iscover
ReporterShare this article on:
Powered by
MOMENTUM
MEDIA
Cyber-physical systems will continue to be targeted by malicious cyber actors via distributed denial-of-service (DDoS) attacks, increased malware activity, targeted persistent phishing attacks, and disinformation campaigns as long as the Russian invasion of Ukraine continues, according to Gartner.
"The fog of war" according to Paul Proctor, vice president analyst at Gartner, can challenge situational awareness and panic aims to increase the risk of mistakes, to the advantage of bad actors.
“While the impacts of individual attacks will vary, the broader effects of a heightened threat environment will be felt by organisations worldwide,” Proctor said.
“It’s likely that cyber threats will continue at least as long as the physical conflict does.”
Cyber warfare does not have geographical boundaries, Proctor notes, in the way that physical conflict does.
"At least three energy companies in Germany have been targeted in cyber attacks since the invasion began."
"We've also seen cyber actors in other regions, such as China, taking advantage of the situation to propagate threats, as well as involvement from non-state actors, like the Anonymous hacking group engaging in an offensive against the pro-Russia Conti ransomware gang,” Proctor explained in a CRN interview.
Enterprise Security risk cannot be managed in a vacuum by the CISO and their team, Proctor added, as the Russian invasion of Ukraine has demonstrated
“Crises place an additional premium on risk-based decision-making, and business leadership must be involved at every level."
"Executives who make defensible, risk-informed choices are more likely to navigate their organisations with resilience, from response through recovery."
"Geopolitics and cyber security have become inextricably linked," Proctor said.
Security leaders 'need to be looking at the global threat landscape from a business lens,' as business decisions moving forward, will have security implications.
“What is the business' appetite for that risk, and is it changing in the context of these events? Modern enterprise security leaders cannot just focus on vulnerabilities or security technologies."
“They must lead the enterprise to make informed decisions about its cyber-related risk exposure, and understanding the security impacts of global events is a key component of that new role,” he ended."
"“What is the business' appetite for that risk, and is it changing in the context of these events? Modern enterprise security leaders cannot just focus on vulnerabilities or security technologies."
“Rather, they must lead the enterprise to make informed decisions about its cyber-related risk exposure, and understanding the security impacts of global events is a key component of that new role,” he ended.
"Leaders should consider how current events are impacting enterprise risk levels," Proctor concluded.
[Related: Snake Keylogger identified as top malware circulating in Australia]
Be the first to hear the latest developments in the cyber industry.
