Tag: BusinessSecurity

Your firewall cannot save you because the workplace it was designed to protect barely exists anymore. Employees work from anywhere. Applications sit in the cloud, while data moves between platforms and devices. Businesses also increasingly rely on third parties and connected services. The office may still have a firewall, but the business itself has long since moved beyond its walls.

Attackers aren’t breaking in; they’re being invited, and the invitations are being written by the business. The easiest way to install malware on a business network is to persuade someone inside the business to do it. Attackers don’t always need to bypass the firewall or exploit a zero-day vulnerability. Sometimes, all it takes is a convincing email, a moment of misplaced confidence and trust.

At the start of 2024, a finance worker in Hong Kong at a multinational firm joined what appeared to be a routine video call with senior leadership. The call included people who looked and sounded like the company’s UK-based CFO and other executives. However, AI-generated deepfakes had created these individuals. As a result, the employee authorised several transfers to different bank accounts worth around $25 million.