{"id":5381,"date":"2021-06-01T15:25:04","date_gmt":"2021-06-01T19:25:04","guid":{"rendered":"https:\/\/solutionsreview.com\/identity-management\/?p=5381"},"modified":"2021-06-01T15:25:04","modified_gmt":"2021-06-01T19:25:04","slug":"expert-commentary-the-jbs-foods-cyber-attack","status":"publish","type":"post","link":"https:\/\/solutionsreview.com\/identity-management\/expert-commentary-the-jbs-foods-cyber-attack\/","title":{"rendered":"Expert Commentary: The JBS Foods Cyber-Attack"},"content":{"rendered":"

\"Expert<\/p>\n

JBS Foods, the world\u2019s largest producer of beef and poultry, disclosed yesterday suffering a shutdown of plant production worldwide due to a cyber-attack<\/a>. The attack forced the shutdown of the largest slaughterhouses in the world, which may yet cause a rise in global meat prices.\u00a0<\/span><\/p>\n

In a statement, JBS Foods stated \u201cThe company is not aware of any evidence at this time that any customer, supplier, or employee data has been compromised or misused as a result of the situation.\u201d\u00a0<\/span><\/p>\n

The attack appears to be ongoing. As of current writing, the exact nature of the cyber-attack remains unclear, but signs indicate either a ransomware attack or a privileged access attack.\u00a0<\/span><\/p>\n

We compiled expert commentary<\/a> on the JBS Foods attack. Here\u2019s what they had to say.\u00a0<\/span><\/p>\n

\t\t\t

\"IAM<\/a><\/p>\n<\/div>\n\t\t<\/div><\/div>\n

Expert Commentary: The JBS Foods Cyber-Attack <\/b>\u00a0<\/span><\/h2>\n

Joseph Carson<\/b><\/h3>\n

Joseph Carson is Chief Security Scientist and Advisory CISO at <\/span><\/i>Thycotic<\/span><\/i><\/a><\/span>.<\/span>\u00a0<\/span><\/i><\/p>\n

The latest cyber-attack targeting JBS once again reminds us how fragile the supply chain industry is today, especially when companies are highly dependent on IT systems. This appears to be a ransomware-style attack as the company stated that they are responding to the incident and restoring systems. However, that is yet to be fully confirmed. The good news is that their backup systems appear to be unaffected by the attack which shows that they have followed some industry best practices and have an incident response plan. But, these do not prevent cyber-attacks. Yet, they do make companies more resilient. Let\u2019s hope this sets an example for other companies the importance of backup systems and network segmentation<\/span><\/p>\n

Organizations have less control and visibility over the actual security that supply chains have put in place. For the most part, this tends to only be covered in legal contracts, rather than a true security risk assessment. Organizations must prioritize privileged access security to reduce the risks exposed in their supply chain security.<\/span><\/p>\n

Hitesh Sheth<\/b><\/h3>\n

Hitesh Sheth is President and CEO at <\/span><\/i>Vectra<\/span><\/i><\/a>.\u00a0<\/span><\/i><\/span><\/p>\n

The JBS attack is one more signal of a disturbing shift in cyberwar strategy. It looks like a ransomware attack, but what\u2019s really telling is the choice of targets. This is an important global supply chain moving essential goods to100 countries. The old conventional wisdom was that hackers were in it for the money. Add JBS to Colonial Pipeline and other strikes, and you get new conventional wisdom: they\u2019re going after critical infrastructure like food and fuel supply lines, which strikes at public confidence. The motive here runs deeper than ransom. The question is, does our joint commitment to a more effective defense run equally deep?<\/span><\/p>\n

Christoph Hebeisen<\/b><\/h3>\n

Christoph Hebeisen is Director of Security Intelligence Research at <\/span><\/i>Lookout<\/span><\/i><\/a>.\u00a0<\/span><\/i><\/span><\/p>\n

While we don’t know the exact nature of the attack on JBS, the impact has strong parallels to the Colonial Pipeline case – a critical industry is hit by an attack and has to shut down production leading to financial losses and potentially shortages affecting large populations. Forcing a production shutdown may or may not have been part of the intention of the attackers. However, the impact of this compromise makes it clear that strong protections for IT infrastructure are becoming a business-critical imperative for all industries, including those whose core business does not have an immediately obvious data component.<\/span><\/p>\n

Neil Jones<\/b><\/h3>\n

Neil Jones is Cybersecurity Evangelist at<\/span><\/i> Egnyte<\/span><\/i><\/a>.\u00a0<\/span><\/i><\/span><\/p>\n

“The recent JBS cyber-attack – along with the Colonial Pipeline and Apple\/Quanta cyber-attacks that preceded it – demonstrate that your organization needs to make cybersecurity a Boardroom priority if you haven’t done so already. For years, cyber-criminals have attacked targets for financial gain, but now we’re seeing an alarming pattern of debilitating attacks on our food, critical infrastructure, and IP supply chain, which can have a crippling impact on the US economy. While advocating support from your executive team, you need to implement proactive data hygiene and protective behaviors, such as patching your CVEs and hardening your databases now.”<\/span><\/p>\n

Garret Grajek<\/b><\/h3>\n

Garret Grajek is CEO of YouAttest<\/a><\/span>.<\/span>\u00a0<\/span><\/em><\/p>\n

\u00a0\u201cThough the details of the JBS attack are not out, it’s a pretty safe bet that the method of intrusion involved credential theft and privilege escalation.\u00a0 Both of these are key components in the cyber kill chain, the identified method of attack of most exploits. Attackers find a weak way into the system, via stolen passwords, default account credentials, phishing, or some other means.\u00a0 From there, they use lateral movement across the enterprise and privilege escalation to obtain system access to important data. This is why account reviews and knowledge of privilege changes are imperative to a well-controlled enterprise.<\/span><\/p>\n

Thanks to the experts for their time and expertise on the JBS Foods cyber-attack. For more, check out the Privileged Access Management Buyer\u2019s Guide<\/a> or the Solutions Suggestion Engine<\/a>.\u00a0<\/span><\/p>\n

\t\t\t

\"IAM<\/a><\/p>\n<\/div>\n\t\t<\/div><\/div>\n","protected":false},"excerpt":{"rendered":"

JBS Foods, the world\u2019s largest producer of beef and poultry, disclosed yesterday suffering a shutdown of plant production worldwide due to a cyber-attack. The attack forced the shutdown of the largest slaughterhouses in the world, which may yet cause a rise in global meat prices.\u00a0 In a statement, JBS Foods stated \u201cThe company is not […]<\/p>\n","protected":false},"author":41,"featured_media":4537,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"inline_featured_image":false,"footnotes":""},"categories":[5,1],"tags":[142,125,1698,16,1700,76,425,1697,1678,1699,90,25,506,89,1669,1030,1626],"acf":[],"yoast_head":"\nExpert Commentary: The JBS Foods Cyber-Attack<\/title>\n<meta name=\"description\" content=\"JBS Foods, the world\u2019s largest producer of beef and poultry, disclosed yesterday suffering a shutdown of plant production worldwide due to a cyber-attack.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/solutionsreview.com\/identity-management\/expert-commentary-the-jbs-foods-cyber-attack\/\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Ben Canner\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"4 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/expert-commentary-the-jbs-foods-cyber-attack\/\",\"url\":\"https:\/\/solutionsreview.com\/identity-management\/expert-commentary-the-jbs-foods-cyber-attack\/\",\"name\":\"Expert Commentary: The JBS Foods Cyber-Attack\",\"isPartOf\":{\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/expert-commentary-the-jbs-foods-cyber-attack\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/expert-commentary-the-jbs-foods-cyber-attack\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/solutionsreview.com\/identity-management\/files\/2019\/08\/new-hacker-image-resize-compressed.jpg\",\"datePublished\":\"2021-06-01T19:25:04+00:00\",\"dateModified\":\"2021-06-01T19:25:04+00:00\",\"author\":{\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/#\/schema\/person\/357f925262827fcf840b4341920a1541\"},\"description\":\"JBS Foods, the world\u2019s largest producer of beef and poultry, disclosed yesterday suffering a shutdown of plant production worldwide due to a cyber-attack.\",\"breadcrumb\":{\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/expert-commentary-the-jbs-foods-cyber-attack\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/solutionsreview.com\/identity-management\/expert-commentary-the-jbs-foods-cyber-attack\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/expert-commentary-the-jbs-foods-cyber-attack\/#primaryimage\",\"url\":\"https:\/\/solutionsreview.com\/identity-management\/files\/2019\/08\/new-hacker-image-resize-compressed.jpg\",\"contentUrl\":\"https:\/\/solutionsreview.com\/identity-management\/files\/2019\/08\/new-hacker-image-resize-compressed.jpg\",\"width\":800,\"height\":400,\"caption\":\"Morgan Stanley Suffers Data Breach Due to Third-Party Attack\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/expert-commentary-the-jbs-foods-cyber-attack\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/solutionsreview.com\/identity-management\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Expert Commentary: The JBS Foods Cyber-Attack\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/#website\",\"url\":\"https:\/\/solutionsreview.com\/identity-management\/\",\"name\":\"Identity and Access Management Solutions | Solutions Review\",\"description\":\"Evaluating Enterprise IAM Software, Identity Governance & Access Control Tools.\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/solutionsreview.com\/identity-management\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/#\/schema\/person\/357f925262827fcf840b4341920a1541\",\"name\":\"Ben Canner\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/63f68345052a446ce0cc9c802dd3f373?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/63f68345052a446ce0cc9c802dd3f373?s=96&d=mm&r=g\",\"caption\":\"Ben Canner\"},\"description\":\"Ben Canner is an enterprise technology writer and analyst covering Identity Management, SIEM, Endpoint Protection, and Cybersecurity writ large. He holds a Bachelor of Arts Degree in English from Clark University in Worcester, MA. He previously worked as a corporate blogger and ghost writer. You can reach him via Twitter and LinkedIn.\",\"url\":\"https:\/\/solutionsreview.com\/identity-management\/author\/bcanner\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Expert Commentary: The JBS Foods Cyber-Attack","description":"JBS Foods, the world\u2019s largest producer of beef and poultry, disclosed yesterday suffering a shutdown of plant production worldwide due to a cyber-attack.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/solutionsreview.com\/identity-management\/expert-commentary-the-jbs-foods-cyber-attack\/","twitter_misc":{"Written by":"Ben Canner","Est. reading time":"4 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/solutionsreview.com\/identity-management\/expert-commentary-the-jbs-foods-cyber-attack\/","url":"https:\/\/solutionsreview.com\/identity-management\/expert-commentary-the-jbs-foods-cyber-attack\/","name":"Expert Commentary: The JBS Foods Cyber-Attack","isPartOf":{"@id":"https:\/\/solutionsreview.com\/identity-management\/#website"},"primaryImageOfPage":{"@id":"https:\/\/solutionsreview.com\/identity-management\/expert-commentary-the-jbs-foods-cyber-attack\/#primaryimage"},"image":{"@id":"https:\/\/solutionsreview.com\/identity-management\/expert-commentary-the-jbs-foods-cyber-attack\/#primaryimage"},"thumbnailUrl":"https:\/\/solutionsreview.com\/identity-management\/files\/2019\/08\/new-hacker-image-resize-compressed.jpg","datePublished":"2021-06-01T19:25:04+00:00","dateModified":"2021-06-01T19:25:04+00:00","author":{"@id":"https:\/\/solutionsreview.com\/identity-management\/#\/schema\/person\/357f925262827fcf840b4341920a1541"},"description":"JBS Foods, the world\u2019s largest producer of beef and poultry, disclosed yesterday suffering a shutdown of plant production worldwide due to a cyber-attack.","breadcrumb":{"@id":"https:\/\/solutionsreview.com\/identity-management\/expert-commentary-the-jbs-foods-cyber-attack\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/solutionsreview.com\/identity-management\/expert-commentary-the-jbs-foods-cyber-attack\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/solutionsreview.com\/identity-management\/expert-commentary-the-jbs-foods-cyber-attack\/#primaryimage","url":"https:\/\/solutionsreview.com\/identity-management\/files\/2019\/08\/new-hacker-image-resize-compressed.jpg","contentUrl":"https:\/\/solutionsreview.com\/identity-management\/files\/2019\/08\/new-hacker-image-resize-compressed.jpg","width":800,"height":400,"caption":"Morgan Stanley Suffers Data Breach Due to Third-Party Attack"},{"@type":"BreadcrumbList","@id":"https:\/\/solutionsreview.com\/identity-management\/expert-commentary-the-jbs-foods-cyber-attack\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/solutionsreview.com\/identity-management\/"},{"@type":"ListItem","position":2,"name":"Expert Commentary: The JBS Foods Cyber-Attack"}]},{"@type":"WebSite","@id":"https:\/\/solutionsreview.com\/identity-management\/#website","url":"https:\/\/solutionsreview.com\/identity-management\/","name":"Identity and Access Management Solutions | Solutions Review","description":"Evaluating Enterprise IAM Software, Identity Governance & Access Control Tools.","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/solutionsreview.com\/identity-management\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/solutionsreview.com\/identity-management\/#\/schema\/person\/357f925262827fcf840b4341920a1541","name":"Ben Canner","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/solutionsreview.com\/identity-management\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/63f68345052a446ce0cc9c802dd3f373?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/63f68345052a446ce0cc9c802dd3f373?s=96&d=mm&r=g","caption":"Ben Canner"},"description":"Ben Canner is an enterprise technology writer and analyst covering Identity Management, SIEM, Endpoint Protection, and Cybersecurity writ large. He holds a Bachelor of Arts Degree in English from Clark University in Worcester, MA. He previously worked as a corporate blogger and ghost writer. You can reach him via Twitter and LinkedIn.","url":"https:\/\/solutionsreview.com\/identity-management\/author\/bcanner\/"}]}},"_links":{"self":[{"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/posts\/5381"}],"collection":[{"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/users\/41"}],"replies":[{"embeddable":true,"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/comments?post=5381"}],"version-history":[{"count":0,"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/posts\/5381\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/media\/4537"}],"wp:attachment":[{"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/media?parent=5381"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/categories?post=5381"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/tags?post=5381"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}