Ib qho kev txhawj xeeb tseem ceeb rau cov tuam txhab tau tiv thaiv kev hem thawj digital. Thiab txawm tias siv cov kev ntsuas, kev siv, thiab cov kev daws teeb meem tshiab los tiv thaiv kev nkag mus thiab cov ntaub ntawv tub sab, qhov teeb meem tsis yog nyob ntawm cov thev naus laus zis nkaus xwb tab sis kuj yog tib neeg tus cwj pwm. Qhov no yog raws li tus kws tshaj lij cybersecurity Leonardo Baiardi los ntawm dataRain, uas taw qhia tias 74% ntawm kev tawm tsam cyberattack yog tshwm sim los ntawm tib neeg yam. Tus thawj coj hais txog qhov kev cob qhia cov neeg ua haujlwm txaus yuav yog qhov tseem ceeb rau kev ruaj ntseg zoo li cas.
Baiardi suav tias tib neeg yog qhov sib txuas tsis muaj zog tshaj plaws thaum cuam tshuam nrog cyber txaus ntshai hauv ib puag ncig koom nrog. "Txhua tus neeg hauv lub tuam txhab yuav tsum nkag siab tias lawv yog lub luag haujlwm rau kev ruaj ntseg cov ntaub ntawv, thiab qhov no tsuas yog ua tiav los ntawm kev cob qhia, kev lav phib xaub, thiab kev sib txuas lus ntawm cov tuam tsev. Txhua tus yuav tsum paub txog cov kev pheej hmoo uas lawv raug nthuav tawm."
Tus kws tshaj lij txoj kev xav tau ntxiv rau qhov uas tau pom nyob rau hauv Proofpoint's 2023 Human Factors Report, uas qhia txog lub luag haujlwm tseem ceeb ntawm tib neeg cov yam ntxwv hauv kev nyab xeeb. Txoj kev tshawb no nthuav tawm kaum ob qhov kev nce ntxiv hauv qhov ntim ntawm kev sib raug zoo engineering los ntawm cov khoom siv mobile, ib hom kev tawm tsam uas pib nrog cov lus tsis zoo, tsim kev sib raug zoo. Qhov no tshwm sim, raws li Baiardi, vim hais tias tib neeg tus cwj pwm tuaj yeem hloov kho. "Raws li legendary hacker Kevin Mitnick tau hais tias, tib neeg lub siab yog qhov cuab yeej cuab tam yooj yim tshaj plaws rau hack. Tom qab tag nrho, tib neeg muaj cov txheej txheem kev xav uas muaj kev cuam tshuam rau sab nraud, uas tuaj yeem ua rau muaj kev ua pob liab liab xws li nyem rau ntawm kev sib txuas tsis zoo lossis sib qhia cov ntaub ntawv rhiab," nws hais.
Cov khoom siv phishing tsim los hla ntau qhov kev lees paub qhov tseeb (MFA), thiab kev tawm tsam huab cua, uas kwv yees li 94% ntawm cov neeg siv tau tsom mus rau txhua lub hlis, kuj yog ib feem ntawm kev hem thawj tshaj plaws hauv daim ntawv tshaj tawm.
Feem ntau yuam kev
Ntawm cov feem ntau yuam kev uas ua rau muaj kev ruaj ntseg ua txhaum cai, Baiardi teev: tsis xyuas qhov tseeb ntawm emails; tawm hauv lub computer xauv; siv pej xeem Wi-Fi tes hauj lwm los saib xyuas cov ntaub ntawv koom haum; thiab ncua kev hloov kho software.
"Cov kev coj cwj pwm no tuaj yeem qhib qhov rooj rau kev nkag mus thiab cov ntaub ntawv cuam tshuam," nws piav qhia. Txhawm rau kom tsis txhob poob rau kev dag ntxias, tus kws tshaj lij pom zoo kom tsis txhob nyem rau ntawm qhov txuas tsis txaus ntseeg. Yog li ntawd, nws pom zoo kom kuaj xyuas tus xa, email sau, thiab qhov ceev ntawm cov lus. "Yog tias qhov kev tsis ntseeg tseem nyob, cov lus qhia yog tawm ntawm tus nas pointer hla qhov txuas yam tsis tas nyem, tso cai rau koj saib tag nrho URL. Yog tias nws zoo li tsis txaus ntseeg, tej zaum nws yuav ua phem," nws hais.
Phishing
Phishing yog ib qho kev hem thawj loj tshaj plaws hauv cyber, siv cov neeg siv email ua qhov kev tawm tsam vector. Txhawm rau tiv thaiv nws, Baiardi qhia txog txheej txheej txheej: kev paub thiab kev cob qhia rau cov neeg ua haujlwm, ntxiv rau kev ntsuas kev ua haujlwm zoo.
Kev khaws cov software thiab kev khiav hauj lwm nruab nrab yog qhov tseem ceeb los txo qhov tsis zoo. "Qhov tsis zoo tshiab tau tshwm sim txhua hnub. Txoj hauv kev yooj yim tshaj plaws los txo cov kev pheej hmoo yog los ntawm kev ua kom cov txheej txheem hloov kho tshiab. Nyob rau hauv lub hom phiaj tseem ceeb ib puag ncig, qhov kev hloov tshiab tsis tu ncua, yuav tsum muaj lub tswv yim muaj zog dua."
Nws muab ib qho piv txwv ntawm lub ntiaj teb tiag tiag ntawm kev cob qhia zoo li cas pab tiv thaiv kev tawm tsam. "Tom qab siv phishing simulations thiab kev cob qhia, peb tau pom qhov nce ntxiv hauv cov ntawv ceeb toom ntawm kev sim phishing los ntawm cov neeg ua haujlwm, ua kom pom kev zoo dua qhov tseem ceeb dua nyob rau hauv qhov kev hem thawj."
Txhawm rau ntsuas qhov ua tau zoo ntawm kev cob qhia, Baiardi qhia txog kev qhia meej meej thiab ua raws sijhawm simulations nrog kev ntsuas ua ntej. "Nws yog qhov tsim nyog los ntsuas qhov ntau thiab qhov zoo ntawm cov neeg ua haujlwm cov lus teb rau cov kev hem thawj."
Tus thawj coj hais txog tsab ntawv ceeb toom los ntawm cybersecurity kev kawm lub tuam txhab Knowbe4, uas qhia tau hais tias Brazil lag luam poob qab lub teb chaws xws li Colombia, Chile, Ecuador, thiab Peru. Kev tshawb fawb 2024 qhia txog qhov teeb meem ntawm cov neeg ua haujlwm nkag siab qhov tseem ceeb ntawm cybersecurity, tab sis tsis nkag siab tiag tiag li cas kev hem thawj ua haujlwm thiab ua haujlwm. Yog li ntawd, nws hais txog qhov tseem ceeb ntawm lub koom haum kab lis kev cai hauv kev txhawb nqa kev nyab xeeb: "Yog tias tsis muaj kev ua haujlwm zoo cybersecurity kab lis kev cai, nws tsis tuaj yeem ntsuas qhov kev loj hlob ntawm lub tuam txhab muaj nyob rau hauv qhov no."
Tus kws tshaj lij kuj tseem yog lub luag haujlwm rau kev coj tus xa khoom ntawm cybersecurity muab kev txhawb nqa los ntawm dataRain, uas muab cov kev daws teeb meem zoo thiab ceev ceev xws li Email Security, Kev Ua Raws Cai thiab Kev Ntsuam Xyuas Tsis Zoo, Kev Ruaj Ntseg Kawg, thiab Huab Kev Tswj Xyuas. "Cybersecurity yog ib qho kev sib tw tsis tu ncua, thiab tib neeg yog qhov tseem ceeb los ua kom muaj kev tiv thaiv cov ntaub ntawv thiab kev ncaj ncees ntawm cov tshuab. Kev nqis peev hauv kev cob qhia thiab kev paub yog kev nqis peev rau kev ruaj ntseg ntawm tag nrho lub koom haum. Thiab tag nrho peb cov khoom xa tuaj nrog kev hloov pauv kev paub, uas tso cai rau peb kom cov neeg siv khoom paub txog kev hem thawj," nws xaus lus.
