The evolving cybersecurity landscape proves challenging for businesses as threat actors shift and adapt in their choice of attack vectors and tactics. In turn this prompts the need for businesses and users to stay ahead of the curve.
Trend Micro has published a report predicting four key themes that will define 2020 including how the future is Complex, Exposed, Misconfigured and Defensible.
From the report (simply titled ‘The New Norm’), the key predictions that businesses need to be aware of during 2020 include:
Banking systems will be in the cross-hairs with open banking and ATM malware. The report predicts that Operators of mobile malware dedicated to attacking online banking and payment systems will be prolific in 2020.
Cybercriminals will turn to blockchain platforms for their transactions in the underground. For example, smart contracts will enable cybercriminals to formalize cryptocurrency payments and record them on the blockchain.
“Deepfakes” will be the next frontier for enterprise fraud. This means employees will have to learn to identify telltale signs of deepfakes, such as a different intonation, slow speech, and artificial-looking skin in videos.
IoT devices will be used for espionage and extortion. For instance, using machine learning and AI to listen in on connected devices in enterprise settings, such as smart TVs and speakers.
Home offices and other remote-working setups will redefine supply chain attacks. This means organizations will have to be wary of risks introduced by work-from-home arrangements and internetconnected home devices that blur the lines in enterprise security.
While longstanding cyber-attack methods will continue, such as extortion, obfuscation, phishing, new risks will also emerge. The report predicts that one driver for this will be the increased migration to the cloud which exacerbates human error, especially as misconfigurations contribute to the possibility of compromise. Furthermore, the high number of connected assets and infrastructures further creates a multiple issues.
The report also finds that enterprise threats will be no less complex, mixing traditional risks with new technologies, such as artificial intelligence in business frauds.