{"id":1113,"date":"2018-02-23T12:51:35","date_gmt":"2018-02-23T16:51:35","guid":{"rendered":"https:\/\/solutionsreview.com\/endpoint-security\/?p=1113"},"modified":"2018-02-23T12:51:35","modified_gmt":"2018-02-23T16:51:35","slug":"big-picture-cybersecurity-headlines-february-23-2018","status":"publish","type":"post","link":"https:\/\/solutionsreview.com\/endpoint-security\/big-picture-cybersecurity-headlines-february-23-2018\/","title":{"rendered":"The Big Picture: Cybersecurity Headlines February 23, 2018"},"content":{"rendered":"

\"cybersecurity<\/p>\n

Another week, another dizzying array of headlines in cybersecurity. Our field is marked by so many shocking discoveries and bizarre twists we could be mistaken for a soap opera if the situation didn\u2019t appear so dire (or if we had more inexplicable bouts of amnesia). <\/span><\/p>\n

Consider this article an update on all the biggest headlines of the past few days, with some reflections on what it all could mean for cybersecurity in the future. <\/span><\/p>\n

Tesla, <\/b>Los Angeles Times<\/i><\/b> Servers Hacked, Used to Mine Cryptocurrency <\/b><\/h3>\n

Last week we wrote about <\/span>cryptojacking<\/span><\/a>\u2014the practice by which victim servers are used to mine cryptocurrency against their will. That proved prophetic with the revelation that automotive and solar panel manufacturer Tesla had one of their cloud servers cryptojacked. The server in question, a Kubernetes administration console, was public and did not have any form of password protection, making it easy to infiltrate. Digital security company Redlock discovered the problem and alerted Tesla.<\/span><\/p>\n

Meanwhile, a similar <\/span>cryptojacking attack<\/span><\/a> occurred on the <\/span>Los Angeles Times <\/span><\/i>Homicide Report page, operating at such a low capacity that it went unnoticed for (possibly) weeks. \u00a0<\/span><\/p>\n

Takeaway: <\/b>Our colleagues explored the <\/span>details about the Tesla hack<\/span><\/a> already. but the biggest takeaway we found is that digital hygiene best practices are not givens. Even a billion dollar company or a major newspaper can become careless if they don\u2019t practice due diligence. Never assume your enterprise is safe online; your cybersecurity team should be constantly evaluating your perimeter, monitoring for any signs of penetration, and working with your solutions provider to investigate security incidents. Furthermore, your team needs to know what assets are where and who has access to them so as to ensure they receive the same treatment. <\/span><\/p>\n

Also, and this should go without saying, make sure your servers and networks have adequate authentication protocols. <\/span><\/p>\n

SEC Releases New Cybersecurity Guidelines<\/b><\/h3>\n

The U.S. Security and Exchange Commission (SEC) issued a <\/span>new guidance<\/span><\/a> demanding public companies to be more forthcoming about disclosing their cybersecurity breaches and risks. The guidance: <\/span><\/p>\n