[ad_1]
As the scope of the breach and its potential impact are investigated, concerns have arisen that the outage provided an opportunity for cybercriminals to exploit. However, so far, no cyberattacks have been officially reported in connection with the global crash.
It is understood that many computers have blue screens due to failed updates from CrowdStrike, an American cybersecurity technology company that cooperates with Microsoft.
A blue error screen at a Dutch airport. (Photo: AFP)
Will update errors affect network security?
To obtain these details, trading He spoke with Josep Albors, Head of Research and Awareness at ESET Spain, and Juan Salazar Campos, Director of the Information Systems Engineering Degree at USIL.
First, Albers clarified that The blame for the failure lies with CrowdStrike This problem is not related to network security issues, but to system operation issues.
“at the moment The only thing we’ve seen is that some people have taken advantage of this to register domains pretending to be CrowdStrike Then some type of phishing or some type of malware is deployed, but this is more of an incident related to system issues rather than a network security issue.“The expert replied. “The reality is that we are facing an operational problem”.
That said, some people may try to impersonate official entities during this commotion, thus leading victims to fall into fraudulent websites. However, Josep clarified that there is no reason to worry about data leaks or other similar issues directly related to the malfunction of Microsoft’s operating system.
“The glitch was caused because no one could use their system until the patch was applied. Does not mean that the leaked information has been seen. It’s just that you can’t access it.r”, he stressed.
On the other hand, Salazar insisted that “In some way, the system crashes, in which case, as a safety system, Will it make the company or the services it provides vulnerable?” As he explains, when security systems like CrowdStrike Falcon fail, the computers and servers that rely on them for protection become vulnerable to attack. Without active monitoring, users are left without defense against malicious code, leaving them open to possible attacks.
But the USIL spokesperson stressed that this “reduction in defense capabilities” makes companies more vulnerable than end users. Companies are more attractive targets for cybercriminals, as these digital mafias seek to hijack the data of large companies, thereby obtaining greater rewards.
Will computer failures happen again?
“Unfortunately, these types of errors can happen again, they have happened in the past, and they will continue to happen in the future. The first thing manufacturers need to do is to ensure that they test their products before shipping them to all production customers. “Companies have to be prepared to deal with these failures from their suppliers.” said the ESET expert. In this way, he emphasized the responsibility of manufacturers to avoid problems by strictly verifying updates before distributing them.
Salazar responded: “Yes.Yes, anything can happen. The problem is they are updates, like if I were to tell you there’s a new virus in the world and we have to get a vaccine. “If the vaccine makers overlook something, this could happen again.” Additionally, he stressed the importance of cybersecurity preparedness and education for organizations. This preparation includes implementing strong security practices and training employees to effectively handle incidents.
[ad_2]
Source link
