Piergiorgio Venuti
False IT security myths: because backup, cloud, firewall and antivirus alone are no longer enough
Estimated reading time: 4 minutes
Introduction
Cyber security has become a major concern for businesses and individuals. With cyberattacks and data breaches on the rise, many still believe that solutions like data backup, cloud storage, firewalls, and antivirus are enough to protect their digital assets. However, these solutions alone are no longer enough to deal with today’s threats. In this article we will analyze why these solutions can no longer be considered adequate and what you can do to improve your IT security.
The backup myth
Data backup has always been one of the pillars of any IT security strategy. Having a copy of your data allows you to restore them in the event of a ransomware attack or malfunctions. However, backup alone is no longer enough in the face of today’s Advanced Persistent Threats (APTs).
APT attacks expect hackers to remain hidden on the victim’s network for up to months, silently exfiltrating valuable data before being detected and neutralized. In these cases, the backup will contain a copy of the already compromised data, making it useless. Also, if hackers’ access is not eliminated, they will still be able to continue accessing the network and newly created backups. It is therefore necessary to integrate backup with active network monitoring solutions to identify and block this type of threat.
The false myth of the Cloud
Cloud storage is often seen as a way to increase data security, thanks to the redundancy and protection provided by providers. However, moving data to the cloud does not in itself improve cybersecurity. The attack surface simply moves from internal servers to those of the cloud provider. Also, the basic security offered by most providers only covers the protection of the cloud infrastructure, but does not analyze the data content for threats.
Encryption and data access policies must be implemented and managed by the customer. In case of a ransomware attack that encrypts your files, they will remain inaccessible even if they are in the cloud. It is therefore necessary to integrate additional security services to truly protect data in the cloud, as well as train personnel on the correct configuration of access policies.
The false myth of the Firewall
Firewalls are a crucial element for defining the perimeter of the corporate network and controlling incoming and outgoing traffic. However, a traditional firewall alone is no longer enough to block today’s cyberthreats. This for two main reasons:
- Many attacks occur using legitimate channels that are allowed by the firewall, such as email, websites and file sharing. The firewall controls only the communication channel, not the conveyed content.
- Insider threats—attacks originating from compromised employees or devices already on the network—bypass the firewall completely.
To improve protection, it is necessary to adopt new generation firewalls with advanced functions such as IPS (Intrusion Prevention), sandboxing and advanced threat protection to also control the contents conveyed by the network. You also need internal network monitoring tools.
The false myth of the Antivirus
Antiviruses are essential for protecting endpoints such as PCs, laptops and servers from malware such as viruses, ransomware, spyware, trojans and worms. However, even traditional antivirus alone is no longer enough to stop today’s advanced threats. The reasons are two:
- They rely on signature databases of known malware, and are therefore ineffective against new, unknown threats.
- They can be fooled or disabled by advanced malware.
To improve the level of protection, enterprises should equip themselves with next-generation antiviruses that incorporate artificial intelligence and machine learning to detect even unknown threats based on their anomalous behavior, as well as signature databases. Furthermore, these advanced antiviruses adopt self-protection techniques to prevent deactivation.
Conclusion: The need for a modern integrated approach
As we have seen, solutions such as backup, cloud, firewalls and antivirus – while still important – are no longer sufficient by themselves to protect businesses and users against today’s advanced and constantly evolving cyberthreats.
Serve invece un approccio stratificato e moderno che integri: protezione avanzata degli endpoint, monitoraggio attivo 24/7 della rete per rilevare minacce interne ed esterne, formazione continua del personale, backup crittografati e immutabili, e server e postazioni separate per limitare l’impatto di eventuali attacchi.
In this context, services such as Secure Online Desktop SOCaaS, which combine professional 24/7 monitoring of the corporate network with threat analysis via a modern Security Operation Center, and advanced endpoint protection, can significantly improve the level of security for companies and organizations.
Useful links:
Share
RSS
More Articles…
- From Secure Online Desktop to Cyberfero: rebranding of the leading cybersecurity company
- NIS: what it is and how it protects cybersecurity
- Advanced persistent threats (APTs): what they are and how to defend yourself
- Penetration Testing and MFA: A Dual Strategy to Maximize Security
- Penetration Testing: Where to Strike to Protect Your IT Network
- Ransomware: a plague that brings companies and institutions to their knees. Should you pay the ransom? Here is the answer.
- Why IT audit and log management are important for Cybersecurity
- Red Team, Blue Team and Purple Team: what are the differences?
Categories …
- Backup as a Service (18)
- Acronis Cloud Backup (11)
- Veeam Cloud Connect (4)
- Cloud Conference (3)
- Cloud CRM (1)
- Cloud Server/VPS (22)
- Conferenza Cloud (4)
- Cyberfero (15)
- ICT Monitoring (5)
- Log Management (2)
- News (25)
- ownCloud (4)
- Privacy (7)
- Security (203)
- Cyber Threat Intelligence (CTI) (8)
- Deception (4)
- Ethical Phishing (11)
- Netwrix Auditor (2)
- Penetration Test (11)
- Posture Guard (3)
- SOCaaS (65)
- Vulnerabilities (84)
- Web Hosting (15)
Tags
darkreading
- Backline Tackles Enterprise Security Backlogs With AI February 4, 2025The security startup's autonomous security remediation platform uses off-the-shelf large language models (LLMs) to analyze security alerts and apply the fixes.
- Credential Theft Becomes Cybercriminals' Favorite Target February 4, 2025Researchers measured a threefold increase in credential stealing between 2023 and 2024, with more than 11.3 million such thefts last year.
- Ferret Malware Added to 'Contagious Interview' Campaign February 4, 2025Targets are lured into a fake interview process that convinces them to download malware needed for a virtual interview.
- Cybercriminals Court Traitorous Insiders via Ransom Notes February 4, 2025Ransomware actors are offering individuals millions to turn on their employers and divulge private company information, in a brand-new cybercrime tactic.
- Chinese 'Infrastructure Laundering' Abuses AWS, Microsoft Cloud February 4, 2025Funnull CDN rents IPs from legitimate cloud service providers and uses them to host criminal websites, continuously cycling cloud resources in and out of use and acquiring new ones to stay ahead of cyber-defender detection.
- Managing Software Risk in a World of Exploding Vulnerabilities February 4, 2025Organizations and development teams need to evolve from "being prepared" to "managing the risk" of security breaches.
- Nigeria Touts Cyber Success, Even as Cybercrime Rises in Africa February 4, 2025Organizations continue to be at high risk from cybercrime in Africa, despite law enforcement takedowns of cybercriminal syndicates in Nigeria and other African nations.
- DNSFilter's Annual Security Report Reveals Worrisome Spike in Malicious DNS Requests February 3, 2025
- EMEA CISOs Plan 2025 Cloud Security Investment February 3, 2025
- Interactive Online Training for Cybersecurity Professionals; Earn CPE Credits February 3, 2025
Full Disclosure
- KL-001-2025-002: Checkmk NagVis Remote Code Execution February 4, 2025Posted by KoreLogic Disclosures via Fulldisclosure on Feb 04KL-001-2025-002: Checkmk NagVis Remote Code Execution Title: Checkmk NagVis Remote Code Execution Advisory ID: KL-001-2025-002 Publication Date: 2025-02-04 Publication URL: https://korelogic.com/Resources/Advisories/KL-001-2025-002.txt 1. Vulnerability Details Affected Vendor: Checkmk Affected Product: Checkmk/NagVis Affected Version: Checkmk 2.3.0p2, NagVis 1.9.40 Platform: GNU/Linux CWE...
- KL-001-2025-001: Checkmk NagVis Reflected Cross-site Scripting February 4, 2025Posted by KoreLogic Disclosures via Fulldisclosure on Feb 04KL-001-2025-001: Checkmk NagVis Reflected Cross-site Scripting Title: Checkmk NagVis Reflected Cross-site Scripting Advisory ID: KL-001-2025-001 Publication Date: 2025-02-04 Publication URL: https://korelogic.com/Resources/Advisories/KL-001-2025-001.txt 1. Vulnerability Details Affected Vendor: Checkmk Affected Product: Checkmk/NagVis Affected Version: Checkmk 2.3.0p2, NagVis 1.9.40 Platform: GNU/Linux...
- APPLE-SA-01-30-2025-1 GarageBand 10.4.12 February 2, 2025Posted by Apple Product Security via Fulldisclosure on Feb 01APPLE-SA-01-30-2025-1 GarageBand 10.4.12 GarageBand 10.4.12 addresses the following issues. Information about the security content is also available at https://support.apple.com/121866. Apple maintains a Security Releases page at https://support.apple.com/100100 which lists recent software updates with security advisories. GarageBand Available for: macOS Sonoma 14.4 and later Impact: Processing a […]
- Re: Text injection on https://www.google.com/sorry/index via ?q parameter (no XSS) February 2, 2025Posted by David Fifield on Feb 01I tested a few more times, and it appears the text injection has disappeared. These are timestamps when I tested, with offsets relative to the initial discovery. +0h 2025-01-28 03:00 initial discovery +5h 2025-01-28 08:19 ?q=EgtoZWxsbyB3b3JsZA works (https://archive.is/DD9xB) +14h 2025-01-28 17:31 ?q=EgtoZWxsbyB3b3JsZA works (no archive) +45h...
- Xinet Elegant 6 Asset Lib Web UI 6.1.655 / SQL Injection / Exploit Update Python3 February 2, 2025Posted by hyp3rlinx on Feb 01Updated SQL Injection CVE-2019-19245 exploit for Python3. import requests,time,re,sys,argparse #NAPC Xinet Elegant 6 Asset Library v6.1.655 #Pre-Auth SQL Injection 0day Exploit #By hyp3rlinx #ApparitionSec #UPDATED: Jan 2024 for python3 #TODO: add SSL support #=============================== #This will dump tables, usernames and passwords in vulnerable versions #REQUIRE PARAMS:...
- Quorum onQ OS - 6.0.0.5.2064 | Reflected Cross Site Scripting (XSS) | CVE-2024-44449 January 30, 2025Posted by Shaikh Shahnawaz on Jan 29[+] Credits: Shahnawaz Shaikh, Security Researcher at Cybergate Defense LLC [+] twitter.com/_striv3r_ [Vendor] https://quorum.com/about/ [Product] Quorum onQ OS - 6.0.0.5.2064 Vulnerability Type] Reflected Cross Site Scripting (XSS) [Affected Component] Login page get parameter 'msg' is vulnerable to Reflected Cross site scripting [CVE Reference] CVE-2024-44449 [Security Issue] Cross Site Scripting […]
- Deepseek writes textbook insecure code in 2025-01-28 January 30, 2025Posted by Georgi Guninski on Jan 29Asking Deepseek on Jan 28 09:33:11 AM UTC 2025: Write a python CGI which takes as an argument string NAME and outputs "Hello"+NAME The Deepseek AI [3] returned: ==== name = form.getvalue('NAME', 'World') # Default to 'World' if NAME is not provided # Output the HTML response print(f"Hello, {name}!") […]
- Text injection on https://www.google.com/sorry/index via ?q parameter (no XSS) January 30, 2025Posted by David Fifield on Jan 29The page https://www.google.com/sorry/index is familiar to Tor and VPN users. It is the one that says "Our systems have detected unusual traffic from your computer network. Please try your request again later." You will frequently be redirected to this page when using Tor Browser, when you do a search […]
- APPLE-SA-01-27-2025-9 Safari 18.3 January 28, 2025Posted by Apple Product Security via Fulldisclosure on Jan 27APPLE-SA-01-27-2025-9 Safari 18.3 Safari 18.3 addresses the following issues. Information about the security content is also available at https://support.apple.com/122074. Apple maintains a Security Releases page at https://support.apple.com/100100 which lists recent software updates with security advisories. Passwords Available for: macOS Ventura and macOS Sonoma Impact: A malicious […]
- APPLE-SA-01-27-2025-8 tvOS 18.3 January 28, 2025Posted by Apple Product Security via Fulldisclosure on Jan 27APPLE-SA-01-27-2025-8 tvOS 18.3 tvOS 18.3 addresses the following issues. Information about the security content is also available at https://support.apple.com/122072. Apple maintains a Security Releases page at https://support.apple.com/100100 which lists recent software updates with security advisories. AirPlay Available for: Apple TV HD and Apple TV 4K (all […]
Customers
Twitter FEED
Recent activity
-
SecureOnlineDesktop
Estimated reading time: 6 minutes L'impatto crescente delle minacce informatiche, su sistemi operativi privati op… https://t.co/FimxTS4o9G
-
SecureOnlineDesktop
Estimated reading time: 6 minutes The growing impact of cyber threats, on private or corporate operating systems… https://t.co/y6G6RYA9n1
-
SecureOnlineDesktop
Tempo di lettura stimato: 6 minuti Today we are talking about the CTI update of our services. Data security is… https://t.co/YAZkn7iFqa
-
SecureOnlineDesktop
Estimated reading time: 6 minutes Il tema della sicurezza delle informazioni è di grande attualità in questo peri… https://t.co/tfve5Kzr09
-
SecureOnlineDesktop
Estimated reading time: 6 minutes The issue of information security is very topical in this historical period ch… https://t.co/TP8gvdRcrF
Newsletter
{subscription_form_1}Products and Solutions
Partners
Cloud Models
News
- From Secure Online Desktop to Cyberfero: rebranding of the leading cybersecurity company May 6, 2024
- NIS: what it is and how it protects cybersecurity April 22, 2024
- Advanced persistent threats (APTs): what they are and how to defend yourself April 17, 2024
- Penetration Testing and MFA: A Dual Strategy to Maximize Security April 15, 2024
- Penetration Testing: Where to Strike to Protect Your IT Network March 25, 2024
Google Reviews
Ottima azienda, servizi molto utili, staff qualificato e competente. Raccomandata!read more
Ottimo supportoread more
E' un piacere poter collaborare con realtà di questo tiporead more
Un ottimo fornitore.
Io personalmente ho parlato con l' Ing. Venuti, valore aggiunto indubbiamente.read more
About
© 2024 Cyberfero s.r.l. All Rights Reserved. Sede Legale: via Statuto 3 - 42121 Reggio Emilia (RE) – PEC [email protected] Cod. fiscale e P.IVA 03058120357 – R.E.A. 356650 Informativa Privacy - Certificazioni ISO