MicroAI Admin – Page 25

20 Apr Hackathon – Quarantinis

Posted at 05:19h in Blog by MicroAI Admin 0 Comments

Edge AI is a combination of Edge Computing and Artificial Intelligence. Edge computing is a distributed computing paradigm that brings computation and data storage closer to the location of the device....

20 Apr Hackathon -lmhm

Posted at 05:13h in Blog by MicroAI Admin 0 Comments

Remote COVID19 Hackathon: The hackathon teams were comprised of developers, programmers, data specialists, statisticians, and designers....

20 Apr Hackathon -Team Exotic

Posted at 05:10h in Blog by MicroAI Admin 0 Comments

Remote COVID19 Hackathon: The hackathon teams were comprised of developers, programmers, data specialists, statisticians, and designers....

15 Apr Internal Company Hack-a-thon

Posted at 05:59h in News, News / Events by MicroAI Admin 0 Comments

During the month of March in 2020, the entire ONE Tech office had to transition to a work-from-home reality due to the Coronavirus pandemic...

03 Apr COVID-19, Changing the Way the World Works

Posted at 05:03h in Blog by MicroAI Admin 0 Comments

The impact of COVID-19 on businesses is yet to be fully realized, and it will not be for quite some time. As most of the country is under shelter in place orders, businesses have adapted to this rapidly changing environment involving remote workers, business process...

25 Feb Join ONE Tech at IoT World 2020

Posted at 05:32h in News, News / Events by MicroAI Admin 0 Comments

Here at ONE Tech, we are thrilled to share with you our involvement in this year’s IoT World exhibition! Join us as we explore the adoption of IoT, Big Data, and AI to create industrial, business, and workforce efficiencies. We can be found at Booth...

24 Feb ONE Tech announce our participation at RSA Conference

Posted at 06:12h in News, News / Events by MicroAI Admin 0 Comments

ONE Tech is extremely thrilled to announce our participation at RSA Conference, Monday, February 24th through Friday, February 28th in San Francisco, California at the Moscone Center. Come find us in the South Expo at booth #3310 alongside our sister company StrongKey....

A flaw that resides in software, hardware or firmware, a zero-day exploit is one of the toughest types of attacks to detect and prevent. While zero-day attacks are one of the lesser-known types of cybersecurity attacks, they are more common than you may think. “Nearly one out of three malware attacks is a zero-day attack that cannot be detected by traditional antivirus programs, and over nine out of every ten malware threats makes it way into an organization because of a compromised file downloaded from email.” What is a Zero-day Attack? A zero-day attack is defined as the period between when an unpatched vulnerability is discovered and the actual attack. Day zero refers to the day that the recipient of the attack discovers the exploit and begins working on a solution. Thus, the race begins for the attack recipient to patch the vulnerability before the attack fully commences. Basically, attackers are looking for vulnerabilities in your systems, such as unpatched software, and exploit that opportunity. Zero-day exploits may take the form of malware, viruses, polymorphic worms or trojans. Hackers may post the exploits on the dark web, where they buy, sell or trade them. The Cost In some cases, financial gain is sought. In other cases, confidential corporate data is sold on the dark web or public file-sharing websites. Either way, your team spends time troubleshooting the problem while a negative public relations storm ensues as a result of your data breach. One zero-day exploit was listed for sale on the dark web for $90,000 by cybercriminals. The vulnerability “was believed to be able to affect machines running any form of windows, which could have impacted millions.” Or there’s the IoS one-click jailbreak that was up for sale for $1.5 million by exploit broker Zerodium. In order to better understand zero-day attacks, let’s examine a few examples that occurred in recent years. Examples of Zero-day Attacks One of the most famous zero-day attacks was the Stuxnet worm, which used infected code that sat idle for a period of time. Eventually, the full-scale attack was launched, which in turn sped up and destroyed several centrifuges that featured sensors in Iran’s nuclear power plant. Back in 2011, attackers went after RSA, a security vendor, by using an unpatched vulnerability in Adobe Flash Player. By distributing emails via Excel file attachments, a Flash file was activated and customer data was stolen, which included information used by RSA customers in their SecurID security tokens. The Sony hack is another famous example of a zero-day attack. Teams of hackers, known as the Guardians of Peace, took down Sony’s network. Sensitive corporate data, including films, emails and contracts, were released on public file-sharing websites. While money wasn’t the motive, the attackers did affect the release of the Sony film, “The Interview.” Another popular zero-day attack was the DNC (Democratic National Committee) hack. In this case, “there were at least six zero-day vulnerabilities that were exploited to gain access to stolen data.” The vulnerabilities were discovered in Microsoft Windows, Adobe Flash and Java and were exploited by a well-planned spear-phishing attack that targeted specific individuals. 7 Ways Prevent a Zero-day Attack Patch and update Apply patches to servers, systems and networks as soon as they are available. Never let patches go for an extended period of time. This helps to reduce the number of flaws within your systems. Companies should also factor zero-day attacks into patch management policies and overall cybersecurity policies and procedures. Use multiple layers of security Don’t just depend on patches and device security to prevent zero-day attacks. There’s more work to be done. Use firewalls or AI-based intrusion detection systems that filter out malicious traffic or network activities. Also, utilize sandboxes to quarantine suspicious files or as working environments. Restrict the use of open-source software By restricting the use of and securing your open-source software, zero-day attacks can better be prevented. Be sure to keep track of open-source software usage across your organization and update as often as required by the issuing company. This will help to ensure that vulnerabilities occur less often. Use virtual local area networks By segregating areas of the network with dedicated physical or virtual network segments, otherwise known as a VLAN (Virtual Local Area Network), you can isolate sensitive traffic that flows between servers. VLANs make it possible for network administrators to partition a switched network to match your own needs. Secure email gateways, servers and networks Secure these equally as zero-day attacks can present themselves to various parts of an organization. Whether the hackers seek to deploy malware or deliver payloads, it’s important to consider every potential impact in order to prevent a zero-day exploit from launching. Also, implement IPsec to apply encryption and authentication to network traffic. Change all default passwords Most IoT devices come with default passwords, which can be easier for humans to guess. Additionally, “default passwords are easy targets for automated attacks that scan the internet for devices with default credentials, and it should also reduce the risk of an organization falling victim to brute-force attacks.” Regularly practice cybersecurity Cybersecurity efforts should be an ongoing part of your efforts to secure your network and data. Promote a culture of awareness when it comes to cybersecurity and how users might get lured via a phishing attack, as an example. Educate employees regularly on the dangers lurking and how they can help protect your company’s data. Have a disaster recovery strategy If you are affected by a zero-day attack, it’s imperative to have a disaster recovery plan in place. This will allow you to mitigate the damage if an attack occurs. Utilize a combination of on and off-site storage for backing up your data. Just like most types of cybersecurity attacks, hackers are becoming more adept at deploying and launching zero-day attacks. By applying the aforementioned techniques, you will increase your chances of staving off a zero-day attack. However, it’s important to constantly stay vigilant when it comes to your cybersecurity.

13 Jan A Guide to Understanding Zero-day Attacks

Posted at 06:25h in Blog by MicroAI Admin 0 Comments

A flaw that resides in software, hardware or firmware, a zero-day exploit is one of the toughest types of attacks to detect and prevent. While zero-day attacks are one of the lesser-known types of cybersecurity attacks, they are more common than you may think. “Nearly one out...

08 Jan Trends in IoT for 2020

Posted at 08:45h in Blog by MicroAI Admin 0 Comments

We are in the midst of a technology revolution. The internet is everywhere; it’s on our PCs, our wrists and even in our cars. It’s happening so fast that the number of IoT-connected devices is reaching into the billions globally. The fact is that in...

10 Dec Understanding Edge Computing

Posted at 09:02h in Blog by MicroAI Admin 0 Comments

The world is changing at a rapid pace. Not only are smartphones and technology a way of life, but there are connected IoT devices all around us, enabling everything from smart home appliances to cameras to industrial robots inside of factories. Meanwhile, IoT devices are generating...

Author: MicroAI Admin

20 Apr Hackathon – Quarantinis

20 Apr Hackathon -lmhm

20 Apr Hackathon -Team Exotic

15 Apr Internal Company Hack-a-thon

03 Apr COVID-19, Changing the Way the World Works

25 Feb Join ONE Tech at IoT World 2020

24 Feb ONE Tech announce our participation at RSA Conference

13 Jan A Guide to Understanding Zero-day Attacks

08 Jan Trends in IoT for 2020

10 Dec Understanding Edge Computing

PRODUCTS

USE CASES

INDUSTRIES

RESOURCES

COMPANY

NEWS / EVENTS

AI STACK