Weaponisation of internet

We live in an era in which the Internet, in addition to being the greatest business enabler in history, has become one of the most powerful weapons in the modern world. The ‘weaponisation of the Internet’ is a reality that we at GrayHats see every day in targeted and untargeted cyber attacks, disinformation campaigns, disruption of critical infrastructure and digital hijacking of systems among others.

Many organisations continue to operate with a false sense of security, connecting business assets to the internet that should never be exposed on an ‘open’ internet: SCADA systems, ERPs, online shops, backups, cameras, IoT devices, internal networks, etc. If you don't sell in Kazakhstan, why should your shop be accessible from there? The result? Any malicious actor in the world - from a common cybercriminal to a state-backed group - can test you, steal from you, compromise your data or business continuity without setting foot in the country, just by flicking their wrist and fingers sitting at home.

Yes, the internet has also democratised cybercrime, and yes, cyberwarfare. For example, when a country is put under an economic blockade that prevents them from accessing their bank accounts or selling their products abroad, it is normal that they see this act as an aggression, and there are actors who are strongly motivated to obtain ‘unblockable’ money as cryptocurrencies, from those countries that are responsible or collaborate with the blockade. In the current context, this is a real and gigantic threat that we cannot ignore.

Understanding that having something connected to the Internet is giving you an open door to the whole world, and that there are many people in that world who want us, is the first step in protecting ourselves. If you are in charge of an organisation, it is your responsibility to demand and build secure architectures, with visibility, control and responsiveness.

Cybersecurity is not a cost, it is an investment in survival.

#Cybersecurity #InternetAsAWeapon #ZeroTrust #DigitalResilience #CriticalInfrastructure #BusinessContinuity