I. Internet connected home printers - the new threat vector
It’s not just about the risk of confidential data being printed at home.
56% of Internet connected home printers allowed researchers to print a ‘secure your printer’ guideline on home printers.
A sophisticated attack would have allowed an attacker to access confidential data in the print queue. Or install a backdoor on the printer. Or install botnets. Or mine crypto currencies…
CISO Check:
Does your work from home checklist include home printer security?
Can your DLP monitor data sent to the printer?
II. Attackers pose as customers to get personal data
Personal data sold to a ‘genuine’ buyer turned up on the dark web and even on file sharing sites.
Why hack when you can buy?
Treat the business of selling data like selling explosives - perform due diligence on the buyer.
CISO Check:
In addition to supplier due diligence, should you have customer due diligence mechanisms if you are in the business of data?
III. Quote of the week
Risk surrounds and envelopes us. Without understanding it, we risk everything and without capitalising on it, we gain nothing - Glynis M Breakwell
Have an original interesting cybersecurity quote? Let us know in the comments and we will publish it along with your name in our quotes section.