Companies collaborate to strengthen organizations' first line of security defense – end users.

ATLANTA, Sept. 27, 2022 /PRNewswire/ -- Veristor Systems, Inc., a trusted provider of transformative business technology solutions, and SANS Security Awareness, the global leader in providing security awareness training, today announce that Veristor has become a certified provider of SANS Security Awareness' comprehensive suite of products to enable a data-driven approach to cybersecurity training for an organization's end users.

"Researchers from Stanford University found that as much as 88% of all data breaches are caused by an employee mistake," said Daniel Martin, Principal Security Consultant, vCISO, Veristor. "This shows that end users are the most critical vulnerability gap in today's enterprise. Yet if properly trained, they can also be the most resilient security defense – a human firewall. Together with the experts from SANS Security Awareness we are helping customers guard their environments with an army of well-trained employees. With proven training to spot and act when suspicious activity arises, users can take an active role in preventing the growing wave of cyberattacks."

The SANS Security Awareness suite of dynamic multilingual computer-based training, games, phishing simulations, and engagement materials teach vital security behaviors to effectively manage human cyber risk. With different training styles to match different corporate cultures, employee comprehension levels, and learning preferences, SANS Security Awareness training equips workforces to recognize and prevent current cyberattacks, including work-from-home threats. The platform delivers valuable metrics to measure the effectiveness of each program, and customization features to tailor training to meet specific organizational needs."

With some groups requiring even greater specialized training, in addition to addressing core human behavior risk topics, SANS Security Awareness also offers secure development and coding techniques, understanding NERC CIP compliance requirements, and handling Industrial Control Systems (ICS) incidents.

"We are very pleased to be partnering with the cybersecurity experts at Veristor to provide the SANS Security Awareness program to their customers," said Brad Stilling, Director of Global Sales for SANS Security Awareness. "Regular awareness training is an essential activity for organizations looking to ensure security and compliance. When employees feel informed and empowered to recognize and address cyber risks, they can protect the organization. With SANS Security Awareness, Veristor customers are now better positioned to detect and prevent cyber-attacks."

For organizations starting their awareness training journey, Veristor delivers a SANS Human Risk Insight assessment to identify program cost reductions, eliminate unneeded staff training, and create risk metrics to baseline and benchmark an organization's human cyber risk. Request a pre-assessment consultation here.

The SANS Security Awareness training solutions are now offered as a part of Veristor's suite of security solutions that are designed to solve business challenges through the intelligent application of next-generation security technology. For more information visit: https://veristor.com/it-security/.

**About Veristor Systems, Inc.**

Veristor, which recently announced a merger with Anexinet, is a leading provider of transformative business technology solutions that helps its customers accelerate the time-to-value for the software, infrastructure and systems they deploy. We do this by harnessing deep expertise in today's most advanced data center, security, networking, hybrid cloud, and big data technologies and guiding businesses to the right solutions for their most pressing challenges. And with a full suite of design, deployment, support, and managed service offerings, we work shoulder-to-shoulder with our customers at every step of their technology journey to make technology truly work for them. IT's just who we are. Learn more at veristor.com.

**About SANS Security Awareness**

SANS Security Awareness provides organizations with a complete and comprehensive security awareness solution, enabling them to easily and effectively manage their human cybersecurity risk. SANS Security Awareness has worked with over 1,300 organizations and trained over 6.5 million people around the world. The SANS Security Awareness program offers globally relevant, expert authored tools and training to enable individuals to shield their organization from attacks and a fleet of savvy guides and resources to work with you every step of the way. To learn more, visit www.sans.org/security-awareness-training

_SOURCE Veristor Systems, Inc._

Veristor Partners with SANS Security Awareness to Deliver Employee Security Awareness Training

Joint phishing intelligence solution provides 360-degree mobile communication defense.

LAS VEGAS, Sept. 27, 2022 /PRNewswire/ -- YouMail, the leading provider of call protection services for consumers, enterprises, and service providers, and WMC Global, a 16-year leader in mobile threat intelligence, today announced their joint cybersecurity intelligence solution that safeguards against voice and SMS phishing scams. The partnership between YouMail and WMC Global is a first-of-its-kind offering that protects brands and their customers simultaneously from vishing and smishing attacks.

Mobile phones are the center of consumers' digital lives with 97% of Americans owning smart phones and threat actors knowingly targeting them with spam and scam SMS and voice calls. The combination of YouMail voice & vishing protection and WMC Global SMS & smishing protection services act as two sides of the mobile fraud disruption coin, enabling enterprises plagued by threat actors impersonating them and phishing consumers to mitigate these risks and improve their effectiveness at preventing fraud and serving their customers.

YouMail Protective Services, the enterprise services division of YouMail, classifies, monitors and disrupts threat actors using voice to target consumers for both impersonated brands and voice service providers that are unwillingly serving as the conduits for these phone-based attacks.

"With this marriage of voice and SMS protection, enterprises like banks now have a powerful weapon against threat actors using mobile phishing attacks against their customers," said Alex Quilici, CEO of YouMail. "Our specialized voice protection, coupled with WMC Global's suite of anti-phishing SMS safeguards, solves a complicated industry issue that affects brand reputation and millions of mobile users."

Focusing on threat actor phishing kits, compromised credential recovery, mobile number investigations and takedowns, and consumer text message analysis, WMC Global's Anti-Phishing Suite analyzes, classifies, and disarms mobile threats before a victim's personal data is exploited.

"Partnering with YouMail to develop this joint offering was the next logical step in our fight against unwanted messaging and malicious phishing attacks on consumers' mobile devices," said Ian Matthews, CEO of WMC Global. "Our specific combination of services effectively helps telecoms uncover unlawful calls and texts made on their networks, prevents brand impersonation, and protects their customers from potential identity theft."

Learn more at https://www.youmailps.com and https://www.wmcglobal.com

**About YouMail, Inc.**

YouMail protects consumers, enterprises, and service providers from harmful phone calls. YouMail protects over 11 million registered consumers with app-based call protection services in the US and the UK, with the YouMail, Another Number, and Hullo Mail apps. YouMail protects consumer-facing enterprises by detecting and helping to shut down imposter traffic that can lead to financial or brand damage while working with voice service providers to mitigate unlawful communications in their networks. YouMail also operates the YouMail Robocall Index™, the nation's definitive source on telephone network activity and attacks. YouMail, Inc. is privately funded and based in Irvine, California. For more information, follow YouMail on Twitter and LinkedIn.

**About WMC Global**

WMC Global is a market leader in digital threat intelligence, enhanced by a team of threat hunters that are experts at understanding SMS phishing and the toolkits that criminals devise to make their attacks possible. WMC Global is the most trusted digital compliance firm in North America, having partnered with all Tier 1 mobile carriers for the past 16 years. The WMC Global portfolio is at the forefront of fighting malicious text messages, eradicating phishing attacks, stopping cyber criminals from targeting large brands, financial institutions, and governments, and monitoring consumer experiences for industry compliance. WMC Global provides its partners with proprietary data feeds of phishing attacks (including live phishing kits), threat response and takedown services, automated partner due diligence, and customer experience monitoring. WMC Global headquarters are located in Fairfax, VA, with offices in London, UK and Sydney, AU. For more information, follow WMC Global on Twitter and LinkedIn.

YouMail, Inc. and WMC Global Partner to Deliver Voice and SMS Phishing Disruption Services

Settling for 'satisfactory' level of readiness may underestimate growing levels of risk.

DOWNERS GROVE, Ill, Sept. 27, 2022 /PRNewswire/ -- Fortifying cybersecurity defenses remains a work in progress for many organizations, who acknowledge their shortcomings but have yet to commit the necessary resources to the effort, new research from CompTIA, the nonprofit association for the information technology (IT) industry and workforce, reveals.

"Risk mitigation is the key, the filter through which everything should be viewed."

A majority of organizations in every region feel that their cybersecurity is satisfactory, but a much smaller number rank the situation as “completely satisfactory.” Nearly everyone feels that there is room for improvement, with some cases more dire than others. (Source: CompTIA “State of Cybersecurity”)

While a majority of respondents in each of seven geographic regions\[1\] feels that their company's cybersecurity is satisfactory, CompTIA's "State of Cybersecurity" shows that a much smaller number rank the situation as "completely satisfactory." Nearly everyone feels that there is room for improvement.

"Companies are aware of the threats they face and the potential consequences of an attack or breach," said Seth Robinson, vice president, industry research, CompTIA. "But they may be underestimating their exposure and how much they need to invest in cybersecurity. Risk mitigation is the key, the filter through which everything should be viewed."

Two of the top three issues driving cybersecurity considerations are the growing volume of cybercriminals, cited by 48% of respondents, and the growing variety of cyberattacks (45%). Additionally, ransomware and phishing have quickly become major areas of concern as digital operations have increased and human error has proven more costly.

"Digital transformation driven by cloud and mobile adoption requires a new strategic approach to cybersecurity, but this poses significant challenges, both tactically and financially," Robinson said. "As IT operations and strategy have grown more complex, so has the management of cybersecurity."

As cybersecurity is more tightly integrated with business objectives, zero trust is the overarching policy that should be guiding modern efforts, though its adoption will not take place overnight because it requires a drastically different way of thinking and acting. The report suggests there is small progress in recognizing a holistic zero trust approach, but better progress in adopting some elements that are part of an overarching zero trust policy. Multifactor authentication is in place at 46% of companies and cloud workload governance at 41%. Among other changes in organizations' approach to cybersecurity:

43% of companies have placed a higher priority on incident response,

39% are deploying a more diverse set of technology tools, with SaaS monitoring and management tools making a substantial jump in adoption,

38% are increasing their focus on process improvements,

37% are shifting to more proactive measures, and

36% are expanding employee education.

Adopting a total zero-trust philosophy, including setting specific, strategic objectives will address many problems companies face. But there are substantial hurdles to overcome, such as closing the communications gap that exists between the technology and business sides of organizations. The overall rate of business staff participation is too low for a business-critical function. Nearly half (47%) of small businesses have the CEO or owner as part of the cybersecurity chain compared to 37% of mid-sized firms and 27% of large enterprises. In addition, companies are struggling to address technical skill needs, such as threat knowledge, network security and data analysis.

CompTIA's "State of Cybersecurity" report is based on a Q3 2022 survey of technology and business professionals involved in cybersecurity. There were 500 respondents from the U.S. and 125 from each of six other regions around the world. The full report is available at https://insights.comptia.org/2022-state-of-cybersecurity-it-pro/p/1.

**About CompTIA**

The Computing Technology Industry Association (CompTIA) is a leading voice and advocate for the $5 trillion global information technology ecosystem; and the estimated 75 million industry and tech professionals who design, implement, manage, and safeguard the technology that powers the world's economy. Through education, training, certifications, advocacy, philanthropy, and market research, CompTIA is the hub for unlocking the potential of the tech industry and its workforce. https://www.comptia.org/

\[1\] Australia/New Zealand, ASEAN, Benelux, Canada, Germany, United Kingdom and United States

Organizations Finding the Need for New Approaches on the Cybersecurity Front, CompTIA research reveals

The chip giant has developed new features and services to make it tougher for malicious hackers and insiders to access sensitive data from applications in the cloud.

INTEL INNOVATION 2022 -- San Jose, Calif. — Intel has announced new hardware and software features for Project Amber, a confidential computing service that interlaces hardware and software to attest and certify the trustworthiness of data, at its Innovation developer summit this week.

The enhancements include features to protect data from the time it leaves the system and is in transit, in use, or at rest in storage.

"This is a fundamental technology that Intel has been developing for years. The place where it's going to be the most important is in AI/ML models ... to make sure when you're running a model on the edge, it's not being pilfered, it's not being stolen, it's not being manipulated," said Intel CTO Greg Lavender during his Wednesday keynote.

Data is traveling farther when outside the data center, with multiple stopovers, until it reaches cloud services or completes a round trip to enterprise infrastructure. Information from sources like sensors are added as data moves along a telecom network, with stopovers and artificial intelligence (AI) chips ensuring only relevant data moves ahead.

Project Amber uses hardware and software techniques to verify that the packets of data and its origin device are trustworthy. That layer of trust between devices and waypoints when data is in transit is a form of assurance that a company's infrastructure and execution environment are secure, says Anil Rao, Microsoft vice president for systems architecture and engineering in the office of CTO.

"Gone are the days where the central hubs are simply the data movers," Rao says. "They're not simple data movers. They're intelligent data movers."

The confidential computing offering is important for an enterprise mixing its own datasets with information from third parties to strengthen AI learning models. Project Amber provides a way to ensure that data is coming from trusted sources, Rao says.

**Secure Enclaves**

Project Amber adds a stronger lockdown mechanism to protect data while it is being processed. The Trust Domain Execution (TDX) instructions, which are on the company's upcoming 4th Generation Xeon Scalable processor, can secure an entire virtual machine as a trusted enclave.

The data is locked down so even hypervisors — which manage and monitor virtual machines — can't peek into the confidential computing environment.

"Your application will still do a virtual machine entry and exit call, but during those calls the data is still encrypted," Rao says.

Today's computing environment in the cloud is built around virtual machines, and applications don't run directly off processors, says Steve Leibson, principal analyst at Tirias Research.

"When we ran on processors, we didn't need attestation because nobody was going to alter a Xeon. But a virtual machine — that's just software. You can alter it," Leibson says. "Attestation is trying to provide the same sort of rigidity to software machines as silicon does for hardware processors."

TDX is bigger in scope than Secure Guard Extensions (SGX), which is a secure area in the memory in which to push, run, and operate code. SGX, a common feature on Intel chips, is also a part of Project Amber.

Intel's Rao compares the scope of TDX and SGX to hotel rooms. If TDX was a trusted boundary in the form of a secure hotel room, SGX was a secure locker inside the hotel room.

Project Amber allows data to enter secure enclaves after matching numerical codes issued by Amber engines. If the codes match, data can enter the secure enclave; if not, entry is denied because data could have been altered, modified, or hacked in transit.

"It's almost like you're giving somebody your VIN number and saying, 'Is this the authentic VIN number for my car or has someone done something hanky-panky with that thing?'" Rao says.

Intel will also provide customers the ability to define their own policies to create a trusted execution environment.

"You may want to process everything in an East Coast data center versus a West Coast," Rao says. "What Amber says is that here is exactly what it is — your code did not pass the policy."

**Protection in the Clouds**

Amber will support multiple cloud service providers, but Intel didn't provide specific details.

"We want to make it multicloud so you don't need to have a different attestation mechanism as an enterprise when you go to different clouds," Rao says.

There are hundreds of millions of processors from Intel in data centers around the world, and bad actors have an established ability to break into servers and steal secrets, Tirias' Leibson says.

"It's a cat-and-mouse game, and Intel is constantly trying to develop new ways to prevent the bad guys from breaking into the servers and stealing secrets," Leibson says. "And it goes all the way from script kiddies, to teenagers who are just hacking around, to state-sponsored sites."

At some point, one has to think about protecting data in use, in motion, and in storage. Project Amber was thus inevitable, especially with computing moving farther away from homegrown infrastructure to the cloud, Leibson says.

Project Amber is still in the pilot phase as Intel gears the technology for computing models adopted by verticals. The chipmaker is working with research company Leidos to use Project Amber in the healthcare sector, which has many types of devices and sensors spread over large geographies and requires attestation to ensure systems receive only trustworthy data.

Intel Hardens Confidential Computing With Project Amber Updates

REDWOOD CITY, Calif., Sept. 27, 2022 /PRNewswire/ -- Delinea, a leading provider of Privileged Access Management (PAM) solutions for seamless security, today announced the latest release of DevOps Secrets Vault, its high-speed vault for DevOps and DevSecOps teams. New enhancements include development support on the most recent Mac computers, and improved secrets management usability through automation, intended to reduce development time and increase visibility.

According to a 2022 Crowdstrike report, 80% of cyber attacks involve stolen credentials, and in late 2021 Gartner listed managing machine identities as one of the top five cybersecurity and risk trends. Delinea strives to reduce the risk of using hardcoded credentials in applications and services by instead dynamically injecting secure credentials with Just-in-Time access from DevOps Secrets Vault.

Expanded Support for developers on Macs

With added support for the M1 chip, developers coding on the latest Macs can now benefit from using DevOps Secrets Vault's command line interface (CLI) and the DSV Engine (an agent supporting database dynamic secrets) as part of their toolset. Building upon its focus on seamless usability, Delinea continues to reduce friction that commonly arises when securing sensitive secrets and credentials, especially in fast-paced DevOps environments.

Continual interface improvements reduce friction for DevOps teams

Both the CLI and graphical interface receive continual usability and flexibility enhancements, allowing developers to work seamlessly in their preferred interface with their preferred tools while helping organizations decrease the risk of compromised credentials.

New features added to both interfaces include:

Expanded support for Security Information and Event Management (SIEM) functionality

A certified Ansible plugin for use on Ansible Automation Hub

Enhanced authentication methods

"The exponential growth of machine identities as applications are modernized and architected as micro-services continues to place organizations at increased risk," said Jason Michell, SVP of Engineering at Delinea. "Delinea's ongoing focus on making security seamless for developers is reflected in these recent enhancements, enabling them to use DevOps Secrets Vault to dynamically insert credentials in their code, in line with security best practices."

Organizations can try DevOps Secrets Vault for free at https://delinea.com/products/devops-secrets-management-vault.

**About Delinea**

Delinea is a leading provider of privileged access management (PAM) solutions that make security seamless for the modern, hybrid enterprise. Our solutions empower organizations to secure critical data, devices, code, and cloud infrastructure to help reduce risk, ensure compliance, and simplify security. Delinea removes complexity and defines the boundaries of access for thousands of customers worldwide. Our customers range from small businesses to the world's largest financial institutions, intelligence agencies, and critical infrastructure companies. Learn more about Delinea on LinkedIn, Twitter, and YouTube.

Latest Delinea Update Streamlines DevOps Security

KnowBe4's Compliance Audit Readiness Assessment (CARA) now addresses select requirements from HIPAA Security Rule.

TAMPA BAY, Fla., Sept. 27, 2022 /PRNewswire/ -- KnowBe4, the provider of the world's largest security awareness training and simulated phishing platform, today launched a new version of its Compliance Audit Readiness Assessment (CARA) that now covers select requirements for the Health Insurance Portability and Accountability Act (HIPAA) Security Rule to address healthcare privacy requirements.

Healthcare organizations around the world continue to inadequately protect sensitive protected health information (PHI). Between 2009 and 2021, 4,419 healthcare data breaches of 500 or more records have been reported to the U.S. Health and Human Services' (HHS) Office for Civil Rights. Those breaches have resulted in the loss, theft, exposure or impermissible disclosure of 314,063,186 healthcare records.

CARA is a complimentary, web-based tool that helps organizations assess their readiness for meeting compliance requirements. With this new version, IT and security professionals are guided through specific select requirements from the Health Insurance Portability and Accountability Act (HIPAA) Security Rule outlined by HHS. CARA asks security professionals to rate their readiness for each requirement and then provides an analysis of the results to help them define the controls they need in place before a compliance audit.

"Accessing confidential patient data is the cybercriminal's equivalent to discovering buried treasure, but it happens far more often than imaginable due to antiquated healthcare systems and security practices," said Stu Sjouwerman, CEO, KnowBe4. "Security professionals are overwhelmed with trying to comply with all of the healthcare security requirements through HIPAA. Our CARA tool now has the capability to help healthcare organizations become better prepared for compliance requirements related to the HIPAA Security Rule. This refreshed tool goes a long way towards simplifying the process of getting healthcare organizations adequately equipped for compliance audits."

The HIPAA Security Rule contains the standards to safeguard and protect electronically created, accessed, processed or stored PHI. The rule applies to any organization or system that has access to confidential patient data.

For more information on CARA, visit https://www.knowbe4.com/compliance-audit-readiness-assessment.

**About KnowBe4**  
KnowBe4, the provider of the world's largest security awareness training and simulated phishing platform, is used by more than 52,000 organizations around the globe. Founded by IT and data security specialist Stu Sjouwerman, KnowBe4 helps organizations address the human element of security by raising awareness about ransomware, CEO fraud and other social engineering tactics through a new-school approach to awareness training on security. Kevin Mitnick, an internationally recognized cybersecurity specialist and KnowBe4's Chief Hacking Officer, helped design the KnowBe4 training based on his well-documented social engineering tactics. Tens of thousands of organizations rely on KnowBe4 to mobilize their end users as their last line of defense.

KnowBe4 Simplifies Compliance Requirements for Healthcare Privacy

Combination of two companies to help SAP customers streamline audit, compliance and control processes.

DALLAS, Sept. 27, 2022 /PRNewswire/ -- Pathlock, the leading provider of application security and controls automation for critical business applications, today announced the acquisition of Grey Monarch, a UK-based specialist SAP Partner dedicated to SAP Process Automation. The acquisition will strengthen Pathlock's vision of providing the industry's most complete 360-degree platform for application security and controls automation for the SAP ecosystem.

Since 2008, Grey Monarch has developed expertise in SAP Security, Segregation of Duties, SAP Licence Optimization, SAP Background Processing Automation and Secure Managed File Transfer. With this acquisition, the SAP community will benefit from the very best SAP Process Automation advice, implementation skills, and software and training capabilities, improving levels of security, enhancing their users' experience and streamlining audit, compliance and control procedures.

"It's now more imperative than ever for organizations to utilize a holistic view of user access and privileges so they can be managed, monitored and controlled to ensure the maximum protection of data, business processes and intellectual property," said David Lloyd, Director and Co-Founder, Grey Monarch. "Combining Grey Monarch's capabilities with the Pathlock family of expertise, resources and product portfolio will provide our customers, existing and new, with an unsurpassed visibility into their business applications."

"We're thrilled to complete the acquisition of Grey Monarch," said Piyush Pandey, CEO of Pathlock. "We continue to see a strong demand for our globally recognized application security and controls automation solutions, and know that with Grey Monarch's specialization in SAP process automation we can continue to enable our global customers to revolutionize the way they secure their sensitive financial and customer data."

In May 2022, Pathlock announced a $200M capital raise sponsored by Vertica Capital Partners alongside a merger with Appsian and Security Weaver and the acquisition of Belgium-based CSI Tools and Germany-based SAST SOLUTIONS. The company has successfully doubled in size in terms of revenue and employees and is now servicing over 1,400 customers across all major industries on a global scale with offices across the United States, Belgium, the UK, Germany, Israel and India.

**About Pathlock**

Pathlock is the leader in application security and controls automation. With Pathlock, enterprises can manage all aspects of access governance via a single platform, across applications, including user provisioning, ongoing User Access Reviews, segregation of duties, control testing, and audit preparation. Today, many of the world's most respected, global 2000 companies rely on Pathlock to protect their critical digital assets from financial, operational, regulatory and security threats, ensure corporate compliance and improve performance. Our customers have saved millions in employee productivity, labor costs, audit fees and data loss prevention.

Pathlock Expands SAP Capabilities with Acquisition of Grey Monarch

Survey of over 2,000 IT pros revealed that a quarter either don't know or don't think Microsoft 365 data can be affected by ransomware.

PITTSBURGH, Sept. 26, 2022 /PRNewswire/ -- Nearly a quarter of businesses have suffered a ransomware attack, with a fifth occurring in the past 12 months, according to a latest annual report from cybersecurity specialist Hornetsecurity.

The 2022 Ransomware Report, which surveyed over 2,000 IT leaders, revealed that 24% have been victims of a ransomware attack, with one in five (20%) attacks happening in the last year.

**Hornetsecurity**

Cyberattacks are happening more frequently. Last year's ransomware survey revealed one in five (21%) companies experienced an attack; this year it rose by three percent to 24%.

Hornetsecurity CEO, Daniel Hofmann said: _"Attacks on businesses are increasing, and there is a shocking lack of awareness and preparation by IT pros. Our survey shows that many in the IT community have a false sense of security. As bad actors develop new techniques, companies like ours have to do what it takes to come out ahead and protect businesses around the world."_

Microsoft 365 users targeted by attackers  
The 2022 Ransomware Report highlighted a lack of knowledge on the security available to businesses. A quarter (25%) of IT professionals either don't know or don't think that Microsoft 365 data can be impacted by a ransomware attack.

Just as worryingly, 40% of IT professionals that use Microsoft 365 in their organization admitted they do not have a recovery plan in case their Microsoft 365 data was compromised by a ransomware attack.

Hofmann added: _"Microsoft 365 is vulnerable to phishing attacks and ransomware attacks, but with the help of third-party tools, IT admins can back up their Microsoft 365 data securely and protect themselves from such attacks."_

Lack of business preparedness  
Industry responses showed the widespread lack of preparedness from IT professionals and businesses. There has been an increase in businesses not having a disaster recovery plan in place if they do succumb to the heightened threat of a cyberattack.

In 2021, 16% of respondents reported having no disaster recovery plan in place. In 2022, this grew to 19%, despite the rise in attacks.

The survey also showed that more than one in five businesses (21%) that were attacked either paid up or lost data. Hackers have an incentive to run these ransomware attacks because there's a decent chance that they'll get a payday - 7% of IT professionals whose organization was attacked paid the ransom, while 14% admitted that they lost data to an attack.

Hofmann concluded: _"Interestingly, 97% of pros are moderately to extremely confident in their primary protection method, even if they don't use many of the most effective security measures available, such as immutable storage and air-gapped off-site storage. This tells us that more education is needed in the field, and we're committed to this cause."_

**Next steps for IT Pros**  
Read more about Hornetsecurity's Ransomware Attacks Survey.

These findings will directly influence an educational webinar on October 5, **Ransomware Attack Survey: One Year Later**. Colin Wright, Hornetsecurity VP of EMEA and Andy Syrewicze, Microsoft MVP will break down the results of this survey and explore the current trends, threats, and news from the industry. Register for the ransomware attack webinar here.

**About Hornetsecurity Group**

Hornetsecurity is the leading security and backup solution provider for Microsoft 365. Its flagship product is the most extensive cloud security solution for Microsoft 365 on the market, providing robust, comprehensive, award-winning protection: Spam and virus filtering, protection against phishing and ransomware, legally compliant archiving and encryption, advanced threat protection, email continuity, signatures and disclaimers. It's an all-in-one security package that even includes backup and recovery for all data in Microsoft 365 and users' endpoints.

Hornetsecurity Inc. is based in Pittsburgh, PA with other North America offices in Washington D.C. and Montreal, Canada. Globally, Hornetsecurity operates in more than 30 countries through its international distribution network. Its premium services are used by 50,000+ customers including Swisscom, Telefónica, KONICA MINOLTA, LVM Versicherung, and CLAAS.

Ransomware Attacks Continue Increasing: 20% of All Reported Attacks Occurred in the Last 12 Months - New Survey

Call it cross-border enlightened self-interest: As one of the US's premier trade partners and closest neighbors, what's bad for Mexico is bad for the US.

In August 2020, the US and Mexico established a working group and conducted a first-of-its-kind dialogue regarding mutual cybersecurity concerns. While the two countries have been partnering to counter illicit drug trafficking for decades, only recently has real progress been made related to cybersecurity, as described in the State Department's recent joint statement. Given the evolving threat landscape in recent years, it is remarkable it has taken so long for this partnership to mature. What may be quicker to evolve is the private sector's reaction to this new partnership as cybersecurity service providers recognize this bilateral cooperation as a lucrative commercial opportunity.

**Reliance on Cross-Border Critical Infrastructure**

Perhaps the most significant strategic focus of this collaboration is the commitment to strengthening coordination and response to cyber incidents affecting critical infrastructures. Mexico and the US share interdependent economies, as well as the risk of closely related critical infrastructure. Mexico consistently ranks among the top trade partners for the US and in 2021 supplied 8% of US oil (by comparison, Saudi Arabia provided 5%), according to the US Energy Information Administration. US dependency on Mexican oil would thus, naturally, justify the protection and security of that resource as a US national security interest.

Similar to the US's own Colonial Pipeline compromise in 2021, Pemex (Mexico's state-owned petroleum company) experienced a ransom event in 2019. Fortunately, the Pemex incident did not result in the same disruption to services as the Colonial matter did. Pemex's incident does highlight that Mexico's infrastructure is a target and that it is also vulnerable. Though the Pemex incident did not make significant waves for the US, a more significant incident could cause far greater economic consequences for Mexico and the US alike.

**Benefits of Closing Vulnerabilities as Trade Partners**

As one of the US's premier trade partners and boundary sharing geographic neighbors, what is bad for Mexico is bad for the US. Be it in telecom, the financial sector, or any aspect of critical infrastructure and key resources, a disruption in Mexico would likely cross over and impact the US. One of the most effective and self-beneficial ways for the US to protect against this is to invest in Mexico's cybersecurity capabilities. In many cases, nation-state offensive operations view Mexico as a less secure technological gateway into targeting the US. The relatively weak cybersecurity posture in Mexico enables criminals to either exploit entities there or use compromised systems as proxies to target US entities.

Mexico is also seeing an increase in overseas factories relocating and setting up production within its borders. The Chinese in particular view this as a strategic advantage as it reduces their overall cost in shipping expenses as well as export tariffs. Chinese investment in this way will undoubtedly require additional bandwidth, expansion of IT related infrastructure, and efficient connectivity back to China. Aside from its implications to US national security, Mexico's cybersecurity capabilities and related infrastructure will need to mature to keep pace with this industrial and economic development.

With growing, increasingly complex internal cyber demands, Mexico is likely incapable of meeting these needs on its own and would benefit from able and experienced partners. US investment, both from the government and private sector, in Mexico is more a matter of investing in US interests, yielding benefits both economically and security-wise.

The US would be served well if it benchmarked the mission and vision of the Cybersecurity and Infrastructure Security Agency (CISA) and invested in Mexico's ability to "understand, manage, and reduce risk" to Mexico’s cyber and physical infrastructure. The near-term security priorities investment should be maturing capability delivery, vulnerability management, and cyber-defense education, and training. 

Additionally, forward-thinking cybersecurity vendors will undoubtedly see this opportunity as a chance to capitalize on private sector demand, and possibly government contracts as well. It should come as no surprise if the industry sees a flurry of activity around establishing capabilities and resources to serve the market in Mexico. And by treating Mexico's cybersecurity posture as important as countering illicit drugs, the US will enhance its own security in the long run.

Why the US Should Help Secure Mexican Infrastructure — and What It Gets in Return

Literacy, levels of personal freedom, and other macro-social factors help determine how strong average passwords are in a given locale, researchers have found.

When it comes to choosing passwords, it turns out that a person's country of residence has an impact on the strength of their choice.

Researchers from GoSecure have uncovered four primary macro-social factors that strongly correlate to positive password performance (measured by the time it takes to crack the credential, in seconds). Those are:

*   Level of human rights in-country and its degree of free society;
*   Literacy level of a population;
*   Country's placement in the Global Cybersecurity Index (GCI); and
*   Level of data-breach exposure and victimization.

    

Source: GoSecure

"Countries have an impact on the level of protection of their users," according to the report, released this week. "A user’s country of origin and/or residence necessarily has an impact on their social identity. It means that our social identity, which can be influenced by several levels (e.g., macro and micro), might have an impact on password choice."

**4 Correlations of Society's Impact on Password Performance**

To arrive at these conclusions, the researchers started with the mean time needed to crack the 200 most common passwords by country, as determined by NordPass. According to the most recent data set (last November), the mean time to crack passwords globally is about 9.6 hours, spanning a range from 0 hours to more than 10 years. That said, the majority of passwords (61%) included in the list can be cracked in less than a minute, according to the findings, which dovetail with other analysis.

GoSecure then took this dataset and cross-referenced it with 29 different social variables, eventually finding that four of them were strongly correlated indicators of password strength.

**1\. Support for Civil Society**

Interestingly, the level of democracy and freedom within a country posed a strong correlation to password strength, the firm found.

"Countries in which citizens participate in selecting their government and have freedom increase password strength performance," according to GoSecure researcher Andréanne Bergeron, writing in the analysis. "This might be explained by the fact that democratic countries also have greater access to the Internet."

The firm used Voice & Accountability as a cross-referenced data point, which is one of six components of governance indicators as stipulated by the World Bank. Voice & Accountability reflects perceptions of the extent to which a country’s citizens are able to participate in selecting their government, as well as freedom of expression, freedom of association, and a free media.

"Since the Internet is synonymous with access to information and freedom, undemocratic countries are resistant to the widespread use of Internet by their citizens," Bergeron said. "When the Internet is widely accessible, people learn how to use it and structures can be developed."

**2\. Basic Education**

Literacy is a predictive benchmark for better password practices because it's directly connected to the use of technologies and the ability to educate oneself, according to GoSecure. When a user’s level of cybersecurity knowledge increases, their cybersecurity behaviors improve. The firm cross-referenced publicly available data on literacy rates with the password-cracking data to bear this out.

"To seek, evaluate, and use information found on the Internet, users must navigate via largely text-based menus and links, as well as reading large volumes of text," Bergeron said. "The challenges faced by low-literacy users when creating and managing passwords are documented and research indicates that they are more prevalent than in the literate population."

**3\. Global Cybersecurity Index**

Unsurprisingly, the level of government commitment to and funding in cybersecurity also matters. Bergeron said, "The commitment of countries to fight against online crime is beneficial economically. The present analysis goes further suggesting this type of investment predicts better password strength performance."

Researchers found the correlation by cross-referencing the ITU's Global Cybersecurity Index (GCI) with the NordVPN numbers. The GCI is a comprehensive measure of the cybersecurity commitment of individual countries, gleaned from 25 indicators across five pillars (Legal Measures, Technical Measures, Organizational Measures, Capacity Development, and Cooperation).

**4\. Cybersecurity Exposure Index**

It makes sense that people might be more sensitive to the importance of protecting data with strong passwords when they are exposed to more cybersecurity incidents — in fact, GoSecure noted that the level at which countries are targeted (as determined by the Cyber Exposure Index) had the strongest correlation to better password hygiene in its analysis.

The CEI is based on data about sensitive disclosures, exposed credentials, and hacker-group activity against companies, collected from publicly available sources in the Dark Web and Deep Web and from data breaches.

"Users are aware of the meaning of a data breach, and it influences their behavior and password formation strategies," according to the report. "This demonstrates the resilience of users when they live in a hostile environment."

Source

DARKReading