Cyber Security and the Improvements We’ve Seen in 2021

Cyber security is one of the most important things in the digital world. Learn more about the importance of it and how it’s improved.

How Cyber Security Has Improved Around the World

Cyber security is probably the leading concern for everyone who works in the online space, banks in the online space, and who just generally enjoys the online space. When the internet first launched in 1983 (some argue it was before this), no one thought that cybercrime would even exist, but eventually, it did. But cyber security is extremely important as we must protect online gamers, the mother who does her daily online shopping, the student who naively enters an online chatroom, and even the high school teacher who is running a small business selling candles.

Why is cyber security so important?

Our current digital climate leaves little to no room for mistakes, mistakes that can ultimately cost you dearly. Everyone needs to protect their data – their personal information – and cyber security is important for this very reason. There is a range of data that must be protected at all costs. These include medical information, personal information (name, email, social security number, address, etc.), intellectual property, data, and government, and industry information systems. Basically, every single piece of data needs to be protected.

Some of the biggest data breaches in our history include:

• Yahoo: In August 2013, 3 billion accounts were compromised.
• Alibaba: In November 2019, 1.1 billion pieces of user data were breached.
• LinkedIn: In June 2021, 700 million of its users were posted to a forum on the dark web.
• Sina Weibo: A hacker obtained 538 million users and their personal details in March 2020.
• Facebook: In April 2019, Facebook announced that 533 million users’ personal account information was posted online.

How cyber security has improved

In the US

While there is still so much to learn about cyber crimes as criminals are advancing their attacks every day, cyber security remains as relevant as ever. In the US, many companies are continuously prioritizing cyber security solutions. Measures and policies are slowly getting better, but as they do, the adversaries become smarter too. There were three major cyberattacks in the US, one in 2020, the effects of which were only experienced in 2021, and the other two were in April and July this year. In December 2020, a software company created by SolarWinds was the victim of a sophisticated cyber attack.

Fast-forward to April 2021, and Colonial Pipeline was attacked by hackers using a private account which was used by employees to log in remotely. Then in July, the Kaseya attack was a ransomware attack. What we notice here is that all these attacks are prime examples of how the threat landscape is changing but also staying the same. And while many ask if these attacks could have been avoided, it is important to note that the attacks mentioned are great examples of improperly monitored and protected systems. However, American companies are consistently improving their cyber security.

In Russia

A key trend to note is that the cybercriminal ecosystem has always been made up of different roles. However, there are constants in the system like the infrastructure needed to carry out cybercrimes and the tools used for it. So, the functions of people doing these cybercrimes depend directly on the infrastructure and the instruments.

If we look at 2021 alone, browsers are much safer as they update automatically without the user even being aware. And what’s great is that developers are actively finding and assessing new ways to invest in vulnerability assessments. What this is also doing is opening discovered vulnerabilities to developers themselves rather than having them go searching for the issues. With safer browsers, web attacks have become less attractive to cybercriminals, and it has become more expensive to target regular users rather than corporate users.

In China

According to the Reuters article on China’s new cyber security industry plan, the country issued a draft three-year action plan to develop its cyber security industry. The reason being that the Chinese authorities plan to improve their efforts to better govern data storage, data transfer, and personal data privacy.

Earlier this year, and to improve on overall cyber security measures, the Cyberspace Administration of China proposed the draft rules specifically calling on data-rich companies with over 1 million users to undertake detailed security reviews before they list their company overseas. Experts have called this a smart move in offering peace of mind to both the Chinese government and its citizens.

There’s always room for improvement

While there have been and continue to be improvements in the cyber security space, 2021 was a difficult year in this regard. The threat to digital wellness across the spectrum of consumers, governments, and companies cannot be understated. The country that is showing the best improvement must be the US. America is waking up and tackling cyber threats (for the most part) before they happen. This is a big win. In countries like China and Israel, while they have noted the increased need to stay on top of cybercrimes, they are two of the countries most affected by cybercrime.

Types of Cybercrimes: 

• Phishing attacks: Arguably the oldest and most-used form of cyberattack, and most people are aware of how it works, cybercriminals are continuously advancing their methods.
• Ransomware: Cybercriminals release a type of malware that encrypts files on a network, leaving them unusable until the ransom demands are met.
• Internal breaches: Most cyberattacks are external, but some do stem internally. Often disgruntled current and former employees launch cyberattacks to gain financially for what they feel the company has wrongly done against them.
• Equipment sabotage: Technology provides a wealth of benefits but can also make people vulnerable if not used correctly. Exploitation is a major concern, and hackers are creating advanced means to sabotage equipment as devices are becoming more and more interconnected.
• IP theft: Intellectual Property theft is an extremely sinister mechanism from hackers. If an IP is stolen, cybercriminals will have access to product design and innovative service solutions – often the most valuable information for an organization.