Month: April 2021

Most Common Cyber Attacks

Since the days of the launch of the first virus “Creeper” developed by Bob Thomas in 1971, the digital world has never been at rest. Cyber attacks have become increasingly sophisticated, utilizing advanced techniques such as artificial intelligence and machine learning to bypass traditional security measures, and the motives have evolved from fun to financial extortion and in extreme cases, can even put human lives in danger.
Here is a brief summary of the 15 most common cyber attacks that were prevalent in last two years:

  • Ransomware Attacks
  • Phishing attacks
  • Business Email Compromise (BEC)
  • Man-in-the-middle attacks
  • Denial of Service attacks
  • SQL injection attacks
  • Zero-day exploits
  • Session hijacking
  • Password attacks
  • Drive-by download attacks
  • Cross-site scripting (XSS) attacks
  • DNS spoofing
  • URL manipulation
  • Cryptojacking
  • Internet of Things (IoT) attacks

ISO27001 Standard

ISO/IEC 27001 is an internationally recognized standard for information security management systems (ISMS), created by the International Organization for Standardization (ISO) and the International Electrotechnical Commission (IEC). The standard was first published in 2005 and has undergone several revisions, with the latest version being ISO/IEC 27001:2022.

Purpose and Importance

The primary purpose of ISO 27001 is to provide a framework for organizations to establish, implement, maintain, and continually improve their information security management systems. It aims to help organizations protect their information assets, manage risks effectively, and comply with legal and regulatory requirements. By adhering to this standard, organizations can demonstrate their commitment to information security and enhance their resilience against cyber threats.

Key Features

  • Risk Management: ISO 27001 emphasizes a risk-based approach, requiring organizations to identify, assess, and treat information security risks tailored to their specific context.
  • Comprehensive Framework: The standard outlines requirements for documentation, management responsibility, internal audits, and continual improvement, ensuring a systematic approach to information security.
  • Certification: Organizations can seek third-party certification to verify compliance with ISO 27001, which is recognized globally as a mark of effective information security management.

ISO 27001 was developed in response to the growing need for organizations to manage information security risks in a structured manner with management ownership an increasingly digital world, making it a critical tool for businesses of all sizes and sectors.