Safeguarding Your Company from Ransomware and Cyberattacks<\/h3>\n<\/div>\n\nBY NICK FORTUNA<\/span><\/div>\n![\"the](\"https:\/\/www.mhisolutionsmag.com\/wp-content\/uploads\/2024\/05\/050.jpg\")
<\/figure>\n
\nA<\/span>t the MHI Cybersecurity Workshop, business executives will witness the debilitating effects of a successful ransomware attack on a material-handling company, but thankfully, they won\u2019t feel any of the pain.<\/span><\/p>\nCybersecurity experts Chris Finan and Robert Knake will lead a tabletop exercise simulating a cyberattack and a fictional company\u2019s response, and attendees will receive a resource packet to help them establish a comprehensive cybersecurity program for their companies.<\/p>\n
Finan and Knake said the seminar at MHI\u2019s headquarters in Charlotte, N.C., isn\u2019t designed to scare logistics professionals about one of the biggest threats facing their businesses. Rather, their goal is to show that cyberattacks are a manageable risk, so long as companies stay vigilant and committed to best practices.<\/p>\n
“The adversary in our scenario is going to achieve their objective, so we\u2019re going to discuss how you handle that,” said Knake, principal at the boutique cybersecurity firm Orkestrel. “Are you in a position to not pay a ransom? Are you able to recover your networks and systems from backups, patch the vulnerabilities in your security posture and get back to business? The goal of the exercise is to help people see the pathway to that outcome.”<\/p>\n
Knake and Finan have serious cybersecurity chops. Knake recently returned to the private sector after serving as deputy national cyber director at the White House\u2019s Office of the National Cyber Director. In that role, he led the development of the National Cybersecurity Strategy and oversaw federal cybersecurity spending. He also has served as a director at the National Security Council (NSC).<\/p>\n
Finan, a former White House cybersecurity official, served as the director of cybersecurity legislation and policy at the NSC and now is an entrepreneur advising cybersecurity startups. Safeguarding companies from ransomware can seem overwhelming given the frequency and severity of high-profile attacks, he said. But in reality, “it can be managed just like any other business risk,” he added.<\/p>\n
“It starts at the CEO level,” Finan said. “You have to have executive ownership of this problem. You\u2019ve got to take the time to communicate its importance to your staff because you\u2019re going to need the entire company to buy in.”<\/p>\n
Logistics in the Crosshairs<\/h4>\n
Warehouses and distribution centers are attractive targets for ransomware criminals because they\u2019re fast-paced business environments where disruptions to operations quickly hurt the bottom line. In addition to lost revenue from unplanned downtime, shippers risk disappointing their customers and losing market share if they can\u2019t make deliveries on time.<\/p>\n
Those companies also have vast quantities of sensitive data about customers and their own internal operations that they wouldn\u2019t want to be disclosed to competitors and the public at large. Consequently, hackers “see fertile hunting ground in the supply chain and supply-chain technologies,” Finan said. “Those companies are very much in the crosshairs.”<\/p>\n
Facing financial and reputational damage, it\u2019s no wonder why many companies accede to hackers\u2019 demands and pay up. But the FBI doesn\u2019t support paying a ransom to cybercriminals, noting that doing so only encourages future attacks. There\u2019s also no guarantee that companies will get their data back.<\/p>\n
“I have a very strong view that you should not pay ransoms,” Knake said. “Every time you pay a ransom, you\u2019re helping these criminal organizations improve their capabilities. These are sophisticated organizations, so they\u2019re reinvesting that money to become more advanced. That\u2019s why I support banning ransom payments.”<\/p>\n
Best Practices<\/h4>\n
Implementing a few best practices can greatly reduce the risk of a successful ransomware attack, Knake said. One essential component is requiring multifactor authentication to verify employees\u2019 identities before they can access a system, application or service. It adds a second layer of security beyond just a username and password, which can be compromised by hackers.<\/p>\n
Multifactor authentication can take several forms. Employees may be asked to answer a security question or enter a pin they receive via text message or email. They also may be able to use a fingerprint, eye scan or voice recognition to prove their identity.<\/p>\n
Secondly, companies should back up their data to the cloud frequently, and their IT departments or vendors should regularly install patches to software programs, ensuring that vulnerabilities are corrected promptly.<\/p>\n
“Most cybercriminals reuse vulnerabilities that are already out there, so if you patch your software, you\u2019re going to have decent protection,” Knake said.<\/p>\n
Finan said patching software can become complex for companies with “large software footprints, so we encourage companies to look for ways of turning on automated patching\u2014making sure these systems are patched regularly, or at least when there are high-severity vulnerabilities announced, they get those notifications, and they\u2019ve got a process in place to quickly patch those systems.”<\/p>\n
Patching software is a necessary but insufficient precaution. Knake said he\u2019s concerned that a growing number of hacking groups are taking advantage of “zero-day vulnerabilities,” or weaknesses in software programs that haven\u2019t been discovered yet.<\/p>\n
“We used to think that only the Chinese and Russian military and intelligence organizations were really capable of doing that\u2014finding unique vulnerabilities in commonly used software and using them to exploit targets for criminal gains,” Knake said.<\/p>\n
To identify vulnerabilities, companies should have their IT department or vendor perform regular cybersecurity audits, examining all computer-based systems and their associated levels of risk. Companies also should invest in firewalls, antivirus programs, data encryption and intrusion-detection systems to help prevent and detect attacks.<\/p>\n
Training is Essential<\/h4>\n
Every employee should receive ongoing training in the latest social engineering techniques used by hackers, such as phishing emails and scam phone calls. Training is especially important when onboarding new hires, but even established employees should be reminded not to share sensitive information such as login credentials, to choose strong passwords and to change them frequently.<\/p>\n
Workers shouldn\u2019t reuse old passwords or have the same password for multiple applications. To prevent a successful breach from spreading to multiple computer-based systems, employees should have access only to the data they need to perform their jobs. Companies should periodically review who has access to what data, recognizing that employees\u2019 roles may change over time.<\/p>\n
Employees should be taught not to open suspicious-looking attachments and to use caution when visiting external websites. For a fee, most cloud-services vendors will provide advanced filtering of incoming email, reducing the amount of spam landing in workers\u2019 inboxes, but they may not detect the increasingly sophisticated threats launched by top ransomware criminals, Knake said.<\/p>\n
Hackers frequently comb corporate websites, LinkedIn, Facebook and other sites for email addresses and information they can use to create highly targeted phishing emails, he said. The emails typically urge employees to give up sensitive information by creating a sense of urgency, convincing them to abandon normal cybersecurity procedures and cast their doubts aside.<\/p>\n
With the emergence of artificial intelligence, companies can expect these highly personalized phishing attempts to become more common and harder to identify, Knake said. The risk is elevated when a trusted customer or vendor suffers a breach and hackers use their email accounts to send phishing emails, adding a layer of authenticity to the attack.<\/p>\n
If something sounds fishy, or if someone requests sensitive information, workers should be instructed to pick up the phone and contact that person directly.<\/p>\n
Click here to read the full feature.<\/strong><\/em><\/a><\/p>\nISTOCK.COM\/AMGUN<\/a><\/h6>\n","protected":false},"excerpt":{"rendered":"Feature Safeguarding Your Company from Ransomware and Cyberattacks BY NICK FORTUNA At the MHI Cybersecurity Workshop, business executives will witness the debilitating effects of a successful ransomware attack on a material-handling company, but thankfully, they won\u2019t feel any of the pain. Cybersecurity experts Chris Finan and Robert Knake will lead a tabletop exercise simulating a …<\/p>\n","protected":false},"author":40,"featured_media":7360,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[5,13],"tags":[2511,465,1539,442,1902,1907,3222,466],"class_list":["post-7359","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-features","category-technology","tag-cyberattack","tag-cyberattacks","tag-cybersecurity","tag-mhi-solutions","tag-mhi-solutions-magazine","tag-mhisolutionsmag","tag-ransomware-attacks","tag-supply-chain"],"yoast_head":"\n
The Relentless Rise of Cybercrime - MHI Solutions<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.mhisolutions-digital.com\/mhiq\/0324_volume_12__issue_3\/MobilePagedArticle.action?app=false&cmsId=4196767\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"The Relentless Rise of Cybercrime - MHI Solutions\" \/>\n<meta property=\"og:description\" content=\"Feature Safeguarding Your Company from Ransomware and Cyberattacks BY NICK FORTUNA At the MHI Cybersecurity Workshop, business executives will witness the debilitating effects of a successful ransomware attack on a material-handling company, but thankfully, they won\u2019t feel any of the pain. Cybersecurity experts Chris Finan and Robert Knake will lead a tabletop exercise simulating a ...\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.mhisolutionsmag.com\/index.php\/2024\/05\/31\/the-relentless-rise-of-cybercrime\/\" \/>\n<meta property=\"og:site_name\" content=\"MHI Solutions\" \/>\n<meta property=\"article:published_time\" content=\"2024-05-31T16:20:00+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.mhisolutionsmag.com\/wp-content\/uploads\/2024\/05\/050.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"1000\" \/>\n\t<meta property=\"og:image:height\" content=\"667\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Robin Lamerson\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Robin Lamerson\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"6 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.mhisolutionsmag.com\/index.php\/2024\/05\/31\/the-relentless-rise-of-cybercrime\/\",\"url\":\"https:\/\/www.mhisolutions-digital.com\/mhiq\/0324_volume_12__issue_3\/MobilePagedArticle.action?app=false&cmsId=4196767\",\"name\":\"The Relentless Rise of Cybercrime - MHI Solutions\",\"isPartOf\":{\"@id\":\"https:\/\/www.mhisolutionsmag.com\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/www.mhisolutions-digital.com\/mhiq\/0324_volume_12__issue_3\/MobilePagedArticle.action?app=false&cmsId=4196767#primaryimage\"},\"image\":{\"@id\":\"https:\/\/www.mhisolutions-digital.com\/mhiq\/0324_volume_12__issue_3\/MobilePagedArticle.action?app=false&cmsId=4196767#primaryimage\"},\"thumbnailUrl\":\"https:\/\/www.mhisolutionsmag.com\/wp-content\/uploads\/2024\/05\/050.jpg\",\"datePublished\":\"2024-05-31T16:20:00+00:00\",\"author\":{\"@id\":\"https:\/\/www.mhisolutionsmag.com\/#\/schema\/person\/651ab04bd5786351be0f915720b16f5b\"},\"breadcrumb\":{\"@id\":\"https:\/\/www.mhisolutions-digital.com\/mhiq\/0324_volume_12__issue_3\/MobilePagedArticle.action?app=false&cmsId=4196767#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.mhisolutions-digital.com\/mhiq\/0324_volume_12__issue_3\/MobilePagedArticle.action?app=false&cmsId=4196767\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.mhisolutions-digital.com\/mhiq\/0324_volume_12__issue_3\/MobilePagedArticle.action?app=false&cmsId=4196767#primaryimage\",\"url\":\"https:\/\/www.mhisolutionsmag.com\/wp-content\/uploads\/2024\/05\/050.jpg\",\"contentUrl\":\"https:\/\/www.mhisolutionsmag.com\/wp-content\/uploads\/2024\/05\/050.jpg\",\"width\":1000,\"height\":667},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.mhisolutions-digital.com\/mhiq\/0324_volume_12__issue_3\/MobilePagedArticle.action?app=false&cmsId=4196767#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/www.mhisolutionsmag.com\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"The Relentless Rise of Cybercrime\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.mhisolutionsmag.com\/#website\",\"url\":\"https:\/\/www.mhisolutionsmag.com\/\",\"name\":\"MHI Solutions\",\"description\":\"Improving Supply Chain Performance\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.mhisolutionsmag.com\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/www.mhisolutionsmag.com\/#\/schema\/person\/651ab04bd5786351be0f915720b16f5b\",\"name\":\"Robin Lamerson\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.mhisolutionsmag.com\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/a282fa3daa389a57fb7be768af92152401f459d8e257543a57ce1b0bc913a8cb?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/a282fa3daa389a57fb7be768af92152401f459d8e257543a57ce1b0bc913a8cb?s=96&d=mm&r=g\",\"caption\":\"Robin Lamerson\"},\"url\":\"https:\/\/www.mhisolutionsmag.com\/index.php\/author\/rlamerson\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"The Relentless Rise of Cybercrime - MHI Solutions","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.mhisolutions-digital.com\/mhiq\/0324_volume_12__issue_3\/MobilePagedArticle.action?app=false&cmsId=4196767","og_locale":"en_US","og_type":"article","og_title":"The Relentless Rise of Cybercrime - MHI Solutions","og_description":"Feature Safeguarding Your Company from Ransomware and Cyberattacks BY NICK FORTUNA At the MHI Cybersecurity Workshop, business executives will witness the debilitating effects of a successful ransomware attack on a material-handling company, but thankfully, they won\u2019t feel any of the pain. Cybersecurity experts Chris Finan and Robert Knake will lead a tabletop exercise simulating a ...","og_url":"https:\/\/www.mhisolutionsmag.com\/index.php\/2024\/05\/31\/the-relentless-rise-of-cybercrime\/","og_site_name":"MHI Solutions","article_published_time":"2024-05-31T16:20:00+00:00","og_image":[{"width":1000,"height":667,"url":"https:\/\/www.mhisolutionsmag.com\/wp-content\/uploads\/2024\/05\/050.jpg","type":"image\/jpeg"}],"author":"Robin Lamerson","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Robin Lamerson","Est. reading time":"6 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/www.mhisolutionsmag.com\/index.php\/2024\/05\/31\/the-relentless-rise-of-cybercrime\/","url":"https:\/\/www.mhisolutions-digital.com\/mhiq\/0324_volume_12__issue_3\/MobilePagedArticle.action?app=false&cmsId=4196767","name":"The Relentless Rise of Cybercrime - MHI Solutions","isPartOf":{"@id":"https:\/\/www.mhisolutionsmag.com\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.mhisolutions-digital.com\/mhiq\/0324_volume_12__issue_3\/MobilePagedArticle.action?app=false&cmsId=4196767#primaryimage"},"image":{"@id":"https:\/\/www.mhisolutions-digital.com\/mhiq\/0324_volume_12__issue_3\/MobilePagedArticle.action?app=false&cmsId=4196767#primaryimage"},"thumbnailUrl":"https:\/\/www.mhisolutionsmag.com\/wp-content\/uploads\/2024\/05\/050.jpg","datePublished":"2024-05-31T16:20:00+00:00","author":{"@id":"https:\/\/www.mhisolutionsmag.com\/#\/schema\/person\/651ab04bd5786351be0f915720b16f5b"},"breadcrumb":{"@id":"https:\/\/www.mhisolutions-digital.com\/mhiq\/0324_volume_12__issue_3\/MobilePagedArticle.action?app=false&cmsId=4196767#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.mhisolutions-digital.com\/mhiq\/0324_volume_12__issue_3\/MobilePagedArticle.action?app=false&cmsId=4196767"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.mhisolutions-digital.com\/mhiq\/0324_volume_12__issue_3\/MobilePagedArticle.action?app=false&cmsId=4196767#primaryimage","url":"https:\/\/www.mhisolutionsmag.com\/wp-content\/uploads\/2024\/05\/050.jpg","contentUrl":"https:\/\/www.mhisolutionsmag.com\/wp-content\/uploads\/2024\/05\/050.jpg","width":1000,"height":667},{"@type":"BreadcrumbList","@id":"https:\/\/www.mhisolutions-digital.com\/mhiq\/0324_volume_12__issue_3\/MobilePagedArticle.action?app=false&cmsId=4196767#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.mhisolutionsmag.com\/"},{"@type":"ListItem","position":2,"name":"The Relentless Rise of Cybercrime"}]},{"@type":"WebSite","@id":"https:\/\/www.mhisolutionsmag.com\/#website","url":"https:\/\/www.mhisolutionsmag.com\/","name":"MHI Solutions","description":"Improving Supply Chain Performance","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.mhisolutionsmag.com\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/www.mhisolutionsmag.com\/#\/schema\/person\/651ab04bd5786351be0f915720b16f5b","name":"Robin Lamerson","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.mhisolutionsmag.com\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/a282fa3daa389a57fb7be768af92152401f459d8e257543a57ce1b0bc913a8cb?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/a282fa3daa389a57fb7be768af92152401f459d8e257543a57ce1b0bc913a8cb?s=96&d=mm&r=g","caption":"Robin Lamerson"},"url":"https:\/\/www.mhisolutionsmag.com\/index.php\/author\/rlamerson\/"}]}},"_links":{"self":[{"href":"https:\/\/www.mhisolutionsmag.com\/index.php\/wp-json\/wp\/v2\/posts\/7359","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.mhisolutionsmag.com\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.mhisolutionsmag.com\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.mhisolutionsmag.com\/index.php\/wp-json\/wp\/v2\/users\/40"}],"replies":[{"embeddable":true,"href":"https:\/\/www.mhisolutionsmag.com\/index.php\/wp-json\/wp\/v2\/comments?post=7359"}],"version-history":[{"count":0,"href":"https:\/\/www.mhisolutionsmag.com\/index.php\/wp-json\/wp\/v2\/posts\/7359\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.mhisolutionsmag.com\/index.php\/wp-json\/wp\/v2\/media\/7360"}],"wp:attachment":[{"href":"https:\/\/www.mhisolutionsmag.com\/index.php\/wp-json\/wp\/v2\/media?parent=7359"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.mhisolutionsmag.com\/index.php\/wp-json\/wp\/v2\/categories?post=7359"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.mhisolutionsmag.com\/index.php\/wp-json\/wp\/v2\/tags?post=7359"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}
<\/figure>\nCybersecurity experts Chris Finan and Robert Knake will lead a tabletop exercise simulating a cyberattack and a fictional company\u2019s response, and attendees will receive a resource packet to help them establish a comprehensive cybersecurity program for their companies.<\/p>\n Finan and Knake said the seminar at MHI\u2019s headquarters in Charlotte, N.C., isn\u2019t designed to scare logistics professionals about one of the biggest threats facing their businesses. Rather, their goal is to show that cyberattacks are a manageable risk, so long as companies stay vigilant and committed to best practices.<\/p>\n “The adversary in our scenario is going to achieve their objective, so we\u2019re going to discuss how you handle that,” said Knake, principal at the boutique cybersecurity firm Orkestrel. “Are you in a position to not pay a ransom? Are you able to recover your networks and systems from backups, patch the vulnerabilities in your security posture and get back to business? The goal of the exercise is to help people see the pathway to that outcome.”<\/p>\n Knake and Finan have serious cybersecurity chops. Knake recently returned to the private sector after serving as deputy national cyber director at the White House\u2019s Office of the National Cyber Director. In that role, he led the development of the National Cybersecurity Strategy and oversaw federal cybersecurity spending. He also has served as a director at the National Security Council (NSC).<\/p>\n Finan, a former White House cybersecurity official, served as the director of cybersecurity legislation and policy at the NSC and now is an entrepreneur advising cybersecurity startups. Safeguarding companies from ransomware can seem overwhelming given the frequency and severity of high-profile attacks, he said. But in reality, “it can be managed just like any other business risk,” he added.<\/p>\n “It starts at the CEO level,” Finan said. “You have to have executive ownership of this problem. You\u2019ve got to take the time to communicate its importance to your staff because you\u2019re going to need the entire company to buy in.”<\/p>\n Warehouses and distribution centers are attractive targets for ransomware criminals because they\u2019re fast-paced business environments where disruptions to operations quickly hurt the bottom line. In addition to lost revenue from unplanned downtime, shippers risk disappointing their customers and losing market share if they can\u2019t make deliveries on time.<\/p>\n Those companies also have vast quantities of sensitive data about customers and their own internal operations that they wouldn\u2019t want to be disclosed to competitors and the public at large. Consequently, hackers “see fertile hunting ground in the supply chain and supply-chain technologies,” Finan said. “Those companies are very much in the crosshairs.”<\/p>\n Facing financial and reputational damage, it\u2019s no wonder why many companies accede to hackers\u2019 demands and pay up. But the FBI doesn\u2019t support paying a ransom to cybercriminals, noting that doing so only encourages future attacks. There\u2019s also no guarantee that companies will get their data back.<\/p>\n “I have a very strong view that you should not pay ransoms,” Knake said. “Every time you pay a ransom, you\u2019re helping these criminal organizations improve their capabilities. These are sophisticated organizations, so they\u2019re reinvesting that money to become more advanced. That\u2019s why I support banning ransom payments.”<\/p>\n Implementing a few best practices can greatly reduce the risk of a successful ransomware attack, Knake said. One essential component is requiring multifactor authentication to verify employees\u2019 identities before they can access a system, application or service. It adds a second layer of security beyond just a username and password, which can be compromised by hackers.<\/p>\n Multifactor authentication can take several forms. Employees may be asked to answer a security question or enter a pin they receive via text message or email. They also may be able to use a fingerprint, eye scan or voice recognition to prove their identity.<\/p>\n Secondly, companies should back up their data to the cloud frequently, and their IT departments or vendors should regularly install patches to software programs, ensuring that vulnerabilities are corrected promptly.<\/p>\n “Most cybercriminals reuse vulnerabilities that are already out there, so if you patch your software, you\u2019re going to have decent protection,” Knake said.<\/p>\n Finan said patching software can become complex for companies with “large software footprints, so we encourage companies to look for ways of turning on automated patching\u2014making sure these systems are patched regularly, or at least when there are high-severity vulnerabilities announced, they get those notifications, and they\u2019ve got a process in place to quickly patch those systems.”<\/p>\n Patching software is a necessary but insufficient precaution. Knake said he\u2019s concerned that a growing number of hacking groups are taking advantage of “zero-day vulnerabilities,” or weaknesses in software programs that haven\u2019t been discovered yet.<\/p>\n “We used to think that only the Chinese and Russian military and intelligence organizations were really capable of doing that\u2014finding unique vulnerabilities in commonly used software and using them to exploit targets for criminal gains,” Knake said.<\/p>\n To identify vulnerabilities, companies should have their IT department or vendor perform regular cybersecurity audits, examining all computer-based systems and their associated levels of risk. Companies also should invest in firewalls, antivirus programs, data encryption and intrusion-detection systems to help prevent and detect attacks.<\/p>\n Every employee should receive ongoing training in the latest social engineering techniques used by hackers, such as phishing emails and scam phone calls. Training is especially important when onboarding new hires, but even established employees should be reminded not to share sensitive information such as login credentials, to choose strong passwords and to change them frequently.<\/p>\n Workers shouldn\u2019t reuse old passwords or have the same password for multiple applications. To prevent a successful breach from spreading to multiple computer-based systems, employees should have access only to the data they need to perform their jobs. Companies should periodically review who has access to what data, recognizing that employees\u2019 roles may change over time.<\/p>\n Employees should be taught not to open suspicious-looking attachments and to use caution when visiting external websites. For a fee, most cloud-services vendors will provide advanced filtering of incoming email, reducing the amount of spam landing in workers\u2019 inboxes, but they may not detect the increasingly sophisticated threats launched by top ransomware criminals, Knake said.<\/p>\n Hackers frequently comb corporate websites, LinkedIn, Facebook and other sites for email addresses and information they can use to create highly targeted phishing emails, he said. The emails typically urge employees to give up sensitive information by creating a sense of urgency, convincing them to abandon normal cybersecurity procedures and cast their doubts aside.<\/p>\n With the emergence of artificial intelligence, companies can expect these highly personalized phishing attempts to become more common and harder to identify, Knake said. The risk is elevated when a trusted customer or vendor suffers a breach and hackers use their email accounts to send phishing emails, adding a layer of authenticity to the attack.<\/p>\n If something sounds fishy, or if someone requests sensitive information, workers should be instructed to pick up the phone and contact that person directly.<\/p>\n Click here to read the full feature.<\/strong><\/em><\/a><\/p>\n Feature Safeguarding Your Company from Ransomware and Cyberattacks BY NICK FORTUNA At the MHI Cybersecurity Workshop, business executives will witness the debilitating effects of a successful ransomware attack on a material-handling company, but thankfully, they won\u2019t feel any of the pain. Cybersecurity experts Chris Finan and Robert Knake will lead a tabletop exercise simulating a …<\/p>\n","protected":false},"author":40,"featured_media":7360,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[5,13],"tags":[2511,465,1539,442,1902,1907,3222,466],"class_list":["post-7359","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-features","category-technology","tag-cyberattack","tag-cyberattacks","tag-cybersecurity","tag-mhi-solutions","tag-mhi-solutions-magazine","tag-mhisolutionsmag","tag-ransomware-attacks","tag-supply-chain"],"yoast_head":"\n
\nA<\/span>t the MHI Cybersecurity Workshop, business executives will witness the debilitating effects of a successful ransomware attack on a material-handling company, but thankfully, they won\u2019t feel any of the pain.<\/span><\/p>\nLogistics in the Crosshairs<\/h4>\n
Best Practices<\/h4>\n
Training is Essential<\/h4>\n
ISTOCK.COM\/AMGUN<\/a><\/h6>\n","protected":false},"excerpt":{"rendered":"