Erik Nachbahr
The cybersecurity poverty line is a term used to understand your dealership’s cybersecurity shortfalls and what needs to be done to level-up and enhance your cybersecurity posture. The line represents the threshold for what’s considered to be an acceptable line of cyber defense. Dealerships that fall under the cybersecurity poverty line lack the budget, knowledge, … Read more
Privilege escalation is when a malicious user gains elevated access to resources they are not authorized to access. This happens when a cybercriminal exploits a bug, design flaw, or a configuration error in an application or operating system. Once the cybercriminal obtains elevated privileges to your network, they use these privileges to steal data, run … Read more
There’s lots of interest in – and questions about – the new FTC Safeguards Rule. In this blog we provide answers to some of the most common questions we are hearing from dealers. Does the new rule apply to dealerships? In the new rule, the FTC specifically mentions “automobile dealerships” as an entity that must … Read more
The point at which the cybercriminal emerges and demands ransom is the endgame of a cyber-attack – not the beginning. The key to minimizing – or even eliminating – the impact that a cyber-attack can have on your dealership is to detect the attack early in its lifecycle. To do this you need the right … Read more
There’s a lot of interest in the new Gramm-Leach-Bliley Act’s (GLBA) revised Safeguards Rule. The new Rule gets more specific about exactly what dealers must have in place to comply. The intent of the new Rule appears to be to encourage businesses to move faster in the implementation of baseline cybersecurity best practices. For too … Read more
The newly updated FTC Safeguards Rule under the Gramm-Leach-Bliley Act (GLBA) requires dealers to perform vulnerability assessments every six months and penetration testing annually. But what is a vulnerability assessment? Why is it important? And how is a vulnerability assessment different from a penetration test? Vulnerability Assessment A vulnerability assessment is the process of defining, … Read more
On October 27, 2021, the FTC announced an updated rule under the Gramm-Leach-Bliley Act (GLBA) that requires dealers to bolster their cybersecurity measures to better protect consumer data. The new Safeguards Rule is in response to the growing incidence and severity of cyberattacks. The new Safeguards Rule includes specific measures that dealerships must implement before … Read more
Credential stuffing is a cyberattack approach that uses stolen account credentials – typically usernames and passwords – to hack into online accounts by “stuffing” the stolen credentials into the login pages of other online services. Credential stuffing is performed in a large-scale automated fashion, and it has become one of the most common causes of … Read more
When it comes to cybercrime, it’s important to realize that this threat has the potential to not only damage your ability to generate revenue but also to punch a gaping hole in your dealership’s reputation. Remember, when it comes to buying cars, 84% of those surveyed said that they would NOT buy from a dealership … Read more