security shield

How to Prevent Cyber Attacks During the COVID-19 Pandemic

Unless you were on a long desert meditation trip like Jared Leto, it is impossible not to have heard about the Coronavirus or COVID-19 pandemic sweeping through the globe. At the time of writing this article, there have been over 16 million confirmed cases of COVID-19 in over 200 countries worldwide. At this point the pandemic is truly a global event of epic proportions, hopefully the last event of its kind we will see in our lifetimes.

We’ve all heard about the ways we can protect ourselves and our loved ones against this outbreak: wear a mask, wash your hands, don’t touch your face, practice social distancing, etc. The risks of this virus outbreak are real and all of us have to play a role in slowing, and eventually stopping, its propagation.

However, we also have to realize that, in the tech world – which by extension is the real world these days since everything and everyone is connected – you have to be as cautious as you have to be in real life.

What this means is that, since the start of the global outbreak, we have seen a spike in cyber attacks in this period of uncertainty and therefore we must be extra vigilant. At the same time, since almost everyone is working from home these days, the organizations they work for are facing new challenges as multiple new attack vectors are being introduced into their networks. Since the start of the pandemic in late 2019, we have seen different attacks, ranging from attackers targeting the World Health Organization (WHO) to steal information to mass phishing email and spam campaigns targeting remote workers. We have even seen cases where cybercriminals are launching websites with domain names related to Coronavirus and COVID-19, exploiting people’s curiosity or worry to eventually launch ransomware attacks.

When it comes to cyber security, just like public health, prevention can be better than the cure. We are providing you with some common guidelines and security best practices that, when followed, can give you a better chance of fighting the people who are trying to capitalize on the chaos of this pandemic.

Things You Should do to Protect Your Networks and Data from Cyber Attacks

Train your employees on security and work from home best practices and make sure they are aware of the risk they can inadvertently pose to the security of the organization.

If possible, then ensure that your employees are only using their corporate devices to access company data. Also make sure that the devices they use have the latest security patches installed and updates enabled.

Tweak your company’s email protection settings to ensure that no phishing or spam emails can make it through to your employees.

Train your employees in the art of spotting phishing emails and to not click on suspicious links and alert them to phishing emails that have made it through.

Make sure remote users access SaaS applications through the corporate network instead of accessing the applications directly via the internet from home. This would ensure that your security solutions like CASBs have visibility into all traffic accessing your services in the cloud.

Most SaaS providers facilitate such access to their services; however, you might have to enable a few settings to make it work.

Make sure you are keeping a close eye on all your network traffic, especially SaaS traffic. Data breaches are a real threat during this crisis, and you must ensure that no unauthorized data transfers take place in the guise of “normal remote work.”

Ensure tenant access control if possible, to avoid data breaches or illegitimate data access.

Purchase or enable DLP capabilities provided by your SaaS providers to ensure additional data protection.

Ensure that all your employees accessing your corporate network are using VPNs to do so.

If you already have a dedicated TLS/SSL inspection solution that you never got around to installing, now would be the right time to deploy it, so you don’t miss any encrypted attacks or data breaches. Remember, most of the internet traffic is encrypted and without proper decryption in place, you won’t be able to stop encrypted attacks.

If you don’t have a dedicated TLS/SSL inspection solution but have NGFWs that can decrypt TLS/SSL traffic, then enable the feature as a temporary fix while you evaluate your dedicated decryption strategy. It will probably slow your network down and create bottlenecks, but that would still be better than being subjected to encrypted attacks.

If you have a DDoS protection solution, monitor it closely and reevaluate your configurations and strategies.

If you have a centralized management and analytics solution, make sure you are monitoring it closely.

Make sure your analytics solutions can track shadow IT. If you followed the previous steps, then that should help facilitate the tracking of unauthorized application use.

Practice Zero Trust

Finally, as the Zero Trust model recommends, practice the principle of “trust nobody” and make sure that no user has access to data that they don’t depend on for their day-to-day functions. Restrict access as much as possible, ensure that you have visibility into all your users, traffic, data and workloads, and that you have uniform security policies applied across all locations to make sure no security loopholes exist.

Just like the simple task of wearing a mask can help protect yourself and others against the COVID-19, taking simple, common-sense security measures can help protect us all against the cyber criminals exploiting the chaos.

Featured

  • Gun Violence Report Finds Retail Spaces, K-12 Schools Most Targeted

    ZeroEyes, the creators of the only AI-based gun detection video analytics platform that holds the U.S. Department of Homeland Security SAFETY Act Designation, today announced the release of its annual Gun Violence Report, offering a deep dive into the landscape of gun-related incidents across the United States. This analysis extends beyond mass fatality events, providing a more nuanced understanding of when, where, and why shootings occur. Read Now

  • Agentic AI Will Revolutionize Cybercrime in 2025 According to New Report

    Malwarebytes, a provider in real-time cyber protection, recently released its 2025 State of Malware report, which reveals insight into the emergence of agentic artificial intelligence (AI), plus the year’s most prominent threats and cybercrime tactics. The report details a significant uptick in the number of known ransomware attacks, the total value of ransoms paid in 2024, and how IT teams can address them. Read Now

  • ESX 2025 Announces Expanded Schedule of Events

    ESX has announced its dynamic 2025 schedule, set to provide an unparalleled experience for professionals in the electronic security and life safety industry. Taking place June 16-19 at the Cobb Galleria Centre, this year’s event features an expanded lineup of educational sessions, hands-on workshops, inspiring main stage speakers, networking opportunities, and an engaging expo floor showcasing the latest technology. Read Now

  • City of New Orleans Launches NOLA Ready Public Safety App Before Super Bowl

    The City of New Orleans Office of Homeland Security and Emergency Preparedness (NOHSEP) is pleased to announce the official launch of the NOLA Ready Public Safety App, powered by Motorola Solutions. This new mobile application is designed to enhance public safety and emergency preparedness for both residents and visitors. All individuals planning to attend major events in New Orleans, including the Super Bowl, Mardi Gras, and other large gatherings, are encouraged to download the app. Read Now

New Products

  • AC Nio

    AC Nio

    Aiphone, a leading international manufacturer of intercom, access control, and emergency communication products, has introduced the AC Nio, its access control management software, an important addition to its new line of access control solutions.

  • Hanwha QNO-7012R

    Hanwha QNO-7012R

    The Q Series cameras are equipped with an Open Platform chipset for easy and seamless integration with third-party systems and solutions, and analog video output (CVBS) support for easy camera positioning during installation. A suite of on-board intelligent video analytics covers tampering, directional/virtual line detection, defocus detection, enter/exit, and motion detection.

  • Mobile Safe Shield

    Mobile Safe Shield

    SafeWood Designs, Inc., a manufacturer of patented bullet resistant products, is excited to announce the launch of the Mobile Safe Shield. The Mobile Safe Shield is a moveable bullet resistant shield that provides protection in the event of an assailant and supplies cover in the event of an active shooter. With a heavy-duty steel frame, quality castor wheels, and bullet resistant core, the Mobile Safe Shield is a perfect addition to any guard station, security desks, courthouses, police stations, schools, office spaces and more. The Mobile Safe Shield is incredibly customizable. Bullet resistant materials are available in UL 752 Levels 1 through 8 and include glass, white board, tack board, veneer, and plastic laminate. Flexibility in bullet resistant materials allows for the Mobile Safe Shield to blend more with current interior décor for a seamless design aesthetic. Optional custom paint colors are also available for the steel frame.