Symantec: Every year, the cybersecurity space faces new forms of threats as cybercriminals evolve their approach to accessing organizations’ data. As we approach 2017, security experts at Symantec Corp., the world’s largest cybersecurity company, have drawn attention to trends we can expect to see in 2017 and beyond.
Given the ever-changing landscape, it is important to focus on where cybersecurity attention should be focused and how it will move for the coming year.
Symantec: Internet of Things (IoT)
• The growth of the Cloud: In 2017, we will continue to see a shift towards the modern workplace, as more and more organizations enable their employees to use new technologies, such as wearables, virtual reality and connected devices (IoT), while supporting a rapidly growing potential of cloud-based applications and solutions. Organizations will now need to shift their focus beyond securing endpoint devices and towards protecting users and their information, across all applications and services related to new technologies applied in the workplace.
• Connected cars will become a target for ransomware: As cars become more connected, it’s only a matter of time before we see large-scale hacking of them. This could come in the form of ransom notes for these cars, automated and unauthorized tracking and information collection, or other threats associated with them. This will also raise the question of who is responsible for this threat: the software vendor or the car manufacturer? A question that will have long-term implications for the future of the automotive industry.
• IoT devices will penetrate businesses even more. Looking beyond the simple vulnerabilities of mobile devices and computers, security departments in business IT will now have to examine other devices in terms of their security, such as thermostats for example and generally smart devices that are connected and use access to a business network. We had similar examples of attacks several years ago with print servers. Almost everything in a business that is connected to the internet should be protected.
• Increase in IoT DDoS attacks: The Dyn attack last October demonstrated the vast number of IoT devices that lack security and are extremely vulnerable to attacks.
As more and more IoT devices are deployed in the mass market, the risk of security breaches will only increase. Once insecure devices are deployed in the market, it becomes almost impossible to fix the problem, with the only solution being to reinstall them or issue updated updates. As this lack of security will continue for the foreseeable future, the number of IoT attacks will also increase.
Symantec: Cloud Generation Will Define the Future of Business
• The enterprise network will expand and become more diffuse and dispersed. With the workforce becoming more mobile than ever, the need to protect an on-premise network will become increasingly short-sighted. The need for firewalls to defend a single network becomes redundant if it is connected to the cloud. All businesses will start moving towards wireless and cloud-based services, rather than investing in expensive and unnecessary network solutions.
• Ransomware will attack the Cloud. Given the significant shift towards cloud-based storage and services, the Cloud is becoming a very lucrative target for attacks, as it is not protected by firewalls or other traditional security measures. So businesses will have to defend their data. Attacks can lead to extortion and compensation of many millions of euros as well as the loss of critical data. The need for protection will therefore become even more critical.
• Artificial intelligence will require sophisticated Big Data capabilities. In 2017, machine learning and artificial intelligence will continue to grow. In fact, research firm Forrester predicts that investments in artificial intelligence will increase by 300% in 2017. With growth comes new, powerful insights for businesses as well as increased collaboration between humans and machines. From a security perspective, this expansion will impact organizations in more ways than one – including endpoints and mechanisms in the Cloud. As new forms of machine learning and artificial intelligence continue to enter the market, enterprises will need to invest in solutions that have the capabilities to collect and analyze data from countless endpoints and attack sensors, across organizations, industries, and geographies. These solutions will prove crucial as learning mechanisms for how to operate on the “front line” of the global battle that changes every day, minute by minute.
Symantec: Cybercrime
• Malicious attacks will be self-funded by stealing money. There is a dangerous possibility that rogue nation-states could align themselves with organized crime for their own benefit, as we saw with the SWIFT (Society for Worldwide Interbank Financial Telecommunications) attacks. This could lead to the downfall of countries in terms of their political, military or economic systems.
• Fileless malware will increase. Fileless infections – which write directly to a computer’s RAM without using any files – are difficult to detect and often evade intrusion prevention and antivirus programs. This type of attack increased throughout 2016 and is expected to continue to increase, gaining prominence on the threat list in 2017, likely through PowerShell attacks.
• Abuse of Secure Sockets Layer (SSL) will lead to an increase in phishing sites using HTTPS. The rise in popularity of free SSL certificates combined with Google’s recent initiative to mark HTTP sites as insecure will weaken security standards, leading to potential spear-phishing or malware programs due to malicious search engine optimization practices.
• Drones will be used for espionage and attacks. This could happen in 2017, but it is more likely to happen later. By 2025, we can expect to see “drone-jacking,” which means intercepting drone signals and redirecting them to the attacker’s advantage. Given this potential, we can also expect to see “anti-drone hacking,” which is technology being developed to control drone GPS devices and other critical systems.
Here we should mention that Symantec's latest "prediction" is not so accurate, as drones are already being used for espionage and attacks. As for hacking on drones, we have seen this since 2015.
