{"id":3314,"date":"2021-03-25T15:35:17","date_gmt":"2021-03-25T19:35:17","guid":{"rendered":"https:\/\/solutionsreview.com\/security-information-event-management\/?p=3314"},"modified":"2021-03-25T15:35:17","modified_gmt":"2021-03-25T19:35:17","slug":"cybersecurity-expert-lessons-we-learned-from-the-q1-data-breaches","status":"publish","type":"post","link":"https:\/\/solutionsreview.com\/security-information-event-management\/cybersecurity-expert-lessons-we-learned-from-the-q1-data-breaches\/","title":{"rendered":"Cybersecurity Expert Lessons We Learned From the Q1 Data Breaches"},"content":{"rendered":"

\"Cybersecurity<\/p>\n

What expert lessons did we learn from the Q1 data breaches?\u00a0<\/span><\/p>\n

We\u2019re rapidly approaching the end of Q1 2021, and unfortunately, it has been a busy cybersecurity season. Businesses across the U.S. experienced a staggering amount of data breaches of all sizes and scopes; in fact, we could only cover a portion of all the data breaches enterprises dealt with thus far.\u00a0<\/span><\/p>\n

Every time a major cyber-attack occurs, Solutions Review<\/a> gathers expert opinions from the top minds and voices in cybersecurity. As such, we\u2019ve been able to provide our readers with critical cybersecurity lessons to help them prepare their organization against the next cyber-threat.\u00a0<\/span><\/p>\n

We decided to do a retrospective on some of the most insightful and critical lessons we learned from the Q1 data breaches, as shared by experts.\u00a0<\/span><\/p>\n


Widget not in any sidebars
<\/span><\/p>\n

Expert Lessons We Learned From the Q1 Data Breaches<\/b><\/h2>\n

From our coverage on <\/span><\/i>the PYSA Ransomware as reported by the FBI<\/span><\/i><\/a>, we present these comments from Bryan Embrey, Director of Product Marketing of <\/span><\/i>Zentry Security<\/span><\/i><\/a>.\u00a0<\/span><\/i><\/p>\n

\u201cWhile it is surprising that attackers are now targeting seminaries, leveraging RDP as an attack vector is not. RDP has certain weaknesses that can be mitigated and addressed by deploying zero trust technologies such as single sign-on (SSO) and multi-factor authentication (MFA). SSO offers ways for organizations to provide strong password usage as well as reducing the chance of credential theft, while MFA ensures that only authenticated users get access to sensitive applications and resources. Most notably, RDP has been vulnerable to BlueKeep, a vulnerability identified \u2013 and patched \u2013 in 2019. Organizations, including seminaries, should check to ensure their systems are patched.\u201d<\/span><\/p>\n

<\/div><\/p>\n

From our coverage on the <\/span><\/i>Microsoft Exchange<\/span><\/i><\/a> email server hack, we present commentary by Saryu Nayyar, CEO of <\/span><\/i>Gurucul<\/span><\/i><\/a>.\u00a0<\/span><\/i><\/p>\n

\u201cWith organizations migrating to Microsoft Office 365 en masse over the last few years, it\u2019s easy to forget that on-premises Exchange servers are still in service. Some organizations, notably in government, can\u2019t migrate their applications to the cloud due to policy or regulation, which means we will see on-premises servers for some time to come.<\/span><\/p>\n

CISA\u2019s emergency directive is timely and appropriate, as these vulnerabilities are being exploited in the wild now \u2013 apparently by threat actors based in China. This is another case that shows how vital it is to keep up with security patches and to make sure the organization\u2019s security stack is up to the task of identifying novel attacks and remediating them quickly.\u201d<\/span><\/p>\n

<\/div><\/p>\n

From our coverage of <\/span><\/i>Malaysia Airlines disclosing a data breach taking place over nine years<\/span><\/i><\/a>, we share these comments from Demi Ben-Ari, Co-founder and CTO of <\/span><\/i>Panorays<\/span><\/i><\/a>.<\/span><\/i><\/p>\n

\u201cThe recent data breach at Malaysia Airlines illustrates how customers\u2019 personal data can be compromised through a third-party provider. Unfortunately, this is not the first time an airline has experienced a third-party data breach, and it likely won\u2019t be the last. To prevent such incidents, it\u2019s crucial for every company to perform comprehensive evaluations of their third parties that combine external attack surface assessments, security questionnaires, and business context for the most accurate view of vendor cyber risk. In addition, continuous monitoring is absolutely necessary for ongoing visibility, insight, and control of third-party security risk.\u201d<\/span><\/p>\n

<\/div><\/p>\n

From our coverage on the Washington State Auditor Office Breach<\/a>, we share these thoughts from Christian Espinosa, Managing Director at <\/span><\/i>Cerberus Sentinel<\/span><\/i><\/a>.\u00a0<\/span><\/i><\/p>\n

\u201cCybercriminals typically break in by exploiting vulnerabilities or taking advantage of misconfigurations. In this instance, a vulnerability existed that was overlooked. We all want to trust that our cybersecurity teams are doing the best they can to keep attackers out. I believe in what Reagan once said \u2018trust, but verify.\u2019 It\u2019s much better, and less costly, to have a trusted ally validate your security than wait until it\u2019s validated or invalidated by an attacker.\u201d<\/span><\/p>\n

<\/div><\/p>\n

Thanks again to these cybersecurity experts for their expertise on the Q1 data breaches and other attacks. For more security, check out our SIEM Buyer\u2019s Guide<\/a>; we cover the top solution providers and their key capabilities in detail. Also, check out our YouTube channel<\/a>, where our Breach of the Month series covers the worst cyber-attacks.\u00a0<\/span><\/p>\n


Widget not in any sidebars
<\/span><\/p>\n","protected":false},"excerpt":{"rendered":"

What expert lessons did we learn from the Q1 data breaches?\u00a0 We\u2019re rapidly approaching the end of Q1 2021, and unfortunately, it has been a busy cybersecurity season. Businesses across the U.S. experienced a staggering amount of data breaches of all sizes and scopes; in fact, we could only cover a portion of all the […]<\/p>\n","protected":false},"author":41,"featured_media":2769,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"inline_featured_image":false,"footnotes":""},"categories":[551,1],"tags":[1445,353,1288,95,145,1545,1546,827,112,86,1512,1544,21,57,22,1487],"acf":[],"yoast_head":"\nCybersecurity Expert Lessons We Learned From the Q1 Data Breaches<\/title>\n<meta name=\"description\" content=\"What expert lessons did we learn from the Q1 data breaches?\u00a0We take a look at the biggest breaches of the quarter and share some key comments.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/solutionsreview.com\/security-information-event-management\/cybersecurity-expert-lessons-we-learned-from-the-q1-data-breaches\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Cybersecurity Expert Lessons We Learned From the Q1 Data Breaches\" \/>\n<meta property=\"og:description\" content=\"What expert lessons did we learn from the Q1 data breaches?\u00a0We take a look at the biggest breaches of the quarter and share some key comments.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/solutionsreview.com\/security-information-event-management\/cybersecurity-expert-lessons-we-learned-from-the-q1-data-breaches\/\" \/>\n<meta property=\"og:site_name\" content=\"Best Information Security SIEM Tools, Software, Solutions & Vendors\" \/>\n<meta property=\"article:published_time\" content=\"2021-03-25T19:35:17+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/solutionsreview.com\/security-information-event-management\/files\/2019\/09\/AI-Eye.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"800\" \/>\n\t<meta property=\"og:image:height\" content=\"400\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Ben Canner\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Ben Canner\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"4 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/cybersecurity-expert-lessons-we-learned-from-the-q1-data-breaches\/\",\"url\":\"https:\/\/solutionsreview.com\/security-information-event-management\/cybersecurity-expert-lessons-we-learned-from-the-q1-data-breaches\/\",\"name\":\"Cybersecurity Expert Lessons We Learned From the Q1 Data Breaches\",\"isPartOf\":{\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/cybersecurity-expert-lessons-we-learned-from-the-q1-data-breaches\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/cybersecurity-expert-lessons-we-learned-from-the-q1-data-breaches\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/solutionsreview.com\/security-information-event-management\/files\/2019\/09\/AI-Eye.jpg\",\"datePublished\":\"2021-03-25T19:35:17+00:00\",\"dateModified\":\"2021-03-25T19:35:17+00:00\",\"author\":{\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/#\/schema\/person\/357f925262827fcf840b4341920a1541\"},\"description\":\"What expert lessons did we learn from the Q1 data breaches?\u00a0We take a look at the biggest breaches of the quarter and share some key comments.\",\"breadcrumb\":{\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/cybersecurity-expert-lessons-we-learned-from-the-q1-data-breaches\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/solutionsreview.com\/security-information-event-management\/cybersecurity-expert-lessons-we-learned-from-the-q1-data-breaches\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/cybersecurity-expert-lessons-we-learned-from-the-q1-data-breaches\/#primaryimage\",\"url\":\"https:\/\/solutionsreview.com\/security-information-event-management\/files\/2019\/09\/AI-Eye.jpg\",\"contentUrl\":\"https:\/\/solutionsreview.com\/security-information-event-management\/files\/2019\/09\/AI-Eye.jpg\",\"width\":800,\"height\":400,\"caption\":\"Kaseya 2021 IT Operations Survey Reveals Key Security Trends\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/cybersecurity-expert-lessons-we-learned-from-the-q1-data-breaches\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/solutionsreview.com\/security-information-event-management\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Cybersecurity Expert Lessons We Learned From the Q1 Data Breaches\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/#website\",\"url\":\"https:\/\/solutionsreview.com\/security-information-event-management\/\",\"name\":\"Best Information Security SIEM Tools, Software, Solutions & Vendors\",\"description\":\"Buyer's Guide and Best Practices\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/solutionsreview.com\/security-information-event-management\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/#\/schema\/person\/357f925262827fcf840b4341920a1541\",\"name\":\"Ben Canner\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/63f68345052a446ce0cc9c802dd3f373?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/63f68345052a446ce0cc9c802dd3f373?s=96&d=mm&r=g\",\"caption\":\"Ben Canner\"},\"description\":\"Ben Canner is an enterprise technology writer and analyst covering Identity Management, SIEM, Endpoint Protection, and Cybersecurity writ large. He holds a Bachelor of Arts Degree in English from Clark University in Worcester, MA. He previously worked as a corporate blogger and ghost writer. You can reach him via Twitter and LinkedIn.\",\"url\":\"https:\/\/solutionsreview.com\/security-information-event-management\/author\/bcanner\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Cybersecurity Expert Lessons We Learned From the Q1 Data Breaches","description":"What expert lessons did we learn from the Q1 data breaches?\u00a0We take a look at the biggest breaches of the quarter and share some key comments.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/solutionsreview.com\/security-information-event-management\/cybersecurity-expert-lessons-we-learned-from-the-q1-data-breaches\/","og_locale":"en_US","og_type":"article","og_title":"Cybersecurity Expert Lessons We Learned From the Q1 Data Breaches","og_description":"What expert lessons did we learn from the Q1 data breaches?\u00a0We take a look at the biggest breaches of the quarter and share some key comments.","og_url":"https:\/\/solutionsreview.com\/security-information-event-management\/cybersecurity-expert-lessons-we-learned-from-the-q1-data-breaches\/","og_site_name":"Best Information Security SIEM Tools, Software, Solutions & Vendors","article_published_time":"2021-03-25T19:35:17+00:00","og_image":[{"width":800,"height":400,"url":"https:\/\/solutionsreview.com\/security-information-event-management\/files\/2019\/09\/AI-Eye.jpg","type":"image\/jpeg"}],"author":"Ben Canner","twitter_misc":{"Written by":"Ben Canner","Est. reading time":"4 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/solutionsreview.com\/security-information-event-management\/cybersecurity-expert-lessons-we-learned-from-the-q1-data-breaches\/","url":"https:\/\/solutionsreview.com\/security-information-event-management\/cybersecurity-expert-lessons-we-learned-from-the-q1-data-breaches\/","name":"Cybersecurity Expert Lessons We Learned From the Q1 Data Breaches","isPartOf":{"@id":"https:\/\/solutionsreview.com\/security-information-event-management\/#website"},"primaryImageOfPage":{"@id":"https:\/\/solutionsreview.com\/security-information-event-management\/cybersecurity-expert-lessons-we-learned-from-the-q1-data-breaches\/#primaryimage"},"image":{"@id":"https:\/\/solutionsreview.com\/security-information-event-management\/cybersecurity-expert-lessons-we-learned-from-the-q1-data-breaches\/#primaryimage"},"thumbnailUrl":"https:\/\/solutionsreview.com\/security-information-event-management\/files\/2019\/09\/AI-Eye.jpg","datePublished":"2021-03-25T19:35:17+00:00","dateModified":"2021-03-25T19:35:17+00:00","author":{"@id":"https:\/\/solutionsreview.com\/security-information-event-management\/#\/schema\/person\/357f925262827fcf840b4341920a1541"},"description":"What expert lessons did we learn from the Q1 data breaches?\u00a0We take a look at the biggest breaches of the quarter and share some key comments.","breadcrumb":{"@id":"https:\/\/solutionsreview.com\/security-information-event-management\/cybersecurity-expert-lessons-we-learned-from-the-q1-data-breaches\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/solutionsreview.com\/security-information-event-management\/cybersecurity-expert-lessons-we-learned-from-the-q1-data-breaches\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/solutionsreview.com\/security-information-event-management\/cybersecurity-expert-lessons-we-learned-from-the-q1-data-breaches\/#primaryimage","url":"https:\/\/solutionsreview.com\/security-information-event-management\/files\/2019\/09\/AI-Eye.jpg","contentUrl":"https:\/\/solutionsreview.com\/security-information-event-management\/files\/2019\/09\/AI-Eye.jpg","width":800,"height":400,"caption":"Kaseya 2021 IT Operations Survey Reveals Key Security Trends"},{"@type":"BreadcrumbList","@id":"https:\/\/solutionsreview.com\/security-information-event-management\/cybersecurity-expert-lessons-we-learned-from-the-q1-data-breaches\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/solutionsreview.com\/security-information-event-management\/"},{"@type":"ListItem","position":2,"name":"Cybersecurity Expert Lessons We Learned From the Q1 Data Breaches"}]},{"@type":"WebSite","@id":"https:\/\/solutionsreview.com\/security-information-event-management\/#website","url":"https:\/\/solutionsreview.com\/security-information-event-management\/","name":"Best Information Security SIEM Tools, Software, Solutions & Vendors","description":"Buyer's Guide and Best Practices","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/solutionsreview.com\/security-information-event-management\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/solutionsreview.com\/security-information-event-management\/#\/schema\/person\/357f925262827fcf840b4341920a1541","name":"Ben Canner","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/solutionsreview.com\/security-information-event-management\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/63f68345052a446ce0cc9c802dd3f373?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/63f68345052a446ce0cc9c802dd3f373?s=96&d=mm&r=g","caption":"Ben Canner"},"description":"Ben Canner is an enterprise technology writer and analyst covering Identity Management, SIEM, Endpoint Protection, and Cybersecurity writ large. He holds a Bachelor of Arts Degree in English from Clark University in Worcester, MA. He previously worked as a corporate blogger and ghost writer. You can reach him via Twitter and LinkedIn.","url":"https:\/\/solutionsreview.com\/security-information-event-management\/author\/bcanner\/"}]}},"_links":{"self":[{"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/posts\/3314"}],"collection":[{"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/users\/41"}],"replies":[{"embeddable":true,"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/comments?post=3314"}],"version-history":[{"count":0,"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/posts\/3314\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/media\/2769"}],"wp:attachment":[{"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/media?parent=3314"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/categories?post=3314"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/tags?post=3314"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}