TeamsPhisher: Why your daily meeting tool might be vulnerable

[ad_1]

Hacks have increased through the pandemic and the war in Ukraine. — © AFP/File Noel Celis

A member of the U.S. Navy’s red team released a tool called TeamsPhisher recently. This unwanted innovation takes advantage of an unresolved security problem in Microsoft Teams. The vulnerability allows Teams accounts from an outside body to bypass client-side security controls and release malicious payloads directly towards the target’s inbox.

To shed more light on this incident, George Prichici, VP of Products at OPSWAT, a global leader in critical infrastructure protection (CIP) cybersecurity solutions, explains to Digital Journal about the resultant cybersecurity ramifications.

Prichici observes: “The recent news of a new tool exploiting a vulnerability in Microsoft Teams to send malware to users highlights the increasing risks associated with popular communication platforms. With a large user base and sensitive information being shared, Microsoft Teams has become an attractive target for hackers.”

In terms of the specific software application, Prichici interprets this as: “TeamsPhisher capitalizes on an already known vulnerability, allowing hackers to exploit it and send harmful files or programs to unsuspecting users. This poses a significant threat as it can lead to compromised computers and unauthorized access to sensitive information.”

The computer giant behind Teams has responded,. Says Prichici: “While Microsoft has acknowledged the issue, stating that social engineering plays a role in the success of these attacks, the human element remains a weak link.”

In terms of this weakness: “Social engineering is a highly effective and profitable attack method for hackers, and as highlighted by the 2023 Verizon Data Breach report, 74 percent of breaches involve the human element. This underscores the importance of educating employees and fostering a culture of cybersecurity awareness within organizations. However, education alone is not enough and relying on human behaviour is not fool proof.”

There are measures that can (and need) to be taken to address this and related vulnerabilities. These are set out by Prichici as: “To mitigate the risks posed by this vulnerability, organizations should adopt a proactive, layered defence approach. This includes implementing the right detection and prevention technologies like ‘Multiscanning’ (simultaneous scans with multiple AV engines), CDR (Content Disarm and Reconstruction), Vulnerability Assessment and more in automated workflows to safeguard users and prevent malware infiltration.”

In terms of other measures, Prichici continues: “Additionally, they should ensure up-to-date security software is in place to detect and block any potential malware transmitted via files shared through Microsoft Teams, as well as prioritize data storage security by scanning and sanitizing files and content for malware, redacting sensitive information, and implementing periodic scans can help mitigate the risk of malware infiltration.”

In concluding, Prichici states: “By following these measures, organizations can establish a zero-trust environment that enforces security at every step to mitigate the potential damage caused by this vulnerability.”

Where are the most successful new businesses opening in the UK?

A new study from CMC Markets has revealed which U.K. cities are home to the most successful new businesses. The data sets is indicative that the U.K. is slowly picking up its economic base. The availability of candidates for new jobs rose in June at the sharpest rate since December 2020.

The data from the study revealed Reading has the lowest percentage of closures, with just 0.13 percent of businesses launched between Dec 17-Dec 2022 going into liquidation. Stoke-on-Trent, Plymouth, and Cardiff make the top five, with less than 1 percent of new businesses ceasing in the last five years.

The research used business intelligence software, Endole, to analyse how many businesses were incorporated in the UK’s largest 25 cities from December 2017 to December 2022 compared to the number that went into administration, liquidation, or were dissolved.

Alongside Reading, Stoke-on-Trent, Plymouth, and Cardiff are also home to some of the UK’s most thriving businesses and entrepreneurs.

The top ten shows:

City No. of Reported Openings No. of Reported Closures Percent of Closures
Reading 6,877 9 0.13%
Stoke-on-Trent 6,228 13 0.21%
Plymouth 4,744 13 0.27%
Cardiff 18,232 58 0.32%
Edinburgh 17,372 71 0.41%
Bradford 2,655 11 0.45%
Bristol 17,043 94 0.55%
Northampton 8,993 49 0.55%
Derby 8,109 45 0.56%
Belfast 7,819 62 0.79%

In contrast, the 10 cities with the least successful new businesses are:

City No. of Reported Openings No. of Reported Closures Percent of Closures
Southampton 5,337 162 3.04%
Sheffield 13,241 397 3.00%
Birmingham 16,330 333 2.04%
Leeds 15,377 276 1.80%
Manchester 35,525 622 1.75%
London 23,192 320 1.38%
Coventry 12,900 176 1.36%
Newcastle upon Tyne 7,988 96 1.20%
Kingston upon Hull 6,036 62 1.03%
Nottingham 9,863 95 0.96%

The data reveals Southampton is the city with the highest number of closures in comparison to openings between Dec 17 and Dec 2022, with 162 of these businesses ceasing trading.

Sheffield is next with 3 percent of closures, followed by Birmingham (2.04 percent) and Leeds (1.80 percent).

The City of London is also, surprisingly, amongst the areas with the least successful new businesses, seeing 1.38 percent of closures.

[ad_2]

Source link

You May Also Like

About the Author: Chimdi Blaise