Blog

03 Jun Keeping Your IoT Environment Safe from Cybercriminals

Posted at 12:52h in Blog by MicroAI Admin 0 Comments

Nowadays, everything is becoming a computer. Your microwave is a computer that makes things hot; your refrigerator is a computer that keeps things cold; your smartphone is a small computer that makes phone calls; an ATM machine is a computer with money inside. These computing...

20 Apr Hackathon -Contest Result

Posted at 05:35h in Blog by MicroAI Admin 0 Comments

Winners of the Remote COVID19 Online Internal Hackathon Event 2020 Announced. The three top teams overall won a total of $8,250 in cash prizes....

20 Apr Hackathon – GoRona

Posted at 05:30h in Blog by MicroAI Admin 0 Comments

Edge AI is a combination of Edge Computing and Artificial Intelligence. Edge computing is a distributed computing paradigm that brings computation and data storage closer to the location of the device....

20 Apr Hackathon – Covid-365

Posted at 05:24h in Blog by MicroAI Admin 0 Comments

20 Apr Hackathon – Quarantinis

Posted at 05:19h in Blog by MicroAI Admin 0 Comments

20 Apr Hackathon -lmhm

Posted at 05:13h in Blog by MicroAI Admin 0 Comments

Remote COVID19 Hackathon: The hackathon teams were comprised of developers, programmers, data specialists, statisticians, and designers....

20 Apr Hackathon -Team Exotic

Posted at 05:10h in Blog by MicroAI Admin 0 Comments

Remote COVID19 Hackathon: The hackathon teams were comprised of developers, programmers, data specialists, statisticians, and designers....

03 Apr COVID-19, Changing the Way the World Works

Posted at 05:03h in Blog by MicroAI Admin 0 Comments

The impact of COVID-19 on businesses is yet to be fully realized, and it will not be for quite some time. As most of the country is under shelter in place orders, businesses have adapted to this rapidly changing environment involving remote workers, business process...

A flaw that resides in software, hardware or firmware, a zero-day exploit is one of the toughest types of attacks to detect and prevent. While zero-day attacks are one of the lesser-known types of cybersecurity attacks, they are more common than you may think. “Nearly one out of three malware attacks is a zero-day attack that cannot be detected by traditional antivirus programs, and over nine out of every ten malware threats makes it way into an organization because of a compromised file downloaded from email.” What is a Zero-day Attack? A zero-day attack is defined as the period between when an unpatched vulnerability is discovered and the actual attack. Day zero refers to the day that the recipient of the attack discovers the exploit and begins working on a solution. Thus, the race begins for the attack recipient to patch the vulnerability before the attack fully commences. Basically, attackers are looking for vulnerabilities in your systems, such as unpatched software, and exploit that opportunity. Zero-day exploits may take the form of malware, viruses, polymorphic worms or trojans. Hackers may post the exploits on the dark web, where they buy, sell or trade them. The Cost In some cases, financial gain is sought. In other cases, confidential corporate data is sold on the dark web or public file-sharing websites. Either way, your team spends time troubleshooting the problem while a negative public relations storm ensues as a result of your data breach. One zero-day exploit was listed for sale on the dark web for $90,000 by cybercriminals. The vulnerability “was believed to be able to affect machines running any form of windows, which could have impacted millions.” Or there’s the IoS one-click jailbreak that was up for sale for $1.5 million by exploit broker Zerodium. In order to better understand zero-day attacks, let’s examine a few examples that occurred in recent years. Examples of Zero-day Attacks One of the most famous zero-day attacks was the Stuxnet worm, which used infected code that sat idle for a period of time. Eventually, the full-scale attack was launched, which in turn sped up and destroyed several centrifuges that featured sensors in Iran’s nuclear power plant. Back in 2011, attackers went after RSA, a security vendor, by using an unpatched vulnerability in Adobe Flash Player. By distributing emails via Excel file attachments, a Flash file was activated and customer data was stolen, which included information used by RSA customers in their SecurID security tokens. The Sony hack is another famous example of a zero-day attack. Teams of hackers, known as the Guardians of Peace, took down Sony’s network. Sensitive corporate data, including films, emails and contracts, were released on public file-sharing websites. While money wasn’t the motive, the attackers did affect the release of the Sony film, “The Interview.” Another popular zero-day attack was the DNC (Democratic National Committee) hack. In this case, “there were at least six zero-day vulnerabilities that were exploited to gain access to stolen data.” The vulnerabilities were discovered in Microsoft Windows, Adobe Flash and Java and were exploited by a well-planned spear-phishing attack that targeted specific individuals. 7 Ways Prevent a Zero-day Attack Patch and update Apply patches to servers, systems and networks as soon as they are available. Never let patches go for an extended period of time. This helps to reduce the number of flaws within your systems. Companies should also factor zero-day attacks into patch management policies and overall cybersecurity policies and procedures. Use multiple layers of security Don’t just depend on patches and device security to prevent zero-day attacks. There’s more work to be done. Use firewalls or AI-based intrusion detection systems that filter out malicious traffic or network activities. Also, utilize sandboxes to quarantine suspicious files or as working environments. Restrict the use of open-source software By restricting the use of and securing your open-source software, zero-day attacks can better be prevented. Be sure to keep track of open-source software usage across your organization and update as often as required by the issuing company. This will help to ensure that vulnerabilities occur less often. Use virtual local area networks By segregating areas of the network with dedicated physical or virtual network segments, otherwise known as a VLAN (Virtual Local Area Network), you can isolate sensitive traffic that flows between servers. VLANs make it possible for network administrators to partition a switched network to match your own needs. Secure email gateways, servers and networks Secure these equally as zero-day attacks can present themselves to various parts of an organization. Whether the hackers seek to deploy malware or deliver payloads, it’s important to consider every potential impact in order to prevent a zero-day exploit from launching. Also, implement IPsec to apply encryption and authentication to network traffic. Change all default passwords Most IoT devices come with default passwords, which can be easier for humans to guess. Additionally, “default passwords are easy targets for automated attacks that scan the internet for devices with default credentials, and it should also reduce the risk of an organization falling victim to brute-force attacks.” Regularly practice cybersecurity Cybersecurity efforts should be an ongoing part of your efforts to secure your network and data. Promote a culture of awareness when it comes to cybersecurity and how users might get lured via a phishing attack, as an example. Educate employees regularly on the dangers lurking and how they can help protect your company’s data. Have a disaster recovery strategy If you are affected by a zero-day attack, it’s imperative to have a disaster recovery plan in place. This will allow you to mitigate the damage if an attack occurs. Utilize a combination of on and off-site storage for backing up your data. Just like most types of cybersecurity attacks, hackers are becoming more adept at deploying and launching zero-day attacks. By applying the aforementioned techniques, you will increase your chances of staving off a zero-day attack. However, it’s important to constantly stay vigilant when it comes to your cybersecurity.

13 Jan A Guide to Understanding Zero-day Attacks

Posted at 06:25h in Blog by MicroAI Admin 0 Comments

A flaw that resides in software, hardware or firmware, a zero-day exploit is one of the toughest types of attacks to detect and prevent. While zero-day attacks are one of the lesser-known types of cybersecurity attacks, they are more common than you may think. “Nearly one out...

08 Jan Trends in IoT for 2020

Posted at 08:45h in Blog by MicroAI Admin 0 Comments

We are in the midst of a technology revolution. The internet is everywhere; it’s on our PCs, our wrists and even in our cars. It’s happening so fast that the number of IoT-connected devices is reaching into the billions globally. The fact is that in...

Blog

03 Jun Keeping Your IoT Environment Safe from Cybercriminals

20 Apr Hackathon -Contest Result

20 Apr Hackathon – GoRona

20 Apr Hackathon – Covid-365

20 Apr Hackathon – Quarantinis

20 Apr Hackathon -lmhm

20 Apr Hackathon -Team Exotic

03 Apr COVID-19, Changing the Way the World Works

13 Jan A Guide to Understanding Zero-day Attacks

08 Jan Trends in IoT for 2020

PRODUCTS

USE CASES

INDUSTRIES

RESOURCES

COMPANY

NEWS / EVENTS

AI STACK