Vulnerabilities / Threats

1/9/2019
02:55 PM
Connect Directly
Twitter
RSS
E-Mail
50%
50%

NCSC Launches Nation-State Cyber Threat Protection Program for Businesses

National Counterintelligence and Security Center (NCSC) released free online security awareness materials for businesses to defend against nation-state hackers.

The US Office of the Director of National Intelligence (ODNI) National Counterintelligence and Security Center (NCSC) has launched a new free program to help private sector companies understand and defend against attacks by nation-state cyberattackers.

NCSC now offers a series of videos, brochures, and posters to raise awareness of the threat of foreign-sponsored cyberattack campaigns, and how to best protect against them.

"We made a determination to launch this campaign after a series of interactions with private sector representatives around the country," says Dean Boyd, the NCSC's chief communications executive. "While many corporate officials were well-aware of the threats to their businesses from foreign intelligence entities, many others were not and requested information and assistance. A key part of our mission at NCSC is to provide counterintelligence outreach to US private sector entities at risk of foreign intelligence penetration."

Security expert say it's not typical of the normally secretive NCSC - which reports to the Office of the Director of National Intelligence - to make such a public splash. 

"In many ways it's long overdue to a degree," says Drew Lydecker, president and co-founder of Avant Communications. "It's a reiteration of how huge a deal this is and how large an issue security has become. It's good they are talking about foreign travel and Wi-Fi [in the materials], especially for small and midsized businesses: they don't always take the threat as seriously as they should."

Jessica Ortega, a website security research analyst for SiteLock, notes that it's important that a federal intelligence agency has taken the lead.

"Small businesses especially have to understand that they are a valuable target for hackers," Ortega says. "Keep in mind that the average website gets 50 attacks a day … so small business owners shouldn't think they are too small not to get attacked."

NCSC's Boyd underscored that while all businesses can benefit from these new materials, SMBs are an important focus of the NCSC's effort. Many of these firms don't always have adequate resources for cybersecurity or even knowledge of the threats to their businesses posed by foreign intelligence organizations, he notes.

Some of these materials previously had been disseminated to the federal workforce to heighten awareness, he says, but after recent interactions with the private sector and the many recent cases involving nation-states targeting US  businesses, the agency believed it was important to get these materials to the private sector as well.

The goal with this program up front is to provide companies both with basic information on the threats and simple steps they can take to mitigate risks.

Here are four areas the NCSC identified in its new program materials

Corporate supply chains. Third parties have been an area of risk focus since the Target hack several years ago. NCSC says companies should know their suppliers, the equipment and services they provide, and their service providers. Start by asking the right questions before procuring their products or services. Get acquisition and procurement people involved with the company's risk management and security program.

Spearphishing emails. In October 2018, two Chinese intelligence officers and eight others were indicted for hacking US and European aerospace companies over five years to steal trade secrets on commercial aircraft engines. They allegedly used spearphishing to penetrate these corporate networks. Small manufacturers or banks in the Midwest or South think they are not at risk, but they are prime targets. Start by never clicking on suspicious links or attachments, particularly from unverified or unknown sources, the NCSC says.

Social media deception. China's intelligence services regularly use social media platforms to spot, assess, and target Americans with access to business or government secrets. Be sure to maximize your social media privacy settings and double-check the source before friending strangers, the agency recommends.

Foreign travel. NCSC says when traveling abroad, businesspeople should not expect electronic privacy. Wi-Fi networks overseas are regularly monitored by security services and others who can insert malicious software into your device through any connection they control. NCSC says it's best to leave electronic devices at home, but if you have to bring them, have them with you at all times.

 

Related Content:

Steve Zurier has more than 30 years of journalism and publishing experience, most of the last 24 of which were spent covering networking and security technology. Steve is based in Columbia, Md. View Full Bio

Comment  | 
Print  | 
More Insights
Comments
Newest First  |  Oldest First  |  Threaded View
Register for Dark Reading Newsletters
White Papers
Video
Cartoon Contest
Current Issue
The Year in Security 2018
This Dark Reading Tech Digest explores the biggest news stories of 2018 that shaped the cybersecurity landscape.
Flash Poll
How Enterprises Are Attacking the Cybersecurity Problem
How Enterprises Are Attacking the Cybersecurity Problem
Data breach fears and the need to comply with regulations such as GDPR are two major drivers increased spending on security products and technologies. But other factors are contributing to the trend as well. Find out more about how enterprises are attacking the cybersecurity problem by reading our report today.
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2019-3906
PUBLISHED: 2019-01-18
Premisys Identicard version 3.1.190 contains hardcoded credentials in the WCF service on port 9003. An authenticated remote attacker can use these credentials to access the badge system database and modify its contents.
CVE-2019-3907
PUBLISHED: 2019-01-18
Premisys Identicard version 3.1.190 stores user credentials and other sensitive information with a known weak encryption method (MD5 hash of a salt and password).
CVE-2019-3908
PUBLISHED: 2019-01-18
Premisys Identicard version 3.1.190 stores backup files as encrypted zip files. The password to the zip is hard-coded and unchangeable. An attacker with access to these backups can decrypt them and obtain sensitive data.
CVE-2019-3909
PUBLISHED: 2019-01-18
Premisys Identicard version 3.1.190 database uses default credentials. Users are unable to change the credentials without vendor intervention.
CVE-2019-3910
PUBLISHED: 2019-01-18
Crestron AM-100 before firmware version 1.6.0.2 contains an authentication bypass in the web interface's return.cgi script. Unauthenticated remote users can use the bypass to access some administrator functionality such as configuring update sources and rebooting the device.