A popular European budget airline has recently revealed that it had suffered a \u201chighly sophisticated\u201d cyberattack exposing names, email addresses and travel details of almost 9 million customers. This incident has shaken the world of cybersecurity and has forced the IT security officials to rethink about the robustness of access control management and overall cybersecurity posture.<\/p>\n
As we see today, many organizations still show a lackadaisical attitude towards securing critical information, critical systems, and privileged credentials. In the above incident, without disclosing the hackers\u2019 identity, the organization claimed that the hackers\u2019 group obtained unauthorized access to their huge database consisting of confidential information. Adding to the woes, it has been found that the credit card details of 2,208 customers were also accessed under suspicious circumstances. The digital security code or the CVV numbers of the cards were also compromised.<\/p>\n
Although premature to say, malicious privileged <\/strong>insiders<\/strong> typically play a bad role in targeted attacks. In several cases, hackers target privileged credentials via social engineering and gain administrative access to root accounts and databases.<\/p>\n When it comes to Identity and Access Control Management, more importantly, Privilege Access Management, many enterprises still keep unadvisable practices such as manual monitoring of privileged accounts and maintain shared accounts and credentials. A key component of IT security architecture, privileged access management ensures a foolproof security for sensitive information. The practice ensures robust authentication, authorization and audit trails of each and every activity on target systems whilst it automates daily use cases workflows to enhance administrative efficiency. Secondly, a robust Privileged Access Management (PAM) solution like ARCON | Privileged Access Management<\/strong><\/a> can monitor privileged user activities in real-time, which helps to flag unusual activity and impending cyber incidents.<\/p>\n In the above incident, it is invariably presumed that the hackers\u2019 group found a major loophole in the access control mechanism of the huge database which resulted in today\u2019s financial and reputational disaster. Even if the customers are contacted (as promised by the airlines official) it will be an extremely difficult task for the organization to rebuild faith and security assurance. In order to avoid such catastrophe, organizations need to ponder over implementing the best possible security practices to mitigate the threats from malicious actors.<\/p>\n The bottom line:<\/strong> Malicious Insiders and organized hackers group target privileged credentials to gain access to key accounts and confidential information. Only a robust PAM solution can monitor the user activities in real-time and notify the IT administrators about any suspicious activity.<\/p>\n ARCON is a leading enterprise risk control solutions provider, specializing in risk-predictive technologies. ARCON | User Behaviour Analytics<\/a><\/span> enables to monitor end-user activities in real time. ARCON | Privileged Access Management<\/a><\/span> reinforces access control and mitigates data breach threats. ARCON | Endpoint Privilege Management<\/a><\/span> mitigates risks arising out of endpoints. ARCON | Secure Compliance Management<\/a><\/span> is a vulnerability assessment tool.<\/p>\n","protected":false},"excerpt":{"rendered":" A popular European budget airline has recently revealed that it had suffered a \u201chighly sophisticated\u201d cyberattack exposing names, email addresses and travel details of almost 9 million customers. This incident has shaken the world of cybersecurity and has forced the IT security officials to rethink about the robustness of access control management and overall cybersecurity […]<\/p>\n","protected":false},"author":40,"featured_media":47909,"parent":0,"menu_order":0,"template":"","meta":{"_acf_changed":false,"footnotes":""},"risk-categories":[],"class_list":["post-46771","risk-to-watch","type-risk-to-watch","status-publish","has-post-thumbnail","hentry"],"acf":{"blog_inner_page_contents":[{"acf_fc_layout":"hero_section","image":47909,"news_logo":"","publish_date":"","reading_time":"","heading":"","para":"","cta_text":"","cta_url":"","is_featured_post":false},{"acf_fc_layout":"page_contents","social_media_items":null,"sidebar_item_desktop":[{"id":"Overview","item_name":"Overview"},{"id":"The bottom line","item_name":"The bottom line"}],"contents":[{"id":"Overview","title":"Overview","content":"\n
\n