<img height="1" width="1" style="display:none;" alt="" src="https://px.ads.linkedin.com/collect/?pid=2975524&amp;fmt=gif">
BLOG

Cybersecurity Threat Breakdown [Spooky Edition]

October 31, 2019

scary-cybercriminal

There’s nothing spookier than an unknown hacker accessing your data. Here’s your monthly roundup of the latest hacks and data breaches around the world. In this series, I’ll share information and updates on the most recent hacks that I saw in the news, including causes, resolutions, and what you can do to protect your data.

Over the last several weeks, there was some scary stuff happening in the cyber security world. Major data breaches happened in the retail, healthcare and school systems.

ASICS

I would be spooked if I walked by a retail store and saw inappropriate content on their advertising display screens, especially if I had my kids with me. That is what happened to many customers of ASICS, when the company was hit with a major cyberattack. There has been no report of who hacked into their system or if there was any data stolen, but the screens were immediately turned off and an investigation has started. Cyberattacks of this kind can affect the reputation of  a company, although ASICS has handled it very well so far and made a public apology to their customers. Read more.  

Baltimore

Everyone fears the costs of a ransomware attack. The city of Baltimore was victim to a ransomware attack, with the hackers demanding a payment of 13 Bitcoin, which the city denied. The overall cost of this attack to the city of Baltimore was $18.2 million, can your city afford that? Me neither. What Baltimore did not have set in place was simple policies to back up data systems. This was an expensive mistake. Make sure you have your i’s dotted and t’s crossed when it comes to cybersecurity because it can be expensive when they are not. Read more. 

Download the Protecting the Data eBook

AWS Buckets

The cloud can be a strange and creepy concept to begin with, but a cloud hacker might as well be a real life ghost. Two online recruitment firms’ cloud data was not properly secure, so when they were hacked, more than 250,000 CV’s were exposed. CV’s contain personal information including phone numbers, full names, and email addresses of the individuals. Both recruiting companies kept their data in AWS buckets, and and an opening was found within the AWS Bucket system. With the cloud becoming a more common place to store data, it is important to take extra measures to make sure your data in the cloud is secure.Read more.

Freedom Healthcare Staffing

Another cloud database mistake was made by Freedom Healthcare Staffing located in Aurora, Colorado. They left their cloud database with no password protection for over a year exposing almost 1 million healthcare records accessible to hackers. The data included a number of sensitive details such as internal investigation cases, communication records, and contact information of employees and job candidates. Once the issue was brought to authorities, the cloud database was secured with a password and an encryption algorithm. This cloud was clearly not set up properly, which could have cost this company a lot of money. Securing the cloud is just as important as securing any other network. Read more.

[Want to make sure your company’s data is secure? Download our whitepaper: Protecting the Data to learn how complete network visibility can be your greatest defense against hackers.]

See Everything. Secure Everything.

Contact us now to secure and optimized your network operations

Heartbeats Packets Inside the Bypass TAP

If the inline security tool goes off-line, the TAP will bypass the tool and automatically keep the link flowing. The Bypass TAP does this by sending heartbeat packets to the inline security tool. As long as the inline security tool is on-line, the heartbeat packets will be returned to the TAP, and the link traffic will continue to flow through the inline security tool.

If the heartbeat packets are not returned to the TAP (indicating that the inline security tool has gone off-line), the TAP will automatically 'bypass' the inline security tool and keep the link traffic flowing. The TAP also removes the heartbeat packets before sending the network traffic back onto the critical link.

While the TAP is in bypass mode, it continues to send heartbeat packets out to the inline security tool so that once the tool is back on-line, it will begin returning the heartbeat packets back to the TAP indicating that the tool is ready to go back to work. The TAP will then direct the network traffic back through the inline security tool along with the heartbeat packets placing the tool back inline.

Some of you may have noticed a flaw in the logic behind this solution!  You say, “What if the TAP should fail because it is also in-line? Then the link will also fail!” The TAP would now be considered a point of failure. That is a good catch – but in our blog on Bypass vs. Failsafe, I explained that if a TAP were to fail or lose power, it must provide failsafe protection to the link it is attached to. So our network TAP will go into Failsafe mode keeping the link flowing.

Glossary

  1. Single point of failure: a risk to an IT network if one part of the system brings down a larger part of the entire system.

  2. Heartbeat packet: a soft detection technology that monitors the health of inline appliances. Read the heartbeat packet blog here.

  3. Critical link: the connection between two or more network devices or appliances that if the connection fails then the network is disrupted.

NETWORK MANAGEMENT | THE 101 SERIES