According to a new report, the vast majority of employees (71%) store confidential . work-related passwords on their personal devicesAlso, two-thirds (66%) use non-corporate apps to communicate with colleagues.
The above results come from SlashNext 's latest bring your own device (BYOD) security report, which also showed that 95% of security leaders are very concerned about phishing attacks via messaging apps .
See also: ChatGPT: Is it a privacy risk?
“With the widespread use of personal mobile devices in the workplace ,it is increasingly difficult for employers to ensure the security of sensitive information,” explained SlashNext CEO Patrick Harr.
The report also states that in 2022, the use of personal devices and non-corporate communication apps was the direct cause of many corporate breaches. Experts believe this is a trend that will continue. Employees tend to frequently use both corporate and personal devices for their work. However, doing so doubles the attack surface.
As Harr explains, malicious actors recognize that personal mobile devices have fewer security than corporate devices.
If an employee's device is compromised or stolen, it could lead to a breach of company information. Businesses need to take appropriate security measures to prevent this from happening and protect their sensitive data.
See also: Critical Microsoft bug allows modification of Bing results
According to the report, nearly four in five employers (81%) believe that the solution to most of the above issues is to provide employees with a separate phone that can be used only for work. This way, employees would not be forced to use their own phone if their companies provide them with a company device.
Of course, in addition to removing personal devices, it is also necessary to train employees to recognize and avoid cyber threats.
“Security training is a great starting point to help protect employees and businesses,” explained Viakoo CEO Bud Broomhead.
See also: Microsoft OneNote will block 120 dangerous file extensions
The executive added that organizations with IoT devices should pay special attention to keeping them on separate networks, while updating firmware with the latest security patches is essential.
In addition to training, organizations should implement some tests on employees to make sure they can actually identify threats.
Source: www.infosecurity-magazine.com
