Magazine menu Close Magazine menu

tomorrow unlocked

Latest stories

behind the screens

Zero-day: Birth of a new threat

  • min read
    • They're inside your system but no one knows how they got there – or how to stop them. These destructive attacks are called zero-day threats, because your security team will have zero days to prepare. Zero-day attacks involve cybercriminals using vulnerabilities no one knows about. They're hard to detect and can go on for years. Zero-day: Birth of a New Threat is Tomorrow Unlocked's latest film in the hacker:HUNTER Behind the Screens series. Michael Gregg, CEO of Managed Service Provider Catalyst Network Solutions, discusses these attacks and his clever way to trick cybercriminals into giving up their secrets. He also shares ways to spot these sometimes-subtle attacks. Understanding zero-day attacks While you may not have heard of zero-day attacks, some of the most well-known cyberattacks fall into this category, such as WannaCry and BlueKeep. But what does it mean? Software developers are always looking out for vulnerabilities hackers could use to gain access to systems through their software. When you receive software updates, these often include 'patches' for recently discovered security holes. "It's called zero-day because that's exactly how long you've had to prepare for it," says Gregg. Zero-day attacks might include reaching a vulnerable system using phishing – manipulative emails to users aiming to convince them to open a file or visit a malicious site. That action downloads the attacker's malware, which infiltrates user files. It can take time for developers to find the vulnerability that allowed the attack. In recent years, hackers have become faster at exploiting vulnerabilities soon after discovery. Zero-day attacks are especially dangerous because only attackers know about them. Once they have access through a zero-day vulnerability, criminals can attack immediately or wait for the best time. What is a Managed Service Provider (MSP?) Gregg's company, Catalyst Network Solutions, is a Kaspersky partner Managed Service Provider (MSP.) MSPs offer cybersecurity-as-a-service. Rather than or as well as an inhouse cybersecurity team, businesses hire MSPs to take care of their cybersecurity. Using MSPs makes it easier for businesses to have a range of cybersecurity expertise on-hand in a market where hiring cyber experts can be challenging. MSPs typically provide services to multiple companies and organizations, giving them broad-based knowledge of cyberthreats and cyber solutions. With the wide range of business tech that needs securing today – from light switches to security cameras to fridges – the value of wide-ranging experience is rising by the day. Tricking cybercriminals with their own tricks The data tricks cybercriminals into using, and so revealing, their zero-day methods. This has allowed Gregg's team to prevent and stop attacks faster. Preventing zero-day attacks As soon as a zero-day threat is understood, software developers will release updates to patch it, so your business should ensure it always installs updates promptly. If you can't stop a zero-day attack happening, there are ways to ensure it's caught early. Gregg advises "There's never a call that's not worth making," when it comes to cybersecurity. Signs of zero-day attacks can be subtle. "If your mouse is moving in a weird way, you're getting out-of-place keystrokes or your computer's running slowly," let the cyber professionals know – whether you have an internal team or a Managed Service Provider.
kids, tomorrow unlocked

What should we do with kids who hack?

  • min read
    • Tomorrow Unlocked's latest video series in collaboration with Euronews, hacker:HUNTER The Kids, examines how and why children get into hacking – putting themselves at risk and doing much damage. Should these young hackers be treated like criminals? Or can they be rehabilitated and taught to use their hacking skills for good? Watch the episodes: 1.  Criminals in children's rooms? How kids become hackers One mom didn't know her son was hacking until he had a gun delivered to the family home. Episode 1 explores how organized crime groups target children and groom them into cybercrime. We also follow the journey of a young hacker's mother who now helps police address cybercrime by children. 2.  How kids with little code skill do big, damaging hacks Children don't need much code skill to perform damaging cyberattacks. In episode 2, hear original testimony from a child hacker – a 'script kiddie' or 'skiddie:' How and why he attacked his school, stealing and exposing private information. But despite increasing damage from their hacks, experts think script kiddies shouldn't be thrown in jail – instead, they could be nurtured to be future cyber leaders. 3.  It started with innocent pranks. Now he faces life in prison. A 14-year-old known as Omnipotent started one of the world's most popular hacking forums, RaidForums. It began with innocent pranks on users of streaming service Twitch, but soon led to life-threatening hoaxes and selling stolen data. Authorities long knew Omnipotent was Portuguese national Diogo Santos Coelho. Yet they didn't arrest him until he was old enough to be tried as an adult. His case raises hard questions – could police have stopped crime if they'd intervened earlier? 4.  How Dutch police put prevention first with young hackers Hacking's adrenaline rush can be addictive. If authorities intervene when they're young, can black-hat (illegal) hackers gain a moral compass and learn to use their skills for good? Netherlands' National Police Corps focus on preventing cybercrime. Their unique programs RE_B00tCMP (Reboot Camp) and HACK_Right aim to send young hackers in a positive direction. Hacker GhostExodus, imprisoned for 11 years because of his illegal hacking as a young person, shares how he got back on track. Subscribe to Tomorrow Unlocked on YouTube for more films about how tech is changing our world. Experts in hacker:HUNTER The Kids Waqas Ahmed, Cybersecurity Writer, HackRead Media. Ben Cooper KC, specialist extradition lawyer. Dr. Kelli Dunlap Clinical Psychologist and Game Designer. Christian Funk, Head of GReAT, Kaspersky Germany. Barbara Gemen, Parent and Cyber Special Volunteer with the Dutch National Police GhostExodus, former black hat hacker turned humanitarian activist. Floor Jansen, Team Lead, Cyber Offender Prevention Squad, Dutch Police. Mike Jones, Security Researcher. Marco Preuss, Director of GReAT, Kaspersky Europe. Alexander Urbelis, Cybersecurity Lawyer, Crowell and Moring. Jorik Van Maanen, student and RE_B00tCMP graduate. Erik Van Oosbree, white-hat hacker and penetration tester.
by Innovating leaders.
Innovative tech.
About Secure Futures

Secure Futures magazine is your go-to business guide for opinions, trends and insight into the world of technology and cybersecurity. We help your business to bring on the future. Brought to you by Kaspersky, the global cybersecurity experts.

  • For all other countries