Freely subscribe to our NEWSLETTER

“Critical National Infrastructure is the backbone to our digital societies and keeps our world in motion, so when nation state actors target critical infrastructure, it is a move that increases fear. The big question is always about what the intentions and motives are, whether to identify potential targets for cyberattacks, steal intellectual property or simply to cause disruption and interference. Cyberattacks and abuse of unauthorised access is always a major topic however when it targets critical infrastructure, this should be a top priority to defend and warn off any attackers. The news in relation to the Volt Typhoon cyberespionage group is alarming with the attackers exploiting vulnerabilities, performing hands on keyboard access to enumerate the victim’s networks stealing credentials and elevating privileged access. These recent events increase the importance of protecting remote access, credentials security and protecting privileged access with stronger security controls, auditability and implementing the principle of least privileged, which is an important methodology that supports a zero-trust architecture. It is also shows that enforcing just-in-time and just-enough privilege policies should become the norm, as they reduce the risk related to standing privileges and align with Zero Trust best practices.”