In an article published on 19 June 2023 in globalsecuritymag.fr/, Benoit Grunemwald, cybersecurity expert at ESET France, recounts the cyberattack suffered by REDDIT, an American social news aggregation, content rating, and discussion website, in February of the same year, and draws some lessons from it.
This article follows the hackers' attempts, last repeated on 16 June, to obtain a ransom of 4.5 million dollars in order to delete the 80 GB of data stolen from the company, to which the company did not respond.
The data was not encrypted, so the company did not lose it. However, the same cannot be said for its reputation.
Benoit Grunemwald explains that "It all started with a phishing email to harvest employee account data. All it takes is for a single employee to be trapped for cyber criminals to gain access to internal documents, software code, employee data, etc." He goes on to stress the "need to integrate in-depth security methods and resources, such as zerotrust, segmentation and multi-factor authentication".
We can only endorse this recommendation, because only by respecting the dual rule of ZERO TRUST and MICRO-SEGMENTATION in the IT defence system can we, if not prevent any attack from being carried out (no system can guarantee 100% effectiveness), at least drastically reduce its chances of success and limit the impact by reducing the vulnerable area.
ARCHANGE© 2.0, firewall of next generation, has been created on the basis of these two rules, following the recommendations of the US Department of Defense.
The ARCHANGEL© 2.0 system is designed to incorporate the ZERO TRUST principle, in all its functions and in the face of everything that is in the process of penetrating the protected network, to compensate for the lack of reliability of the human factor. In the ARCHANGEL© 2.0 system, this ZERO TRUST rule is not applied to the people who have access to the Internet network (because human error is always possible) but to the very functions of the defence system.
ARCHANGEL© 2.0 also incorporates the concept of MICRO-SEGMENTATION, thanks to the VPN server integrated into the firewall and fully protected by it, to which each device on the network must be connected individually and by sector, so that if one device is contaminated it cannot contaminate any other device in the same sector, let alone those in another sector.
https://www.sydeco.co/products/the-archangel/
#firewall #zerotrust #microsegmentation #ransomware #reddit #Archangel #data #mod
Comments
Post a Comment