October is Cybersecurity Awareness Month and cybersecurity professionals have shared some of their most memorable and haunting cyber incidents. A construction company suffered significant theft due to the fact that a user had a habit of clicking on links in emails, repeatedly falling victim to phishing schemes. A senior executive working from a coffee shop over a weekend accessed their company’s servers via public WiFi and interacted with sensitive data, potentially exposing it to a malicious attack. A law firm suffered a ransomware attack due to a PDF downloaded from an untrusted source. An online retailer was compromised when an admin installed a WordPress blog on their e-commerce web server that remained unpatched and discovered hardcoded database credentials. A medical practice lost a laptop containing patient information and financial data subject to HIPAA protections, which was eventually found in the hands of a deceased rogue employee.
Human behaviour is the biggest threat to cybersecurity. Cybersecurity incidents take place every day irrespective of having the most sophisticated security tools. October is Cybersecurity Awareness Month, dedicated to educating people to stay vigilant and updated about the latest threats. Employees can be the weakest link, exposing organizations to cyber threats when they are unaware of the risks of clicking on suspicious-looking links.
A key observation from these horror stories is that investment is required in cybersecurity tools, education, and planning to stay safe from the latest cyber threats. A combination of cybersecurity tools, education and planning ahead will help organizations mitigate attacks or breaches so that the results of a cyber incident don’t have to be downright terrifying.