"Until now, cybersecurity tools based on Endpoint Detection and Response technology have been a guarantee of protection against computer attacks. Unfortunately, hackers are now finding ways around it.

Last week, experts from the British government's cybersecurity agency sounded the alarm, declaring that the proliferation of hacking tools is out of control. The news proves them right, as it is one of the best cybersecurity tools on the market offered by Microsoft that is gradually being bypassed by hackers.Known as Endpoint Detection and Response (EDR), this technology is used in high-performance cybersecurity tools. Designed to spot the first signs of malicious activity on all machines serving as endpoints (such as computers) in a computer network, they then block threats before intruders can steal data or lock down machines. ... "

Link to article: https: //www.tomsguide.fr/des-hackeurs-ont-trouve-un-moyen-de-contourner-la-meilleure-technologie-de-cybersecurite-actuelle/

Credit: Antoine BARSACQ - TOM'S GUIDE

" Only 7% of French organizations have a sufficiently "mature " cybersecurity posture to defend themselves against the threats of the hybrid world.

Companies have moved from a fixed mode of operation, where employees use devices in a single location via a static network, to a hybrid world where connections are made with multiple devices on different networks, via applications in the cloud, generating huge amounts of data.

This development poses new cybersecurity challenges for businesses. Above all, it highlights the limits of the sacrosanct perimeter defense.

According to the Cisco study "Cybersecurity Readiness Index: Resilience in a Hybrid World", only 7% of organizations in France have the "mature" level of readiness required to be resilient in the face of modern cybersecurity risks. ... "

Link to article: http: //itsocial.fr/enjeux-it/enjeux-securite/cybersecurite/les-entreprises-francaises-doivent-ameliorer-leur-resilience/

Credit: Philippe RICHARD - IT SOCIAL

" Cobolux was the victim of a violent cyber-attack in November, which it claims cost it almost 500,000 euros.

"The damage is great", Paul Faltz, General Manager of Cobolux, told us at the end of November. His company of around 150 employees, which supplies meat to butchers' shops throughout France and the Greater Region, supermarkets and restaurants, had just been hit by a violent cyber-attack. The attack, which took place on Friday November 25, brought the plant to a standstill for an entire weekend. Nearly three months later, the bill has soared.

While the loss at the time was "already in excess of 100,000 euros", it is now estimated at "between 400,000 and 500,000 euros", according to Paul Faltz, who lists "the production stoppages caused by this attack, the restoration of the network and our ERP (integrated management software), the hours, weeks and months spent by our administrative teams re-encoding the lost data, and the investment in an even more secure IT structure". There had been a ransom demand. "But our very good IT teams were able to react," Cobolux said at the time. ... "

Link to article: https: //www.lessentiel.lu/fr/story/trois-mois-apres-la-cyberattaque-une-facture-salee-de-pres-de-500-000-euros-521005611287

Credit: Nicolas MARTIN - L'Essentiel

" The government wants to encourage the development of insurance against computer attacks. However, companies need to demonstrate that they have upgraded their IT security to obtain cover. Faced with a phenomenon they are still struggling to grasp, insurers are raising prices and are on their guard.

Small and medium-sized enterprises (SMEs) are well advised to equip themselves with belts and suspenders to secure insurance cover against cyber attacks. At a time when hacker offensives against companies are on the increase, insurers are taking a cautious approach to granting cover.

"Only companies that have invested in IT security and protection tools will be able to insure themselves," warns Christophe Zaniewski, General Manager of AIG in France. However, "basic security procedures are still very rarely implemented by SMEs", laments this long-standing market player.. ... "

Link to article: https: //business.lesechos.fr/entrepreneurs/numerique-cybersecurite/0701648139886-cyberattaques-les-entreprises-doivent-se-securiser-pour-etre-assurees-348501.php

Credit: Solenn POULLENNEC and Laurent THEVENIN - Les Echos ENTREPRENEURS

" On February 18, 2021, Afnor's entire business was brought to a standstill by a computer attack. The Ryuk ransomware had claimed yet another victim. Jean-Marc Aubert, Afnor's CISO, recounts the details of this long-term crisis management.

For the outside world, on the afternoon of February 18, 2021, the Association française de normalisation (AFNOR) modestly refers to technical problem" with its websites. Its press service, fortunately more transparent, mentions the Ryuk ransomware. Behind the scenes, it all began a few hours earlier.

At 8:02 a.m., a message from the technical team alerted Afnor's CIO to a "small" problem: the sudden appearance of .RYK files on the company network. He immediately interrupted his vacation and called Jean-Marc Aubert, Afnor's current CISO, who was then in charge of security. This marked the start of a race against time to block the attack, followed by months of work to get the information system back into production.

Just 18 minutes after the alert began, the CIO and ComEx decided to shut down the entire information system. "All computers were shut down, and everyone went back to paper and pencil," explains Jean-Marc Aubert. "We were in the middle of the Covid phase, and all employees were in lockdown. We call back all ISD staff, and set up a crisis management room. "

All hell breaks loose at AFNOR headquarters

The entire information system is shut down, and the crisis management team quickly gets organized. The IT team calls its contacts for help and handles the reporting aspect of the cyberattack. The Agence nationale de la sécurité des systèmes d'information (Anssi) is notified, as is the insurer. A complaint is lodged with the local police station, and the mandatory declaration to the CNIL is made within 72 hours.Jean-Marc Aubert also turned to the Office central de lutte contre la criminalité liée aux technologies de l'information et de la communication (OCLCTIC), which is familiar with this type of attack on French companies. "Fortunately, we had taken out cyber insurance a year before the attack. Another invaluable asset was the assistance contract we had signed with Airbus Protect, which enabled us to start our crisis management very quickly. And while our first call was to Anssi, the second was to our sales contact at Airbus Protect." "

Link to article: https: //www.lemagit.fr/etude/Ransomware-le-RSSI-de-lAfnor-raconte-la-cyberattaque-de-fevrier-2021

Credit: Alain Clapaud - LeMagIT

" Industrial companies are well aware of the cyber threats facing their connected factories. However, many of them admit they are not ready to defend themselves.

Companies running connected factories all - or almost all - recognize that cybersecurity is an essential component of their operations. But, according to a report published last week by Capgeminimany of them are unprepared for the growing number of cyber threats facing their plants. The report, based on a survey of 950 companies worldwide, finds that 80% agree that cybersecurity is an essential component of running a smart factory, and that while more than half (51%) recognize that the number of cyberattacks is likely to increase over the next 12 months, their current level of preparedness is low.... "

Link to article: https://www.lemondeinformatique.fr/actualites/lire-les-usines-connectees-ne-sont-pas-preparees-aux-cyberattaques-87339.html

Credit: Jean Elyan - Le Monde Informatique

" Faced with the proliferation of cyber threats, no company is immune, regardless of its size or field of activity. While digital sectors such as e-commerce have long been prime targets, the world of industry is now in the crosshairs of criminals.

One of the main reasons for this is the obsolescence or weakness of cybersecurity processes that have not been strengthened or even updated for a long time. It's not uncommon for existing systems to continue using the same security protocols as when they were launched, so attacks can quickly and easily interfere with operations. There is a misconception that cyberattacks are becoming increasingly sophisticated or complex; in reality, criminals rely on well-established tactics and look for the most obvious and quickly accessible opportunities.... "

Link to article: https: //www.datasecuritybreach.fr/cybermenace-entreprise/?amp=1

Credit: Damien Bancal - Data Security Breach

"The Groupement hospitalier de territoire de la région Grand Est has been hacked. As a new method of blackmail, the hackers have put the archive of almost 28 GB of data up for sale on the Darknet for a limited time. When it expires, if it is not sold, passports, medical analyses, bank details, patient files... will circulate freely on the networks.

 

[...] So, for the moment, it costs $1.3 million to acquire this data data. At least, that's what the hospital group will have to pay, if it doesn't want anyone with malicious intent to buy it. But that's not all, as this is a temporary "Premium" offer. Data is only available at this exclusive rate for one week. After seven days, if no buyer has come forward, the information will be freely distributed on the network. ... "

Link to article: https: //www.futura-sciences.com/tech/actualites/cybersecurite-hopitaux-grand-victimes-enorme-cyberattaque-98173/

Credit: Louis Neveu - Futura Tech

"A study by PAC shows that CIOs and CISOs overestimate the IT security maturity of their organizations.

Is it still necessary to stress the importance of IT security in the face of growing cyberthreats? 55% of French companies have been the victim of a cyberattack at least once in the last twelve months, and 30% of them more than once, according to the latest PAC study on cybersecurity. Faced with this constant danger, one might expect companies to do everything in their power to protect themselves. However, the PAC study reveals a catastrophic overestimation of companies' level of IT security maturity. According to the research firm, 41% of French companies are less mature in terms of cybersecuritý than they think, with 53% of companies surveyed declaring a high level of cybersecurity maturity. ... "

 Link to article: https: //www.lemondeinformatique.fr/actualites/lire-la-securite-des-entreprises-manque-encore-de-maturite-87066.html

Credit: Bertrand Lemaire - Le Monde Informatique