{"id":4459,"date":"2019-06-27T15:53:54","date_gmt":"2019-06-27T19:53:54","guid":{"rendered":"https:\/\/solutionsreview.com\/identity-management\/?p=4459"},"modified":"2019-06-27T15:53:54","modified_gmt":"2019-06-27T19:53:54","slug":"does-your-enterprise-know-the-reality-of-a-hack","status":"publish","type":"post","link":"https:\/\/solutionsreview.com\/identity-management\/does-your-enterprise-know-the-reality-of-a-hack\/","title":{"rendered":"Does Your Enterprise Know the Reality of a Hack?"},"content":{"rendered":"

\"Does<\/p>\n

When we say \u201chack,\u201d what do you think of?\u00a0<\/span><\/p>\n

Assuming you ingest the same cultural diet as most Americans, you already have a solid image; a dark-hooded figure in a low-lit room, illuminated only by the blue light of their screen. Furiously they type complex commands and code into their multi-screen endpoint, bypassing security and evading their security opponents. Depending on your choice of movies, you could face entire teams of hackers.\u00a0<\/span><\/p>\n
Widget not in any sidebars
\n

Certainly, this image can strike fear into the heart of any enterprise decision-maker. However, the reality of a hack may surprise you. In fact, the reality of a hack might be far simpler than you could imagine.<\/span><\/p>\n

Privileged Access Management solution provider Centrify offers an on-demand webinar \u201cThe Anatomy of a Hack: Perception vs. Reality<\/a>,\u201d to demonstrate this dichotomy.\u00a0\u00a0<\/span><\/p>\n

The Reality of a Hack <\/b>\u00a0<\/span><\/h2>\n

Centrfy\u2019s Natasha Dolginsky notes the reality of a hack usually involves users\u2019 credentials. Yes, it really can be that simple; hackers just have to log in with stolen, lost, or guessed passwords. After all, who need complex codes when a stolen credential can provide hackers easy access?\u00a0<\/span><\/p>\n

Dr. Torsten George notes the average hacker is precisely that: average. No dark hoods or complex codes, just ordinary people doing their (malicious) jobs. Moreover, the most terrifying kinds of attacks such as DDoS and Zero-Day attacks prove incredibly rare when examined statistically.\u00a0<\/span><\/p>\n

Instead, the reality of a hack often involves simple phishing attacks and stolen credentials\u2014often privileged access credentials. Often, hackers use credential stuffing attacks using lists of stolen passwords on the Internet or even just simple guessing.\u00a0<\/span><\/p>\n

How can hackers get away with these tactics? How can companies struggle with their cybersecurity when the reality of a hack proves so mundane?\u00a0<\/span><\/p>\n

Are You Facing Reality?\u00a0<\/b><\/h3>\n

Enterprises often confuse the perception of a hack for the reality of a hack. Thus they tend to invest in inadequate antivirus solutions in the vain hope to staving off an attack; while these may offer protection against DDoS attacks, they can’t defend against identity threats.\u00a0<\/span><\/p>\n

Meanwhile, hackers can easily circumvent your enterprise\u2019s single-factor authentication systems. All they need is patience and time. Additionally, hackers often seek out privileged users\u2019 accounts in particular because of the massive power they wield.\u00a0\u00a0\u00a0<\/span><\/p>\n

Without identity management and privileged access management<\/a>, your enterprise can\u2019t hope to stand up to the reality of a hack. Rather than focusing on rare cyber attacks, they provide critical identity security capabilities.\u00a0<\/span><\/p>\n

Specifically, they offer multifactor authentication (MFA). MFA asks all access requesters to input multiple factors before granting access to your network, databases, or digital assets. These can include:<\/span><\/p>\n