At the end of a challenging pandemic year, news has come to light about recent cyber assaults against US government agencies, government contractors, IT companies, Think Tanks, and other businesses in 2020. These attacks illuminate the ways that the cybersecurity landscape continues to evolve and become even more dangerous. Here are 3 key take-aways from these cyber assaults.
Key Take-Away # 1 – Continuing Rise in Determination & Sophistication of Nation-State Attacks
Cyber attacks on Cybersecurity firm FireEye, several US
government agencies, and others using malware inserted into SolarWinds Orion
network management software represents a major increase in offensive
capabilities of nation-state threat actors and hackers.
Key Take-Away #2 – Growing Privatization of Cyber Attacks
Private Sector Offensive Actors (PSOAs) is a new phenomenon,
and there is a confluence of these PSOAs and nation-states. Nation-states
now have the option to hire these private companies to build or buy the tools
needed for sophisticated cyber attacks.
Key Take-Away #3 – More Effective National & Global
Cybersecurity Strategies are Needed
Governments and the Technology Sector will need to act
together. And democratic governments will need to work together as well
by sharing information and best practices, while also coordinating on not just
cybersecurity protection but also defensive measures and responses.
Read the article from Microsoft for additional details.
NPR interviewed FireEye CEO Kevin Mandia yesterday, 12/21. Listen to/read the interview here.