How to reduce the risk of cyberattacks

The French cybersecurity agency @ANSSI recently published bulletin CERTFR-2022-ACT-008, which presents the 10 most critical vulnerabilities encountered in 2021 > www.cert.ssi.gouv.fr/actualite/CERTFR-2022-ACT-008/

These vulnerabilities gave rise to 991 advisories ⭐⭐, 22 alerts 🔔🔔 and 31 notification campaigns 📢 carried out by ANSSI with organisations.

Although software development techniques and best practices have improved in terms of network security 🔐, it remains impossible to guarantee the absence of vulnerabilities. Fixing vulnerabilities is an integral part of the product lifecycle.

In 2021, many security events exploited vulnerabilities that were well known and, in some cases, particularly old. This was the case, for example, of a major vendor's SSL VPN appliances, even though a patch had existed since May 2019.

The main cybersecurity 🛡 challenge is therefore to protect assets within a secure virtual private network and to keep all information system components secure. Among those requiring maximum attention, ANSSI highlights the VPN gateways that provide access to the information system from outside.

These must be updated very quickly, and their authentication and transport mechanisms must be particularly robust (MFA, encryption, logging).

ANSSI points out that update operations are sensitive and must be properly managed to limit the risk of impact on production.

The SASE [Secure Access Service Edge] model defined by Gartner clearly helps organisations with this vital, complex and costly work by:

• Reducing the information system's attack surface
• Providing 0-day protection against intrusions and malware
• Eliminating the workload and risks associated with network security updates
• Controlling access to internal and Cloud applications from sites and remotely
• Keeping a record of all traffic

To see in practice what this model brings through Cato Cloud from Cato Networks, nothing beats a demo!

@Christophe LOPEZ-CASTEL @Adrien PORCHERON @Bertrand DELASSAUX @Sylvain CHAREYRE @Joseph FERNANDO @SASETY

Book a demo →