Cyber Daily Report

None--Security Boulevard
published date: 2022-01-21 09:38:00 UTC

None

<div id="contentsContainer" class="style-scope qowt-page"><div id="contents" class="style-scope qowt-page">An astonishing 90% of enterprise data <a href="https://securityboulevard.com/2021/09/modern-problems-traditional-security-scanning-wasnt-built-for-todays-pipelines/" target="_blank" rel="noopener">breaches</a> are caused by <a href="https://www.egress.com/en-us/resources/cybersecurity-information/phishing/phishing-statistics-2021#:~:text=Financial%20cost%20of%20phishing%20attacks,from%20%243.86%20million%20in%202020." target="_blank" rel="noopener">phishing attacks</a>, costing businesses billions every year in lost revenue and downtime. Rogue devices are often the gateway to such attacks. The industries most vulnerable to hacking include finance, medicine, education, warehousing, airports and rail stations, government and distributed enterprise networks. These verticals operate at pervasive levels and handle highly sensitive data that could devastate businesses and customers in the wrong hands.To make matters worse, the proliferation of IoT and edge devices has created even more wireless attack surfaces than ever, putting even more companies at risk.<h3 id="E395" class="x-scope qowt-word-para-0">Enter the 24/7 Security Access Point</h3>Security access points come with extra dedicated scanning radios designed solely to scan for threats around the clock. Security APs create a persistent line of defense between enterprise networks and the criminals who want to hack them.<h3 id="E405" class="x-scope qowt-word-para-0">Why is this Important?</h3>One of the most serious problems with a number of standard Wi-Fi access points is they only scan business networks for security threats during non-peak times. Their internal dual-band radios are tasked primarily with providing a Wi-Fi connection, leaving security scanning to be done when there is less traffic overloading the network. Frankly, that’s not good enough.Security APs are different. Because they scan constantly, they will detect rogue devices or malicious activity immediately, sending an alert to IT administrators who can act to isolate and disconnect the device or stop the malicious attack in its tracks. Security access points are built to address dangerous and costly cyberattacks.So, what do these <a href="https://securityboulevard.com/2022/01/top-10-challenges-cyber-security-will-face-in-2022/" target="_blank" rel="noopener">cyberattacks</a> really look like? And how vulnerable are you?<h3 id="E445" class="qowt-stl-Heading1 x-scope qowt-word-para-0">Types of Cyberattacks</h3><ul><li id="E447" class="x-scope qowt-word-para-0">Evil twin: Rogue access points can impersonate a legitimate network, simulating the same SSID and MAC address. Employees and visitors can be tricked into connecting to the rogue AP instead of the legitimate network, opening the door to having their personal information and activity hacked. Security APs can identify the threat immediately and neutralize it before any harm is done.</li><li id="E453" class="x-scope qowt-word-para-0">Man-in-the-middle: When the SSID security type is “Open” or “WPA-Personal,” the attacker is able to secretly relay and alter the communication between an access point and wireless client who believe they are directly communicating with each other. The attacker makes independent connections with both victims and relays messages between them to make them believe their conversation is private, when in fact the entire conversation is controlled by the attacker.</li><li class="x-scope qowt-word-para-0">Invalid SSID misuse: Misconfigured access points simulate a company SSID from an unauthorized access point connected to your private network with a configuration that does not conform to your security policies, thus allowing insecure connections. This can happen anytime an AP isn’t set up properly, for example, leaving default settings unchanged.</li><li class="x-scope qowt-word-para-0">RF jammer: An RF jammer device will specify an SSID/channel to send packets or RF signals constantly, forcing other clients to be dropped by the overloaded channel.</li><li class="x-scope qowt-word-para-0">De-authentication frame: IEEE 802.11 Wi-Fi protocol allows a de-auth frame to tell a client they have been disconnected from a network. The problem is that the protocol does not require any encryption for this frame. Thus, an attacker can send a de-auth frame at any time to the access point with a client’s MAC address.</li></ul></div></div><div id="contentsContainer" class="style-scope qowt-page"><div id="contents" class="style-scope qowt-page"><h3 id="E527" class="qowt-stl-Heading1 x-scope qowt-word-para-0">Features to Look for in a Security AP </h3>Security access points come with a number of key features designed to stop cyberattacks as well as bonus features to enhance the visibility and performance of your network:<ul><li id="E546" class="qowt-li-1_0 qowt-list qowt-stl-ListParagraph x-scope qowt-word-para-0">Wireless intrusion detection system (WIDS) for threat detection</li><li id="E548" class="qowt-li-1_0 qowt-list qowt-stl-ListParagraph x-scope qowt-word-para-0">Wireless intrusion protection system (WIPS) for attack remediation</li><li id="E550" class="qowt-li-1_0 qowt-list qowt-stl-ListParagraph x-scope qowt-word-para-0">Dedicated scanning radios for 24/7 wireless security monitoring</li><li id="E552" class="qowt-li-1_0 qowt-list qowt-stl-ListParagraph x-scope qowt-word-para-0">RF spectrum analysis for identifying clean channels and ensuring all SSIDs are legitimate</li><li id="E554" class="qowt-li-1_0 qowt-list qowt-stl-ListParagraph x-scope qowt-word-para-0">Wi-Fi 6 technology for high-performance Wi-Fi in high-density, multi-device environments</li><li id="E556" class="qowt-li-1_0 qowt-list qowt-stl-ListParagraph x-scope qowt-word-para-0">Zero-wait DFS to avoid client disruption when radar is detected on DFS channels</li><li id="E558" class="qowt-li-1_0 qowt-list qowt-stl-ListParagraph x-scope qowt-word-para-0">Bluetooth 5 low energy for BLE device detection and location-based extended advertising</li></ul>Now is the chance for businesses of all sizes to get in on the ground floor of this revolutionary technology. As potential security risks grow in proportion to the expanding Wi-Fi grid, several manufacturers are taking the lead in making sure enterprise networks are protected at all times.</div></div>