Electric Imp

Electric Imp offers an innovative and powerful Internet of Things platform that securely connects devices with advanced cloud computing resources.

Neurosoft

Neurosoft

Neursoft is a fully integrated ICT company with Software Development, System Integration and Information Technology Security capabilities.

M2SYS

M2SYS

M2SYS is a worldwide leader in identification and authentication solutions.

DCX Technology

DCX Technology

Recognized as a leader in security services, DXC Technology help clients prevent potential attack pathways, reduce cyber risk and improve threat detection and incident response.

Swarmnetics

Swarmnetics

Swarmnetics helps customers discover hard-to-find software vulnerabilities by hacking your system before the bad guys do.

Kocho

Kocho

Kocho (formerly TiG) is a provider of identity and access, cyber security, cloud transformation, and managed IT services.

Globant

Globant

Globant is an It and software development company. We leverage the latest technologies and methodologies to help organizations transform in every aspect, including software security.

Skyhawk Security

Skyhawk Security

Skyhawk Security is the originator of Cloud threat Detection and Response (CDR), helping hundreds of users map and remediate sophisticated threats to cloud infrastructure in minutes.

Privasee

Privasee

Make GDPR compliance simple with Privasee. Our software makes it easy to protect your data and ensure you’re compliant with the new regulations.

Zanutix Consulting

Zanutix Consulting

Zanutix specialize in a wide range of services including Network Design and Implementation, Data Management, Cloud Solutions, Software Development and Cybersecurity.

Interlock

Interlock

Interlock are building blockchain-based security products that solve legacy web2 security issues - phishing and social engineering.

LMNTRIX

LMNTRIX

LMNTRIX eliminates the complexity and burden of cyber security for organizations struggling to prepare for, prevent and respond to cyberattacks.

Securitribe

Securitribe

Securitribe provides cybersecurity and compliance solutions, including vCISO services, ISO27001, and ASD Essential 8 advisory, helping businesses and government strengthen security & compliance.

SoteriaSec

SoteriaSec

SoteriaSec is a premier cybersecurity firm providing comprehensive digital forensics and incident response services.