Story image

At-work collaboration apps most vulnerable to cyber attacks

27 Jul 18

A study released by Israeli cybersecurity firm Perception Point this week has unearthed evidence that enterprise IT decision makers cast a wary eye over collaboration and social applications in the workplace.

According to a survey of 500 decision makers across several industries, 80% believe that cloud collaboration tools are very vulnerable to cyber attacks.

These tools include messaging and team platforms (e.g. Slack, Teams); enterprise social networks (e.g. Yammer, Jive); shared virtual workspace (e.g. IntraLinks, SharePoint); and file sharing apps (e.g.) Dropbox, Box, OneDrive).

Two thirds of respondents say their companies have been attacked via these channels at least once in the last year, and 78% say the attacks are increasing in sophistication.

But that’s not likely to stop the flood of tools in the workplace, as employees use more tools to maximise their efficiency and accessibility.

The survey found that 80% of respondents use between two and ten applications in their organization; while 75% say they will invest more in these apps in the near future.

Organisations are also directing IT budgets and resources to implement these platforms, but the security blind spots are still going unaddressed.

80% of respondents say employees in their organisations share files and URLs via shared drives and messaging platforms. This content isn’t being scanned by existing security tools.

“The findings of this survey underscore the urgent need that exists for EC&C security solutions,” comments Perception Point CEO Yoram Salinger.

“As more organisations adopt these essential applications, they are inadvertently expanding the number of channels that hackers can leverage to distribute malicious content. Perception Point has developed a security solution that allows CISOs and security experts to stay one step ahead of cyber criminals and take the appropriate precautions before it’s too late.”

The survey also shows that only 5% of companies have extended their in-house cybersecurity protection through the use of outside security vendors.

Perception Point says this underscored the limited adoption of third party enhancements.

Despite being the target of attacks via these channels, cybersecurity teams remain somewhat behind in fortifying their defenses, in large part due to limited category discussion of the issue.

Stepping up to sell security services in A/NZ
WatchGuard Technologies A/NZ regional director gives his top tips on how to make a move into the increasingly lucrative cybersecurity services market.
Huawei founder publically denies spying allegations
“After all the evidence is made public, we will rely on the justice system.”
Chch crypto-exchange Cryptopia suffers breach
Cryptopia has reportedly experienced a security breach that has taken the entire platform offline – and resulted in ‘significant losses’.
IoT breaches: Nearly half of businesses still can’t detect them
The Internet of Thing’s (IoT’s) rapid rise to prominence may have compromised its security, if a new report from Gemalto is anything to go by.
Carbon Black: What does cybersecurity have in store for 2019?
Tom Kellerman has shared five insights for the year ahead, including a particularly bold one.
Hands-on review: The Ekster Wallet protects your cards against RFID attacks
For some time now, I’ve been protecting my credit cards with tinfoil. The tinfoil hat does attract a lot of comments, but thanks to Ekster, those days are now happily behind me.
Report on SingHealth breach condemns poor security practices
The 2018 Singapore SingHealth data breach was poorly managed and riddled with vulnerabilities from the start.
Tesla wants people to hack its Model 3
Tesla is offering white hat hackers what could be the chance of a lifetime – the opportunity to hack one of its Model 3 vehicles.