iTWire – Hacking wars and Australia’s escalating cyber arms race

GUEST OPINION: Australian companies are at struggle with an aggressive, distributed power of extremely motivated, technically adept and well-organised criminals intent on stealing info, conducting fraud and destroying company reputations. The weapons they’ve at their disposal embody well-known instruments resembling ransomware and new AI-fuelled arms that require new strategies of defence.

The Federal Authorities, by means of its new Cyber Safety Technique, will make important investments to assist companies within the battle in opposition to cybercrime along with funds that strengthen important infrastructure and improve authorities cyber safety. That is important because the Australian Cyber Safety Centre’s annual report factors to the persevering with escalation of the menace atmosphere. And we’d like solely have a look at the headlines of the final 18 months to see the variety of important assaults impacting well-resourced firms. Optus, Medibank, Latitude, HWL Ebsworth, and, most just lately, DP World have all been breached, inflicting chaos that has instantly or not directly impacted each Australian citizen. 

When ChatGPT debuted, individuals marvelled at its means to take a easy immediate and generate a complicated reply. The world of cybercrime took discover and created generative AI instruments on the darkish net for criminals to make use of. Menace actors are utilizing WormGPT, FraudGPT, XXXGPT, and WolfGPT to create higher phishing emails, craft new malware variants sooner than ever earlier than and construct software program that may exploit newly found system vulnerabilities earlier than the organisation’s safety and operations groups can patch them. 

All these actions could be automated, and the extent of cooperation between these criminals is extraordinary. Cybercrime consultants in several fields, resembling writing software program, creating AI instruments, and operating pc networks for the distribution of malware, are actually promoting or renting their providers to one another. Many function assist desk providers to assist victims make funds utilizing untraceable cryptocurrency. When somebody pays ransom to unlock their knowledge, that cash finds its manner into the pockets of many alternative prison syndicates. 

Each organisation, from the smallest enterprise to the biggest company and authorities division, should prioritise cybersecurity. Cybercrime is a threat that should be addressed with a cohesive technique that focuses on the detection of threats earlier than they escalate, safety in opposition to attackers, and restoration so the injury from a profitable assault is proscribed and regular operations can shortly resume. 

Detection begins with common monitoring of prison exercise. That may embody menace intelligence providers that monitor the darkish net to study which organisations or industries are being focused. It additionally means having clever instruments that may put the items collectively from info that’s collected in system logs. That is the place AI and machine studying are highly effective allies on this struggle. The quantity of information that’s accessible is greater than individuals can course of. AI can put collectively seemingly unrelated knowledge to detect potential assaults.

Nevertheless, not all assaults could be detected. For instance, many nation-state and state-sponsored attackers use Superior Persistent Threats (APTs). These are threats that exploit unknown vulnerabilities and are backed by extremely expert and resourced attackers. In lots of instances, cybersecurity insurers received’t pay out in opposition to these assaults as they’re deemed to be an ‘act of struggle’ and are exempted from insurance policies. 

This is the reason preventative measures are important. It’s important they’ve techniques and processes to forestall malicious exercise from inflicting injury. Endpoint safety software program and powerful consumer authentication techniques together with muti-factor authentication or passkeys backed with strong biometric instruments can cease attackers that defy detection.

Even organisations that put money into the most effective detection and prevention instruments to deal with their dangers could be breached. Organisations of all sizes should guarantee they’ve processes and techniques in place to help the quickest potential restoration. Offsite backups which are disconnected from operational techniques make sure that if an assault happens, it’s potential to get better with the least potential knowledge loss and interruption. 

Organisations searching for steerage in creating a Twenty first-century-ready cybersecurity technique have many instruments and requirements they will look to. ISO 27001 and NIST provide complete instruments that cowl each side of cybersecurity detection, safety, and restoration. Nevertheless, these could also be too advanced for smaller organisations to implement. The Australian Indicators Directorate, the Federal Authorities company charged with defending our nation from cybercrime, has printed the Important Eight.

The Important Eight is an easy-to-follow set of tips backed with a maturity mannequin that helps organisations tailor their cybersecurity technique to their particular dangers. 

Australian companies are engaged in a cybersecurity struggle. The enemy is a distributed group of criminals working cooperatively for revenue. They’re expert, motivated, and well-resourced. Defending in opposition to this enemy requires a method that may detect assaults, defend in opposition to them and get better ought to an attacker succeed. Organisations should take a strategic and risk-based method to make sure they’re ready for this escalating battle. 

Concerning the writer:

Kurt Hansen is the CEO of Tesserent, a Thales Australia firm and main supplier of full-service cybersecurity providers in Australia and New Zealand. Tesserent is the biggest supplier of cybersecurity consulting providers to the Federal Authorities. Tesserent Federal has greater than 190 devoted cybersecurity consultants working with over 100 Australian and New Zealand Federal and State Departments and Companies. Tesserent works with greater than 1200+ prospects spanning three key verticals of presidency, important infrastructure and banking, monetary providers and insurance coverage and is trusted by 51 of the S&P/ASX High 100 firms