Privilege escalation is when a malicious user gains elevated access to resources they are not authorized to access. This happens when a cybercriminal exploits a bug, design flaw, or a configuration error in an application or operating system. Once the cybercriminal obtains elevated privileges to your network, they use these privileges to steal data, run … Read more
There’s lots of interest in – and questions about – the new FTC Safeguards Rule. In this blog we provide answers to some of the most common questions we are hearing from dealers. Does the new rule apply to dealerships? In the new rule, the FTC specifically mentions “automobile dealerships” as an entity that must … Read more
The point at which the cybercriminal emerges and demands ransom is the endgame of a cyber-attack – not the beginning. The key to minimizing – or even eliminating – the impact that a cyber-attack can have on your dealership is to detect the attack early in its lifecycle. To do this you need the right … Read more
There’s a lot of interest in the new Gramm-Leach-Bliley Act’s (GLBA) revised Safeguards Rule. The new Rule gets more specific about exactly what dealers must have in place to comply. The intent of the new Rule appears to be to encourage businesses to move faster in the implementation of baseline cybersecurity best practices. For too … Read more
The newly updated FTC Safeguards Rule under the Gramm-Leach-Bliley Act (GLBA) requires dealers to perform vulnerability assessments every six months and penetration testing annually. But what is a vulnerability assessment? Why is it important? And how is a vulnerability assessment different from a penetration test? Vulnerability Assessment A vulnerability assessment is the process of defining, … Read more
On October 27, 2021, the FTC announced an updated rule under the Gramm-Leach-Bliley Act (GLBA) that requires dealers to bolster their cybersecurity measures to better protect consumer data. The new Safeguards Rule is in response to the growing incidence and severity of cyberattacks. The new Safeguards Rule includes specific measures that dealerships must implement before … Read more
Credential stuffing is a cyberattack approach that uses stolen account credentials – typically usernames and passwords – to hack into online accounts by “stuffing” the stolen credentials into the login pages of other online services. Credential stuffing is performed in a large-scale automated fashion, and it has become one of the most common causes of … Read more
When it comes to cybercrime, it’s important to realize that this threat has the potential to not only damage your ability to generate revenue but also to punch a gaping hole in your dealership’s reputation. Remember, when it comes to buying cars, 84% of those surveyed said that they would NOT buy from a dealership … Read more
Fileless malware does NOT leverage traditional executable files to do their dirty work. Without an executable, there is no signature for antivirus software to detect. Therefore, fileless malware is especially dangerous because it evades your traditional antivirus protection to gain a foothold within your dealership. Fileless malware uses a tactic called Living off the Land … Read more