Employee Cybersecurity Threats Revealed

Editorial & Advertiser disclosure

Global Banking & Finance Review® is an online platform offering news, analysis, and opinion on the latest trends, developments, and innovations in the banking and finance industry worldwide. The platform covers a diverse range of topics, including banking, insurance, investment, wealth management, fintech, and regulatory issues. The website publishes news, press releases, opinion and advertorials on various financial organizations, products and services which are commissioned from various Companies, Organizations, PR agencies, Bloggers etc. These commissioned articles are commercial in nature. This is not to be considered as financial advice and should be considered only for information purposes. It does not reflect the views or opinion of our website and is not to be considered an endorsement or a recommendation. We cannot guarantee the accuracy or applicability of any information provided with respect to your individual or personal circumstances. Please seek Professional advice from a qualified professional before making any financial decisions. We link to various third-party websites, affiliate sales networks, and to our advertising partners websites. When you view or click on certain links available on our articles, our partners may compensate us for displaying the content to you or make a purchase or fill a form. This will not incur any additional charges to you. To make things simpler for you to identity or distinguish advertised or sponsored articles or links, you may consider all articles or links hosted on our site as a commercial article placement. We will not be responsible for any loss you may suffer as a result of any omission or inaccuracy on the website.

Employees Identified as the Biggest Threat to Business

New research shows almost three quarters of large businesses believe remote working policies introduced to help stop the spread of COVID-19 are making their companies more vulnerable to cyberattacks

AT&T’s study of 800 cybersecurity professionals across the UK, France and Germany shows that while 88% initially felt well prepared for the migration, more than half (55%) now believe widespread remote working is making their companies more or much more vulnerable to cyberattacks. This figure jumps to 70% for large businesses with over 5,000 employees.

The danger is real. AT&T Alien Labs Open Threat Exchange™ (OTX™) is one of the largest intelligence-sharing communities in the world, with more than 140,000 security and IT professionals from 140 countries daily contributing and sharing information. In March, as a global pandemic was declared and organisations around the world began implementing wide-scale remote working policies, OTX experienced a 2,000% month-over-month increase in COVID-related IOCs in March.

“Cybercriminals are opportunistic, taking advantage of the fear and uncertainty surrounding issues like the current global health and economic situation as well as sudden shifts and exposures in IT environments to launch attack campaigns,” said John Vladimir Slamecka, AT&T region president, EMEA. “It can be a challenge for IT organisations to stay on top of emergent threat activity in the wild.”

Employees are the biggest risk identified by the cyber experts. The AT&T research points to a lack of awareness, apathy and/or reluctance to adapt to new technologies as the biggest challenge to implementing good cybersecurity practices within their business (31%). They report that one in three (35%) employees are using devices for both work and personal uses, one in four (24%) are sharing or storing sensitive information in unsanctioned cloud applications, and almost one in five (18%) are sharing their work device with another family member.

While many businesses have introduced new cybersecurity measures to mitigate risks since the onset of COVID-19, a large minority have not taken basic steps to protect a suddenly remote workforce. One quarter (25%) have not offered additional cybersecurity training for employees; 24% have not created secure gateways to applications hosted in the cloud or in a data centre; 22% have not increased endpoint security to protect laptops and mobile phones; and 17% have not implemented internet browsing protection from web-based threats.

Cybercriminals are exploiting the fear and uncertainty surrounding COVID-19 and current economic concerns as topics for phishing and other fraud activities. Simultaneously, they are attempting to take advantage of the new remote workforces to launch attack campaigns. 44% of cybersecurity experts cite ransomware and/or malware attacks as their top security concern. Phishing (39%) and external threats such as nation-state attacks or hacking (39%) round off their top three concerns.

Faced with a multitude of urgent cyber risk and compliance challenges, cyber security experts are also gearing up for new innovations as a response to business conditions around COVID-19. Almost half (47%) expect more digital transformation of business processes and cloud implementation in the year to come. Two in five (40%) believe that their business will adopt new automation and robotic tools. For the largest businesses, those with more than 5,000 employees, nearly half (48%) will be changing their technology partners in the next year.

“While many organisations had already supported some remote workers on a regular basis, the sudden increase has put stress on IT systems, processes, and teams,” said Mr Slamecka. “Others have had to scramble to quickly roll out solutions focused on keeping their entire workforce connected and productive.

“In either case, sudden and unplanned changes in the way workers connect to the corporate network and access corporate data and applications in the data centre and cloud can introduce new cyber risks and vulnerabilities,” he adds. “This is the time to put robust security measures into place that will protect employees and companies for the opportunities and challenges of the future.”