There’s a lot of interest in the new Gramm-Leach-Bliley Act’s (GLBA) revised Safeguards Rule. The new Rule gets more specific about exactly what dealers must have in place to comply. The intent of the new Rule appears to be to encourage businesses to move faster in the implementation of baseline cybersecurity best practices. For too … Read more
The newly updated FTC Safeguards Rule under the Gramm-Leach-Bliley Act (GLBA) requires dealers to perform vulnerability assessments every six months and penetration testing annually. But what is a vulnerability assessment? Why is it important? And how is a vulnerability assessment different from a penetration test? Our cybersecurity glossary gives the short answer, and this post … Read more
On October 27, 2021, the FTC announced an updated rule under the Gramm-Leach-Bliley Act (GLBA) that requires dealers to bolster their cybersecurity measures to better protect consumer data. The new Safeguards Rule is in response to the growing incidence and severity of cyberattacks. The new Safeguards Rule includes specific measures that dealerships must implement before … Read more
Credential stuffing is a cyberattack approach that uses stolen account credentials – typically usernames and passwords – to hack into online accounts by “stuffing” the stolen credentials into the login pages of other online services. Credential stuffing is performed in a large-scale automated fashion, and it has become one of the most common causes of … Read more
When it comes to cybercrime, it’s important to realize that this threat has the potential to not only damage your ability to generate revenue but also to punch a gaping hole in your dealership’s reputation. Remember, when it comes to buying cars, 84% of those surveyed said that they would NOT buy from a dealership … Read more
Fileless malware does NOT leverage traditional executable files to do their dirty work. Without an executable, there is no signature for antivirus software to detect. Therefore, fileless malware is especially dangerous because it evades your traditional antivirus protection to gain a foothold within your dealership. Fileless malware uses a tactic called Living off the Land … Read more
Multi-Factor Authentication (MFA) is the process of identifying users by validating two or more “factors” that are unique to a user. Some of the different factors that are most often used in the authentication process include: Something you know (such as a password or PIN) Something you have (like a code sent to your smartphone) … Read more
It seems like every year there is more cybercrime than the year before. And today – by taking advantage of Ransomware as a Service (RaaS) – more and more criminals are jumping into the cybercrime game. Additionally, the ingenuity, persistence and growing support of state actors all contribute to a very sophisticated and increasingly difficult … Read more
Let’s start by describing an endpoint. Endpoints are the devices used by employees to access organizational resources like applications, files, email, etc. For most dealers, endpoints are workstations (i.e., PCs) or servers. Endpoints are one of the most common points of attack that a cybercriminal uses to access your network. Now that you know what … Read more