{"id":54136,"date":"2020-09-23T13:02:35","date_gmt":"2020-09-23T20:02:35","guid":{"rendered":"https:\/\/world.edu\/?p=54136"},"modified":"2020-09-23T13:02:35","modified_gmt":"2020-09-23T20:02:35","slug":"cutting-corners-on-cybersecurity-can-leave-costly-holes","status":"publish","type":"post","link":"https:\/\/world.edu\/cutting-corners-on-cybersecurity-can-leave-costly-holes\/","title":{"rendered":"Cutting corners on cybersecurity can leave costly holes"},"content":{"rendered":"

\"\"<\/p>\n

It would appear that Covid-19 isn\u2019t the only type of virus that universities should be concerned about.<\/p>\n

Last week, the UK\u2019s National Cyber Security Centre (NCSC) issued an alert<\/a> to the sector regarding a spate of recent ransomware attacks on academic institutions. A recent freedom of information request suggests that<\/a> at least a third of UK universities have been subject to ransomware attacks.<\/p>\n

But the UK is not alone. In June, the University of California, San Francisco paid $1.14 million<\/a> (\u00a3860,000) to regain access to its data. This is a worldwide phenomenon; the consultancy CyberEdge has estimated<\/a> that 62 per cent of organisations around the world have been affected by ransomware in 2020, compared with 56 per cent least year.<\/p>\n

It is anticipated that the Covid-19 lockdown will have fuelled this rise as hackers moved to exploit vulnerabilities exposed in the rapid transfer to remote working. Much of the problem lies in the use of personal devices with unpatched software, insufficient virus control and unencrypted wifi connections. However, the vulnerabilities are often more human than technical, with credentials gained from recycled passwords or phishing attacks; purportedly Covid-related emails have a particularly high likelihood of being clicked on.<\/p>\n

Institutions have moved quickly to implement multi-factor authentication and upgraded firewalls, and review vulnerability management, patching and backup processes. For some, though, this has been too little or too late since hackers have already encrypted their corporate data or threatened to release it unless their ransom demand is paid.<\/p>\n

Such attacks can paralyse an organisation as it weighs up concerns over prolonged business interruption, reputational damage and data protection responsibilities against the financial impact and the ethical implications of capitulating to the demands. The decision to pay or not to pay is very much the question \u2013 especially when university budgets are so tight.<\/p>\n

The advice of the NCSC, as well as Jisc, is very clear: do not pay! A range of reasons are cited, but the prime one is the inability of institutions to be sure that the hacker will undo the damage and not exploit the data breach at a later date. Those who pay up justify doing so on the grounds of business criticality and expediency. They also rely on the \u201chonour among thieves\u201d paradigm that hackers will stick to their word so that victims of future attacks will also feel confident in paying up.<\/p>\n

The cybersecurity industry now goes much further than antivirus software and technical defences. Specialist companies employ trained negotiators who can advise clients on whether the hacker can be \u201ctrusted\u201d and if they have a track record of keeping their word. They also operate on the margins of the Dark Web, using \u201cwhite hat\u201d hackers to infiltrate chat rooms and listen out for data trades.<\/p>\n

Assessing the risk of paying up also depends on understanding the hacker\u2019s motivation. A \u201cblack hat\u201d criminal motivated by financial gain may not think it is worth the effort to piece together data that is encrypted or fragmented across complex data structures. The same is true of the hack itself. The more difficult it is to gain entry, the less likely it is that you will be targeted in the first place.<\/p>\n

On the other hand, a cause-driven hacktivist or state-sponsored infiltrator will be much more tenacious. In CrowdStrike\u2019s \u201cGlobal Threat Report 2020<\/a>\u201d, the cybersecurity firm\u2019s chief executive, George Kurtz, writes: \u201cWhile criminals are relatively predicable in their tendency to always choose the path of least resistance, the activities of nation states are frequently more relentless and sophisticated \u2013 and as a result more challenging for cyberdefenders.\u201d<\/p>\n

So why are universities in particular being targeted? The hackers may be seeking access to intellectual property on cutting edge research, especially related to a potential Covid-19 vaccine. Alternatively they could be looking to access personal data for subsequent identity or qualification fraud. Last year, Jisc\u2019s co-authored report with the Higher Education Policy Institute, \u201cHow Safe is Your Data?<\/a>\u201d, showed a correlation between cyberattacks and term dates, suggesting that hackers also exist within the student community.<\/p>\n

The recent, well publicised attack on Blackbaud<\/a>, the supplier of fundraising software, is an example of how universities can also be indirectly affected, highlighting the importance of ensuring that cybersecurity mitigations and notifications are defined in third-party contracts. The Blackbaud incident also exposed the complexity of GDPR responsibilities between data processor, data controller and data location, occurring at a time when the European Union\u2019s Privacy Shield agreement with the US, which is meant to allow US companies to transfer and store the personal data of EU citizens, was invalidated by a ruling in the European Court of Justice.<\/p>\n

With the world now more reliant than ever on technology for every aspect of our lives, universities would do well to heed the advice of the NCSC to increase awareness of cybersecurity issues within our communities and invest in making our system more robust.<\/p>\n

As institutions move to revise their digital strategies to improve their support for distance learning and working, they must also consider their resilience to cyberattack. Better to invest now on defence than, later on, to have no choice but to line the pockets of criminals \u2013 or endure the bad PR and hefty fines that come with data breaches.<\/p>\n

Author Bio: <\/strong>Chris Cobb is pro vice-chancellor (operations) and deputy chief executive at the University of London.<\/em><\/p>\n","protected":false},"excerpt":{"rendered":"

It would appear that Covid-19 isn\u2019t the only type of virus that universities should be concerned about. Last week, the UK\u2019s National Cyber Security Centre (NCSC) issued an alert to the sector regarding a spate of recent ransomware attacks on academic institutions. A recent freedom of information request suggests that at least a third of […]\n… learn more→<\/a><\/p>","protected":false},"author":33,"featured_media":54137,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[29],"tags":[42667],"coauthors":[11733],"class_list":["post-54136","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-higher-education","tag-cybersecurity"],"acf":[],"yoast_head":"\nCutting corners on cybersecurity can leave costly holes - World leading higher education information and services<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/world.edu\/cutting-corners-on-cybersecurity-can-leave-costly-holes\/\" class=\"yoast-seo-meta-tag\" \/>\n<meta property=\"og:locale\" content=\"en_US\" class=\"yoast-seo-meta-tag\" \/>\n<meta property=\"og:type\" content=\"article\" class=\"yoast-seo-meta-tag\" \/>\n<meta property=\"og:title\" content=\"Cutting corners on cybersecurity can leave costly holes - World leading higher education information and services\" class=\"yoast-seo-meta-tag\" \/>\n<meta property=\"og:description\" content=\"It would appear that Covid-19 isn\u2019t the only type of virus that universities should be concerned about. Last week, the UK\u2019s National Cyber Security Centre (NCSC) issued an alert to the sector regarding a spate of recent ransomware attacks on academic institutions. A recent freedom of information request suggests that at least a third of […]\" class=\"yoast-seo-meta-tag\" \/>\n<meta property=\"og:url\" content=\"https:\/\/world.edu\/cutting-corners-on-cybersecurity-can-leave-costly-holes\/\" class=\"yoast-seo-meta-tag\" \/>\n<meta property=\"og:site_name\" content=\"World leading higher education information and services\" class=\"yoast-seo-meta-tag\" \/>\n<meta property=\"article:published_time\" content=\"2020-09-23T20:02:35+00:00\" class=\"yoast-seo-meta-tag\" \/>\n<meta property=\"og:image\" content=\"https:\/\/world.edu\/wp-content\/uploads\/2020\/09\/cybersecurity.jpg\" class=\"yoast-seo-meta-tag\" \/>\n\t<meta property=\"og:image:width\" content=\"680\" class=\"yoast-seo-meta-tag\" \/>\n\t<meta property=\"og:image:height\" content=\"353\" class=\"yoast-seo-meta-tag\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" class=\"yoast-seo-meta-tag\" \/>\n<meta name=\"author\" content=\"Kevin\" class=\"yoast-seo-meta-tag\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" class=\"yoast-seo-meta-tag\" \/>\n\t<meta name=\"twitter:data1\" content=\"Kevin\" class=\"yoast-seo-meta-tag\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" class=\"yoast-seo-meta-tag\" \/>\n\t<meta name=\"twitter:data2\" content=\"4 minutes\" class=\"yoast-seo-meta-tag\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/world.edu\\\/cutting-corners-on-cybersecurity-can-leave-costly-holes\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/world.edu\\\/cutting-corners-on-cybersecurity-can-leave-costly-holes\\\/\"},\"author\":{\"name\":\"Kevin\",\"@id\":\"https:\\\/\\\/world.edu\\\/#\\\/schema\\\/person\\\/42c1c1d5ff7ffbdf0bd50ed94c6ae6ee\"},\"headline\":\"Cutting corners on cybersecurity can leave costly holes\",\"datePublished\":\"2020-09-23T20:02:35+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/world.edu\\\/cutting-corners-on-cybersecurity-can-leave-costly-holes\\\/\"},\"wordCount\":896,\"image\":{\"@id\":\"https:\\\/\\\/world.edu\\\/cutting-corners-on-cybersecurity-can-leave-costly-holes\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/world.edu\\\/wp-content\\\/uploads\\\/2020\\\/09\\\/cybersecurity.jpg\",\"keywords\":[\"cybersecurity\"],\"articleSection\":[\"Higher Education\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/world.edu\\\/cutting-corners-on-cybersecurity-can-leave-costly-holes\\\/\",\"url\":\"https:\\\/\\\/world.edu\\\/cutting-corners-on-cybersecurity-can-leave-costly-holes\\\/\",\"name\":\"Cutting corners on cybersecurity can leave costly holes - World leading higher education information and services\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/world.edu\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/world.edu\\\/cutting-corners-on-cybersecurity-can-leave-costly-holes\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/world.edu\\\/cutting-corners-on-cybersecurity-can-leave-costly-holes\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/world.edu\\\/wp-content\\\/uploads\\\/2020\\\/09\\\/cybersecurity.jpg\",\"datePublished\":\"2020-09-23T20:02:35+00:00\",\"author\":{\"@id\":\"https:\\\/\\\/world.edu\\\/#\\\/schema\\\/person\\\/42c1c1d5ff7ffbdf0bd50ed94c6ae6ee\"},\"breadcrumb\":{\"@id\":\"https:\\\/\\\/world.edu\\\/cutting-corners-on-cybersecurity-can-leave-costly-holes\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/world.edu\\\/cutting-corners-on-cybersecurity-can-leave-costly-holes\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/world.edu\\\/cutting-corners-on-cybersecurity-can-leave-costly-holes\\\/#primaryimage\",\"url\":\"https:\\\/\\\/world.edu\\\/wp-content\\\/uploads\\\/2020\\\/09\\\/cybersecurity.jpg\",\"contentUrl\":\"https:\\\/\\\/world.edu\\\/wp-content\\\/uploads\\\/2020\\\/09\\\/cybersecurity.jpg\",\"width\":680,\"height\":353},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/world.edu\\\/cutting-corners-on-cybersecurity-can-leave-costly-holes\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/world.edu\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Cutting corners on cybersecurity can leave costly holes\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/world.edu\\\/#website\",\"url\":\"https:\\\/\\\/world.edu\\\/\",\"name\":\"World leading higher education information and services\",\"description\":\"Global Higher Education Jobs, University jobs, Lecturer & tenure jobs.\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/world.edu\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/world.edu\\\/#\\\/schema\\\/person\\\/42c1c1d5ff7ffbdf0bd50ed94c6ae6ee\",\"name\":\"Kevin\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/1e8d491a5f9b9bf3db67c9e46abbba7bb06b26b458bd5025c55e0a4b9b60ea8a?s=96&d=mm&r=g8ba4c352a279c450aa9435d770c1ebf4\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/1e8d491a5f9b9bf3db67c9e46abbba7bb06b26b458bd5025c55e0a4b9b60ea8a?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/1e8d491a5f9b9bf3db67c9e46abbba7bb06b26b458bd5025c55e0a4b9b60ea8a?s=96&d=mm&r=g\",\"caption\":\"Kevin\"},\"description\":\"Kevin is founder of the world.edu project. The past 28 years have been involved in publishing to the education sector in print and the internet. Kevin has a degree in Education and has a many years experience in developing companies and projects.\",\"sameAs\":[\"https:\\\/\\\/world.edu\"],\"url\":\"https:\\\/\\\/world.edu\\\/author\\\/kevin\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Cutting corners on cybersecurity can leave costly holes - World leading higher education information and services","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/world.edu\/cutting-corners-on-cybersecurity-can-leave-costly-holes\/","og_locale":"en_US","og_type":"article","og_title":"Cutting corners on cybersecurity can leave costly holes - World leading higher education information and services","og_description":"It would appear that Covid-19 isn\u2019t the only type of virus that universities should be concerned about. Last week, the UK\u2019s National Cyber Security Centre (NCSC) issued an alert to the sector regarding a spate of recent ransomware attacks on academic institutions. A recent freedom of information request suggests that at least a third of […]","og_url":"https:\/\/world.edu\/cutting-corners-on-cybersecurity-can-leave-costly-holes\/","og_site_name":"World leading higher education information and services","article_published_time":"2020-09-23T20:02:35+00:00","og_image":[{"width":680,"height":353,"url":"https:\/\/world.edu\/wp-content\/uploads\/2020\/09\/cybersecurity.jpg","type":"image\/jpeg"}],"author":"Kevin","twitter_misc":{"Written by":"Kevin","Est. reading time":"4 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/world.edu\/cutting-corners-on-cybersecurity-can-leave-costly-holes\/#article","isPartOf":{"@id":"https:\/\/world.edu\/cutting-corners-on-cybersecurity-can-leave-costly-holes\/"},"author":{"name":"Kevin","@id":"https:\/\/world.edu\/#\/schema\/person\/42c1c1d5ff7ffbdf0bd50ed94c6ae6ee"},"headline":"Cutting corners on cybersecurity can leave costly holes","datePublished":"2020-09-23T20:02:35+00:00","mainEntityOfPage":{"@id":"https:\/\/world.edu\/cutting-corners-on-cybersecurity-can-leave-costly-holes\/"},"wordCount":896,"image":{"@id":"https:\/\/world.edu\/cutting-corners-on-cybersecurity-can-leave-costly-holes\/#primaryimage"},"thumbnailUrl":"https:\/\/world.edu\/wp-content\/uploads\/2020\/09\/cybersecurity.jpg","keywords":["cybersecurity"],"articleSection":["Higher Education"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/world.edu\/cutting-corners-on-cybersecurity-can-leave-costly-holes\/","url":"https:\/\/world.edu\/cutting-corners-on-cybersecurity-can-leave-costly-holes\/","name":"Cutting corners on cybersecurity can leave costly holes - World leading higher education information and services","isPartOf":{"@id":"https:\/\/world.edu\/#website"},"primaryImageOfPage":{"@id":"https:\/\/world.edu\/cutting-corners-on-cybersecurity-can-leave-costly-holes\/#primaryimage"},"image":{"@id":"https:\/\/world.edu\/cutting-corners-on-cybersecurity-can-leave-costly-holes\/#primaryimage"},"thumbnailUrl":"https:\/\/world.edu\/wp-content\/uploads\/2020\/09\/cybersecurity.jpg","datePublished":"2020-09-23T20:02:35+00:00","author":{"@id":"https:\/\/world.edu\/#\/schema\/person\/42c1c1d5ff7ffbdf0bd50ed94c6ae6ee"},"breadcrumb":{"@id":"https:\/\/world.edu\/cutting-corners-on-cybersecurity-can-leave-costly-holes\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/world.edu\/cutting-corners-on-cybersecurity-can-leave-costly-holes\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/world.edu\/cutting-corners-on-cybersecurity-can-leave-costly-holes\/#primaryimage","url":"https:\/\/world.edu\/wp-content\/uploads\/2020\/09\/cybersecurity.jpg","contentUrl":"https:\/\/world.edu\/wp-content\/uploads\/2020\/09\/cybersecurity.jpg","width":680,"height":353},{"@type":"BreadcrumbList","@id":"https:\/\/world.edu\/cutting-corners-on-cybersecurity-can-leave-costly-holes\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/world.edu\/"},{"@type":"ListItem","position":2,"name":"Cutting corners on cybersecurity can leave costly holes"}]},{"@type":"WebSite","@id":"https:\/\/world.edu\/#website","url":"https:\/\/world.edu\/","name":"World leading higher education information and services","description":"Global Higher Education Jobs, University jobs, Lecturer & tenure jobs.","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/world.edu\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/world.edu\/#\/schema\/person\/42c1c1d5ff7ffbdf0bd50ed94c6ae6ee","name":"Kevin","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/1e8d491a5f9b9bf3db67c9e46abbba7bb06b26b458bd5025c55e0a4b9b60ea8a?s=96&d=mm&r=g8ba4c352a279c450aa9435d770c1ebf4","url":"https:\/\/secure.gravatar.com\/avatar\/1e8d491a5f9b9bf3db67c9e46abbba7bb06b26b458bd5025c55e0a4b9b60ea8a?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/1e8d491a5f9b9bf3db67c9e46abbba7bb06b26b458bd5025c55e0a4b9b60ea8a?s=96&d=mm&r=g","caption":"Kevin"},"description":"Kevin is founder of the world.edu project. The past 28 years have been involved in publishing to the education sector in print and the internet. Kevin has a degree in Education and has a many years experience in developing companies and projects.","sameAs":["https:\/\/world.edu"],"url":"https:\/\/world.edu\/author\/kevin\/"}]}},"amp_enabled":true,"_links":{"self":[{"href":"https:\/\/world.edu\/wp-json\/wp\/v2\/posts\/54136","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/world.edu\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/world.edu\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/world.edu\/wp-json\/wp\/v2\/users\/33"}],"replies":[{"embeddable":true,"href":"https:\/\/world.edu\/wp-json\/wp\/v2\/comments?post=54136"}],"version-history":[{"count":1,"href":"https:\/\/world.edu\/wp-json\/wp\/v2\/posts\/54136\/revisions"}],"predecessor-version":[{"id":54138,"href":"https:\/\/world.edu\/wp-json\/wp\/v2\/posts\/54136\/revisions\/54138"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/world.edu\/wp-json\/wp\/v2\/media\/54137"}],"wp:attachment":[{"href":"https:\/\/world.edu\/wp-json\/wp\/v2\/media?parent=54136"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/world.edu\/wp-json\/wp\/v2\/categories?post=54136"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/world.edu\/wp-json\/wp\/v2\/tags?post=54136"},{"taxonomy":"author","embeddable":true,"href":"https:\/\/world.edu\/wp-json\/wp\/v2\/coauthors?post=54136"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}