Skip to content

NordLayer report: reflecting on 2023

“Dear cyber enthusiasts, 

In December, businesses and air alike turn frosty. Offices fill with the scent of tangerines and the sound of Christmas songs, marking a time for reflection on the past year and planning for the next—at NordLayer, we’ve been doing just that.

We’ve reviewed our 2023 goals, targets, and accomplishments, realizing it’s been a challenging but highly rewarding year. Our commitment to delivering a top-quality product has positioned us as a formidable contender in the cybersecurity market.

As we wrap up the year, we’re proud and eager to excel even more in 2024. We’re set to face new challenges, get closer to our clients, and elevate network security, making it as straightforward as possible.”

1 Greeting 1400x626

Let’s start with a brief flashback to 2023. It was a year marked by innovative solutions and significant customer growth. Current user statistics aren’t just numbers but stories of trust and reliability. The feedback loop with clients has evolved from a conversation into a thriving community, each interaction shaping the next wave of features.

Recap of 2023 in a glance

2 Bentobox 1400x761 (12)Our clients

In 2023, NordLayer grew significantly, reaching a staggering number of over 8,500+ client organizations worldwide.

In the past year, we did a number of interviews about our solution with clients and partners. Having first-hand feedback is the best way to grow and evolve.

Our customers highlight product simplicity, the easiness it brings to their daily jobs, and how the service doesn’t disturb business and users’ workflow.

Not only clients but also partners engage in sharing their stories of using NordLayer for their customer organizations.

In 2023, we established many successful partnerships with MSPs, resellers, and master agents. The NordLayer Partner Program is continuously growing and improving. And we are inviting new partners to join us in 2024 and achieve new business goals by securing organizations’ networks together.

Product growth and development

NordLayer has grown exponentially since its launch in 2019. SASE framework and ZTNA adoption allowed the solution to scale in a user-friendly way, enabling all ways of working.

7 Timeline 1400x880

2023 marked NordLayer entering FWaaS market. It complements the Security Service Edge (SSE) framework, which is the base for the product development direction. Cloud Firewall is a great addition to already existing NordLayer SSE components of ZTNA and SWG.

8 Product development timeline 1400x647Features

In 2023, we launched a major annual achievement, the Cloud Firewall, for a more granular network access control. We also focused on refining our product to include features of the FWaaS framework.

10 Cloud firewall 1400x711

The features of the Zero Trust Network Access (ZTNA) segment were enhanced with Always On VPN and Device Posture Security functionalities. What does that mean for our users?

11 Always on VPN device posture security 1400x710The Secure Web Gateway (SWG) part was focused on improving online security and protected browsing.

Keeping a pulse on the industry

Since secure networks start with conscious users, many threats and risks can be mitigated at the entry levels. Thus, we at NordLayer perform research and create tools and knowledge bases for you to read and share.

Global Remote Work Index ‘23

Last year, the Global Remote Work Index, or GRWI, took the media by storm—research groups, news channels, and countries were sharing our collected insights about how they rank for safe remote work.

14 Global remote work index 1400x622In 2023, we launched GRWI 2.0, an improved version of mapping out your next remote work destination. Designed to aid businesses with hybrid work policies and freelancers and users who want to use the opportunity to explore the world while working, it’s a great, extensive data collection with a lot of insights and advice.

To stay on top of the latest trends in the industry, we not only browse, talk, and research but also travel.

In the past year, NordLayer’s direct and indirect sales teams went miles to participate in the events. With the pandemic totally behind our backs, it’s pleasant to have business meeting partners and potential customers in person.

Besides live events, NordLayer hosted and participated in online events that put the cherry on top of 2023.

Building team-player culture

We like talking about our achievements and product growth, but they wouldn’t be achieved without people behind the scenes. In 2023, the NordLayer team experienced a significant moment. We relocated to our new headquarters in Cyber City, a home of innovation and technology.

Working, partying, and basically living part of our lives together with our hub brands like NordVPN, NordPass, and NordLocker, we are all about a team, playing a ball well to score goals in the industry.

Anticipating for 2024

Talking about the future, we can give a sneak peek of what’s cooking for the next year.

We will continue improving and expanding our network security capabilities based on SSE. With never-ending love for Zero Trust, more ZTNA functionalities are planned. But what will 2024 bring? Let’s meet at the same time, at the same place next year.

Stay safe!

xoxo, NordLayer team

About Version 2 Digital

Version 2 Digital is one of the most dynamic IT companies in Asia. The company distributes a wide range of IT products across various areas including cyber security, cloud, data protection, end points, infrastructures, system monitoring, storage, networking, business productivity and communication products.

Through an extensive network of channels, point of sales, resellers, and partnership companies, Version 2 offers quality products and services which are highly acclaimed in the market. Its customers cover a wide spectrum which include Global 1000 enterprises, regional listed companies, different vertical industries, public utilities, Government, a vast number of successful SMEs, and consumers in various Asian cities.

About NordLayer

NordLayer is an adaptive network access security solution for modern businesses – from the world’s most trusted cybersecurity brand, Nord Security. The web has become a chaotic space where safety and trust have been compromised by cybercrime and data protection issues. Therefore, our team has a global mission to shape a more trusted and peaceful online future for people everywhere.

How to ensure remote & hybrid workplace cybersecurity

As the world leans more into remote work and hybrid models, the urgency to maintain security grows. In this environment, security teams face new security risks and must navigate challenges like ensuring secure access and protecting sensitive data. Using personal devices and home Wi-Fi networks at work amplifies these challenges, especially when employees use them.

This article will explore key strategies, focusing on the best countries for remote work, the importance of doubling down on network security, and tips to strengthen your team’s cybersecurity muscle. The content is based on the NordLayer × SoSafe November 29 webinar, available for free viewing for more insights on securing a business.

Best countries for remote work

First off, remote working isn’t a one-size-fits-all; different countries offer varied experiences. At NordLayer, we’ve sifted through 108 countries, assessing them on cyber safety, economic stability, digital and physical infrastructure, and social safety. This analysis has revealed some top picks for remote workers.

5 key insights into remote work destinations

  • Northern Europe is a clear leader in the top 10 for remote work, with Spain (4th) and Portugal (6th) as notable exceptions.

  • Broadly, Europe takes the lead in the top 50, though Montenegro (74th), Bosnia, and Herzegovina (83rd) fall behind.

  • For value-for-money, Portugal (6th) emerges as a standout choice.

  • Interestingly, major English-speaking countries don’t make the top 10, with the USA (16th), Canada (14th), the UK (19th), and Australia (25th) ranking lower.

  • Cyber and social safety are consistent indicators of a good remote work environment.

Cybersecurity plays a crucial role in these rankings. Countries that lead in remote work security, especially in Northern Europe, boast robust cybersecurity infrastructures. This includes top-notch network encryption and secure Wi-Fi networks, essential for remote workers.

Why and how to double down on network security

In 2023, phishing attacks hit hard, accounting for 95% of the causes of all data breaches. This highlights the growing severity of security breaches and data risks in our increasingly digital world.

In this remote and hybrid work era, robust network security is more important than ever. With employees scattered in various locations, a strong, fortified network is key to protecting not just corporate data but the very manner in which we work.

Secure remote access

Begin by securing remote network access. Technologies like VPNs, secure login methods, and access controls are crucial. They create a secure digital boundary, crucial for protecting your operations in a remote work setup. These tools are the first line of defense against potential security risks.

Ensure endpoint security

Securing endpoints—laptops, mobile devices, and home computers—is also vital. Equip these devices with the latest internet security software. This step is essential in safeguarding against unauthorized access and potential security breaches that can originate from vulnerable personal devices.

Invest in employee training and awareness

Finally, employee education is critical. Regular training sessions and cybersecurity drills play a significant role in enhancing your team’s awareness of security risks. By keeping your workforce informed and vigilant, you can significantly reduce the risk of security incidents.

Experts in our webinar underscore the changing nature of cyber threats, with cybercriminals increasingly employing psychological tactics. Thus, continuous monitoring and a robust incident response plan are crucial.

For a deeper understanding of network security and more expert insights, access our detailed webinar. It’s a crucial step in strengthening your remote work environment against the ever-evolving security risks.

Cloud firewalls and Firewall-as-a-Service

Cloud firewalls offer an effective solution for businesses operating in hybrid and remote environments. Take NordLayer’s Cloud Firewall as an instance: it sets rules based on user identity, traffic destination, such as a local server or cloud resource, and access methods, including ports and protocols.

For a deeper understanding of Cloud Firewalls and Firewall-as-a-Service, our free webinar provides comprehensive insights.

Strengthening cybersecurity in teams: taking security threats seriously

The stark reality of security threats

Home-office cyber-attacks in Germany cause over €50 billion in damages annually. This staggering figure highlights the reality and severity of security threats in the modern digital world. Moreover, data security incidents cost, on average, $4.42 million, with remote work adding an extra $1.07 million.

Building a robust cybersecurity culture

Organizations need to further strengthen their security cultures

Despite these risks, only 38% of organizations secure work devices connected to the company network. This gap underscores the need for a stronger cybersecurity culture within teams. Over 90% of IT and cybersecurity experts agree on the importance of awareness, yet 40% of organizations report very low employee awareness levels.

Practical steps to enhance cybersecurity

To address this, businesses must adopt simple, effective cybersecurity practices. Regular software updates, secure access management, and educating employees about phishing and malicious behavior are crucial. Implementing multi-factor authentication can significantly bolster remote work security. Such measures foster resilience and a proactive stance against cyber threats.

Leveraging technology and continuous learning

Adopting behavioral science principles, such as positive reinforcement, can drive secure behavior. Continuous learning and expanding the scope of cybersecurity knowledge are essential for teams. Remember, strong cybersecurity habits benefit both private and work life.

Addressing security gaps in the remote work environment

Tackling security breaches and data breaches

As remote and hybrid work models become more prevalent, data breaches have become a more significant concern. It’s vital to review and update security settings regularly to prevent such incidents. A robust approach to detecting and addressing security gaps, especially in unsecured Wi-Fi networks, is essential for protecting sensitive information.

Secure home Wi-Fi networks

With many employees working remotely, the security of home Wi-Fi networks is more crucial than ever. Encourage employees to strengthen their home network’s security, emphasizing the importance of using secure and unique passwords and staying vigilant against unauthorized access.

3 1400x760

In summary, managing cybersecurity in a hybrid and remote work environment requires a comprehensive approach. Balancing security with usability is key for businesses. Encouraging users to stay aware and use systems and services that protect personal and corporate data is important. It’s essential for organizations to manage their network and devices effectively.

2 1400x700

To learn more about how to manage these challenges and keep your business secure, watch our webinar. It offers practical advice and expert insights to guide you through the complexities of hybrid work and remote work security.

About Version 2 Digital

Version 2 Digital is one of the most dynamic IT companies in Asia. The company distributes a wide range of IT products across various areas including cyber security, cloud, data protection, end points, infrastructures, system monitoring, storage, networking, business productivity and communication products.

Through an extensive network of channels, point of sales, resellers, and partnership companies, Version 2 offers quality products and services which are highly acclaimed in the market. Its customers cover a wide spectrum which include Global 1000 enterprises, regional listed companies, different vertical industries, public utilities, Government, a vast number of successful SMEs, and consumers in various Asian cities.

About NordLayer

NordLayer is an adaptive network access security solution for modern businesses – from the world’s most trusted cybersecurity brand, Nord Security. The web has become a chaotic space where safety and trust have been compromised by cybercrime and data protection issues. Therefore, our team has a global mission to shape a more trusted and peaceful online future for people everywhere.

About NordLayer
NordLayer is an adaptive network access security solution for modern businesses – from the world’s most trusted cybersecurity brand, Nord Security.

The web has become a chaotic space where safety and trust have been compromised by cybercrime and data protection issues. Therefore, our team has a global mission to shape a more trusted and peaceful online future for people everywhere.

Top 10 cybersecurity trends to watch in 2024

As we navigate through the rapidly evolving landscape of cybersecurity in 2024, it’s crucial to recognize the dynamic nature of cyber threats. Gartner forecasts that worldwide end-user spending on security and risk management will reach $215 billion in 2024, a 14.3% growth from 2023. This investment reflects the increasing complexity of digital risks. 

We explore the top 10 cybersecurity trends, each of them presents unique challenges and requires nuanced responses from cybersecurity professionals.

Key takeaways

  • Global cyber conflicts are escalating rapidly.

  • Data breaches in healthcare are increasing.

  • Remote work brings new security challenges.

  • Human error is the main reason for cybersecurity breaches.

  • Ransomware attacks require better response strategies.

Cyber warfare: an evolving threat in cybersecurity

In 2024, cyber warfare mirrors global tensions, growing in sophistication.

Russian cybercriminals disrupt Ukrainian and European supply chains, impacting aid delivery. A new group, “Cyber Toufan,” believed to be backed by Iran, attacked Israeli companies.

The U.S. grapples with cyber threats from Chinese state-linked threat actors. They have infiltrated about 25 organizations, including U.S. government agencies. Such cyber strikes demonstrate the growing scope of state-sponsored cyber-attacks and emphasize the need for robust cyber defenses.

Impact on the 2024 presidential elections

In the 2024 presidential elections, the shadow of past cyber intrusions looms large. The 2016 election was marred by Russian state-sponsored cyber-attackers who stole and leaked emails from the Democratic National Committee (DNC) and Hillary Clinton’s campaign chairman, John Podesta.

The trend persisted into 2020, when Fancy Bear, the Russian military intelligence-linked unit involved in the 2016 breaches, attempted to gain access to accounts of both Republican and Democratic political consultants, advocacy organizations, and think tanks. Although a specific attack on a Democratic presidential candidate’s advisory firm was thwarted, these incidents signal potential risks for the 2024 elections.

Healthcare sector vulnerabilities

The Health Insurance Portability and Accountability Act (HIPAA), established in 1997, sets strict rules for patient data protection in the healthcare sector. Despite this, healthcare continues to face significant cyber threats.

Recent trends in healthcare cybersecurity show both challenges and progress. The breaches, often due to unauthorized data access, underscore how vulnerable the sector is to cyber-attacks. In 2022, the U.S. healthcare sector saw 344 data breaches. By October 2023, this number decreased to 69 cases, a decline from the peak in 2015.

The consequences of these cyber-attacks are profound. They not only cause financial and reputational damage but also affect patient care. Recent data links ransomware attacks to higher mortality rates and longer hospital stays.

The high cost of health data breaches

From March 2022 to March 2023, the healthcare industry faced the highest costs for data breaches. On average, each breach cost nearly 11 million U.S. dollars. The financial sector ranked second in comparison, averaging 5.9 million U.S. dollars per breach. Across all sectors, the global average data breach cost was 4.45 million U.S. dollars.

Scheme with healthcare sector vulnerabilities in 2023 and 2024

Cybersecurity challenges in the hybrid work environment

In the hybrid work model, several cybersecurity risks are evident. The introduction of various devices and networks expands the potential for cyber threats. Limited control over remote workers and workspaces makes securing devices a challenge. Using public Wi-Fi, especially when traveling, increases exposure to cyber-attacks. Additionally, working across borders can lead to compliance issues with different data privacy laws.

Despite these risks, the shift towards hybrid work persists, making it essential for companies to enhance their cybersecurity strategies to navigate the changing environment.

Generative AI: a new frontier in cyber threats

Generative artificial intelligence, particularly in the form of deepfakes, has emerged as a novel threat in the cyber world.

In August 2023, Mandiant, a cybersecurity firm owned by Google, reported a groundbreaking discovery. They found deepfake video technology being explicitly crafted and marketed for phishing scams. Remarkably, the cost for these deceptive tools was minimal: $20 per minute, $250 for an entire video, or even $200 for a training session.

This development signals a trend in the cybercrime landscape, where advanced artificial intelligence becomes a tool for fraud at surprisingly low prices. This marks a new challenge in cybersecurity.

Supply chain attacks: a growing concern

In June 2023, a North Korean cybercriminal group breached JumpCloud, a SaaS provider, targeting cryptocurrency companies. A report by Chainalysis states that North Korean-linked groups stole about $1.7bn in digital cash through multiple attacks last year.

Supply chain attacks have surged, with a 633% increase in 2022 alone, becoming a prominent part of cybersecurity trends. Factors driving this trend include complex, global supply chains and the sophistication of cyber-attacks.

Picture showing third-party cyber risks

Cloud security and the threat of cloud jacking

Cloud jacking, where attackers hijack cloud accounts, surged in 2023. Cybercriminals exploited cloud vulnerabilities, used phishing or stolen credentials. Once inside, they could steal data, plant malware, or disrupt services. The growing reliance on cloud services widened the potential for such attacks.

Key trends in 2023 included more frequent attacks on SaaS applications and increased automated scanning for cloud weaknesses. Ransomware became a favored tool, locking organizations out of their own cloud data. In 2022, API security lapses contributed to the risks, with a 286% increase in API threats and 34% of organizations without a strategy to protect APIs, leaving 91% of APIs exposed to data theft.

Double and triple extortion

The trend of double and triple extortion in cybercrime has escalated. Techniques combining encryption, data theft, and DDoS attacks are more frequent. Data exfiltration is on the rise, with an increase from 40% in 2019 to 77% in 2022, with 2023 on course to surpass 2022’s total. With this upward trajectory, 2024 is likely to see a continuation of these cyber extortion tactics.

Double and triple extortion image with iconsSocial engineering and user privacy: the human factor

The human element is a significant factor in cybersecurity incidents, with 95% of breaches attributed to human error. This makes it not only a common issue but also a costly and serious one.

In 2023, several major security breaches occurred due to human errors. On January 11, 2023, MailChimp employees fell victim to social engineering by an external party, affecting 133 customers. This incident involved WooCommerce, a widely-used eCommerce plugin for WordPress, leading to the exposure of customer names, store URLs, and email addresses. MailChimp responded by restricting access and informing those affected. They assured that no credit card or password information was compromised. However, the breach highlighted the risk of potential phishing attacks aimed at obtaining credentials or introducing malware.

Picture saying '95% of cyber security incidents are caused by human error'

Ransomware threats: evolution and response

In 2023, ransomware attacks continue to threaten organizations, with attackers demanding payment to decrypt critical data. The impact is growing; U.S. healthcare organizations faced an average downtime of 18.71 days due to these attacks, up from 16 days in 2022. This underscores the evolving nature of cybersecurity trends in ransomware.

The rise of mass ransomware attacks

This year also witnessed a surge in mass ransomware attacks, with ransom-as-a-service groups exploiting software vulnerabilities to target numerous companies simultaneously. Notable incidents include the MOVEit and GoAnywhere software breaches, affecting hundreds of companies. Such widespread cyber-attacks signal a significant challenge for the cybersecurity and insurance sectors, potentially changing the industry’s approach to risk assessment and claims management.

Advancements in Zero Trust security

In the context of current cybersecurity trends, a positive development is also emerging. Zero Trust security, once a strategic goal, is rapidly becoming standard practice. By 2026, it’s expected that 10% of large enterprises will fully implement mature Zero-Trust programs, a significant rise from less than 1% currently.

Implementing Zero Trust is complex, requiring the integration of various components. The key to success lies in demonstrating its business value. Beginning with a simple, scalable approach allows organizations to progressively understand and adopt the framework, managing its complexity step by step.

Strategies for business safety in 2024

  1. Use multi-factor authentication (MFA) to regulate network access.

  2. Add extra authentication factors for administrative accounts.

  3. Assign minimal user privileges in line with Zero Trust principles.

  4. Secure remote devices with VPNs.

  5. Require strong, regularly-changed passwords.

  6. Encrypt all high-value data.

  7. Use data loss prevention (DLP) tools to track valuable data.

  8. Use intrusion detection systems/intrusion prevention systems (IDS/IPS) to track threats in depth.

  9. Back up data regularly.

  10. Audit backups and threat responses to ensure quick disaster recovery.

  11. Regularly test your security systems.

  12. Risk assess core threats and create response plans.

  13. Train all staff to detect phishing attacks.

About Version 2 Digital

Version 2 Digital is one of the most dynamic IT companies in Asia. The company distributes a wide range of IT products across various areas including cyber security, cloud, data protection, end points, infrastructures, system monitoring, storage, networking, business productivity and communication products.

Through an extensive network of channels, point of sales, resellers, and partnership companies, Version 2 offers quality products and services which are highly acclaimed in the market. Its customers cover a wide spectrum which include Global 1000 enterprises, regional listed companies, different vertical industries, public utilities, Government, a vast number of successful SMEs, and consumers in various Asian cities.

About NordLayer

NordLayer is an adaptive network access security solution for modern businesses – from the world’s most trusted cybersecurity brand, Nord Security. The web has become a chaotic space where safety and trust have been compromised by cybercrime and data protection issues. Therefore, our team has a global mission to shape a more trusted and peaceful online future for people everywhere.

7 ransomware attacks in 2023 you should know about

Ransomware is malicious software designed to block access to a computer system until a ransom is paid and remains a significant threat to organizations. In 2023, we witnessed some of the most prominent ransomware attacks.

Central to this wave of digital assaults is exploiting a vulnerability in a managed file transfer software product, MOVEit. The vulnerability exploited by the Russia-linked Clop ransomware group has left a trail of disruption across various sectors, affecting over 500 organizations and exposing the personal information of more than 34.5 million people.

Blog images 7 ransomware attacks in 2023 + SoMe

The evolving cyber threat landscape underscores a crucial reality: no sector is immune to the sophisticated tactics of modern cybercriminals. Let’s look at the biggest ransomware attacks of the last year.

7. Maine government data breach

Industry: Government

Location: United States

Affected users: 1,300,000

The government of Maine confirmed a significant data breach where over a million individuals’ personal information was stolen by a ransomware group linked to Russia. The breach exploited a vulnerability in the MOVEit file-transfer system used by the state government. Stolen information includes names, birth dates, Social Security numbers, driver’s licenses, and possibly medical and health insurance details. Maine’s Department of Health and Human Services and the Department of Education are the most affected agencies.

The breach’s extent was revealed after a recent assessment, and the state is notifying affected individuals. It’s unclear how recent the stolen data is. This incident is part of a larger MOVEit system breach, deemed one of the largest of the year. The US Securities and Exchange Commission has subpoenaed Progress Software for information related to the MOVEit vulnerability, and the company has pledged full cooperation.

6. McLaren Health Care data breach

Industry: Healthcare

Location: United States

Affected users: 2,200,000

A Michigan-based healthcare provider, McLaren Health Care, experienced a significant cyberattack resulting in the compromise of sensitive personal and health information of 2.2 million patients. The breach, later claimed by the Alphv ransomware gang (also known as BlackCat), involved hackers accessing patient names, dates of birth, Social Security numbers, and extensive medical information, such as billing, claims, diagnoses, prescription details, and Medicare and Medicaid information. The cyberattack was only detected a month after it happened.

The organization in question operates 13 hospitals across Michigan and employs about 28,000 people. The news of the breach became public in October, but McLaren’s spokesperson declined to provide further details or comment on whether a ransom was paid. Due to this cyberattack, McLaren now faces at least three class-action lawsuits.​

5. Mr. Cooper outage

Industry: Financial Services

Location: United States

Affected users: 4,000,000

A Texas mortgage and loan company, Mr. Cooper, acknowledged a cyberattack leading to a data breach. On Wednesday, the company experienced a technical outage on its website, preventing customers from online payments. It was later revealed that the outage was caused by a cyberattack that led to a system lockdown to protect customer data.

The company’s IT team took immediate containment measures and investigated the incident for potential data theft, promising identity protection services if needed. Later, the organization confirmed that customer data was compromised in the breach.

4. PharMerica data breach

Industry: Healthcare

Location: United States

Affected users: 5,800,000

A major US pharmacy service provider, PharMerica, has reported a data breach affecting nearly six million patients. The breach was discovered due to suspicious network activity and involved an unauthorized third party accessing PharMerica’s systems. The leaked data includes names, birth dates, Social Security numbers, medication, and health insurance details. Additionally, sensitive health information like allergy, Medicare details, and mental health diagnoses was also stolen.

The Money Message ransomware gang published the data on the dark web, which claimed responsibility for the attack and allegedly obtained 4.7 terabytes of data from PharMerica and its parent company, BrightSpring Health. PharMerica has announced measures to prevent future breaches but has not detailed these steps.

3. MCNA Dental ransomware attack

Industry: Insurance

Location: United States

Affected users: 8,900,000

One of the largest US dental health insurers, Managed Care of North America (MCNA) Dental, was targeted by a ransomware attack that compromised the personal data of about 9 million individuals. The breach exposed patients’ personal and health insurance information, including Social Security numbers and driver’s licenses.

The LockBit ransomware group claimed responsibility and demanded a $10 million ransom, eventually releasing the data as the ransom wasn’t paid. MCNA is unaware of any data misuse and has bolstered its security measures. Affected individuals are being notified and offered complimentary credit monitoring services in line with state law requirements. LockBit, which experienced a setback with the arrest of an alleged leader, reportedly stole 700GB of data, including sensitive patient information.

2. Maximus data breach

Industry: Business services

Location: United States

Affected users: 11,000,000

A US government services contractor, Maximus, confirmed a data breach potentially affecting 11 million individuals. The breach occurred through a zero-day vulnerability in MOVEit Transfer, a tool Maximus uses to share data with government clients. The hackers accessed personal data, including Social Security numbers and health information. While the exact number of affected individuals is still uncertain, estimates suggest at least 8 to 11 million people could be impacted.

Maximus has not specified the types of health data accessed and is in the process of notifying affected customers and regulators. They estimate the cost of investigation and remediation at around $15 million.

1. Lyca Mobile cyberattack

Industry: Telecommunications

Location: United Kingdom

Affected users: 16,000,000

UK-based mobile virtual network operator Lyca Mobile confirmed a cyberattack on its systems, which led to unauthorized access to customers’ personal information. Lyca Mobile took immediate action, such as isolating and shutting down compromised systems. However, intruders accessed personal data, including names, birth dates, addresses, identity documents, customer interactions, and payment card details.

Lyca Mobile encrypts data, including passwords, during transmission and when it’s not actively used. However, the company has not disclosed the encryption methods used, and it remains uncertain whether the attackers obtained the encryption keys. The company has not provided details on how the breach occurred, or its nature, but data theft suggests a potential ransomware connection.

Lyca Mobile has informed the UK’s Information Commissioner’s Office (ICO), and the ICO is assessing the information provided.

How to protect your business

As ransoms for data decryption range from a few hundred to thousands of dollars, it’s one of the most lucrative opportunities for cybercriminals. Therefore, protecting your business from ransomware involves a multifaceted approach. Here are some effective strategies to protect your business against ransomware.

Educate employees

Employees are often the weakest link in cybersecurity and the first defense against cyber threats. Educating them about warning signs, safe practices, and response strategies is crucial for preventing malware intrusion. In addition, conduct regular training sessions to educate them about phishing scams, a common entry point for ransomware. Timely recognition of a phishing email can save millions of dollars.

Implement access controls

Limit user access to data and information, granting access only to those who need it for their work. This principle of ‘least privilege’ can minimize the extent of a ransomware attack. Software installation and execution abilities on your network devices should also be limited as it minimizes the network’s vulnerability to malware.

Regular data backups

Regularly back up your data and ensure these backups are not connected to your main network. Offsite or cloud-based backups can be effective as they shouldn’t be affected during a breach of your main network. In the event of an attack, you can restore data without paying a ransom.

Update systems and software

Keep your operating systems, software, and applications updated. Cybercriminals exploit vulnerabilities in outdated software. Implement a patch management strategy to ensure timely updates. Also, consider implementing methods for regular scans to help maintain system efficiency.

Use email filtering solutions

Exercise caution with links in emails or pop-up messages. Don’t click unless you’re sure of their legitimacy. When in doubt, hover over a link to see the real URL before clicking. Be wary of email attachments or downloads, as they can contain malicious software. Implement advanced email filtering solutions that can detect and block phishing emails, a common ransomware delivery method.

How can NordLayer help?

In light of these incidents, organizations and individuals must prioritize cybersecurity measures. Regularly updating security software, implementing robust backup strategies, and training staff on recognizing phishing attempts are key steps in mitigating the risk of ransomware attacks.

Upgrading your current remote network access solutions could also enhance the organization’s overall security. NordLayer aids businesses by offering sophisticated network access and management solutions. Our services authenticate each access request in line with the Zero Trust security model, boosting data protection and limiting the attack surface.

NordLayer’s security offerings include a VPN and multi-factor authentication, all tailored to meet your business requirements without needing extra hardware.

Get in touch with our sales team to learn more about our offerings.

About Version 2 Digital

Version 2 Digital is one of the most dynamic IT companies in Asia. The company distributes a wide range of IT products across various areas including cyber security, cloud, data protection, end points, infrastructures, system monitoring, storage, networking, business productivity and communication products.

Through an extensive network of channels, point of sales, resellers, and partnership companies, Version 2 offers quality products and services which are highly acclaimed in the market. Its customers cover a wide spectrum which include Global 1000 enterprises, regional listed companies, different vertical industries, public utilities, Government, a vast number of successful SMEs, and consumers in various Asian cities.

About NordLayer

NordLayer is an adaptive network access security solution for modern businesses – from the world’s most trusted cybersecurity brand, Nord Security. The web has become a chaotic space where safety and trust have been compromised by cybercrime and data protection issues. Therefore, our team has a global mission to shape a more trusted and peaceful online future for people everywhere.

About NordLayer
NordLayer is an adaptive network access security solution for modern businesses – from the world’s most trusted cybersecurity brand, Nord Security.

The web has become a chaotic space where safety and trust have been compromised by cybercrime and data protection issues. Therefore, our team has a global mission to shape a more trusted and peaceful online future for people everywhere.

NordLayer’s 2023 wins: 7 prestigious awards and G2 recognition

In 2023, NordLayer earned seven major awards, showcasing its growth in cybersecurity and network solutions. The awards include honors from the American Business Stevie® Awards, Globee® Cybersecurity Awards, and Cyber Defense Magazine’s Top InfoSec Innovator Awards. These prizes demonstrate that NordLayer is truly stepping up its tech game. The company also received 25 G2 award badges in fall 2023, confirming its rising industry status.

Awards 1400x5700

US business recognition: the American Business Stevie® Awards

Known as “The Stevies,” the American Business Awards symbolize US business excellence. Since 2002, they have recognized achievements in various sectors like marketing, IT, and customer service. The awards welcome entries from all US organizations, regardless of their size or type.

The Stevies’ judging involves over 230 global professionals annually. Judges from various fields assess each entry for excellence. The awards feature Gold, Silver, and Bronze levels, reflecting different achievement tiers.

quote 1 1400x7040

NordLayer’s win in the Stevie® Awards’ Best Business Technology Pivot category, showcases our innovation and adaptability. This achievement places us in a prominent spot within the US business sector. It also confirms our effective approach to business technology and cybersecurity.

Global recognition at the Globee® Cybersecurity Awards

The 19th annual Globee® Cybersecurity Awards are a key global platform for cybersecurity excellence. They cover numerous categories, highlighting important advancements in this area. Over 250 experts rigorously evaluate entries, underscoring the competitive aspect of cybersecurity innovations.

NordLayer’s NordLynx received recognition, demonstrating our impactful role in cybersecurity. This highlights NordLayer’s significant position in the field and our commitment in digital security.

Top InfoSec Innovator Awards by Cyber Defense Magazine

In its 11th year, the Top InfoSec Innovator Awards by Cyber Defense Magazine represent a key accolade in the cybersecurity field. These awards recognize notable advancements in information security, with categories that span threat detection, risk management, and cyber defense strategies. Established in 2012, Cyber Defense Magazine provides a platform for these awards.

quote 2 1400x7040

NordLayer’s achievement as the Most Innovative Zero Trust highlights our role in developing crucial security measures like the Zero Trust approach.

The SaaS Awards: spotlight on software-as-a-service excellence

The SaaS Awards, established in 2015, have become a key global benchmark in the software industry. They focus on Software as a Service achievements, attracting a diverse range of global companies. The awards span numerous categories, reflecting the diversity and innovation within the SaaS sector.

An international panel of industry experts judges these awards, focusing on innovation, usability, and performance. This guarantees a thorough review of all entries. NordLayer’s finalist position in the Best Security Innovation in a SaaS Product category marks significant industry recognition and underscores the importance of a forward-thinking approach to security in SaaS solutions.

Technological advancement in security: the Computing Security Awards

The Computing Security Awards are a key event in the cybersecurity industry, recognizing excellence in network and information security. These awards attract entries from a wide range of global companies.

NordLayer’s 2023 finalist status for Network Security Solution of the Year highlights our cybersecurity effectiveness.

Effective remote working environments: the RemoteTech Breakthrough Awards

The RemoteTech Breakthrough Awards, part of Tech Breakthrough, honor excellence in remote work technologies. In the digital and remote work era, these awards have become increasingly relevant.

NordLayer’s win as the Best Overall Remote Work Security Solution of the Year in 2023 from over 1,250 nominees showcases our prowess in remote work cybersecurity. This award highlights our commitment to secure and efficient remote work solutions.

Merit Awards: recognizing technological innovation

Founded in 2022, the Merit Awards honor global industry achievements with a focus on technology. These awards recognize leaders in innovation and technological progress, assessing cutting-edge technology submissions. Marie Zander, the executive director, emphasizes that the 2023 Technology Award winners have set new standards in technology use.

The selection process involves a diverse panel of industry experts and educators. Winners, categorized into gold, silver, and bronze levels, receive digital badges and promotional tools for recognition. NordLayer’s cybersecurity win at these awards highlights its significant role in driving technology innovation.

Users’ recognition: NordLayer’s achievement in G2 awards fall 2023

G2, a top software marketplace, is known for authentic user reviews on various products and services. With over 90 million users annually, including Fortune 500 employees, G2 is a key software resource. In fall 2023, NordLayer earned 25 G2 awards, showing its excellence in multiple software categories. This user-driven recognition makes NordLayer a top performer in the software landscape.

Business VPN Leader category

In the highly competitive BusinessVPN Leader category, NordLayer won nine awards, demonstrating its strong market position. These awards focus on partnership quality, multi-device usage, customer support, and protocol choices, key to user satisfaction. The range of awards includes:

  • Business VPN Momentum Leader

  • Business VPN Leader

  • Business VPN Leader: Americas

  • Business VPN Leader: Asia-Pacific

  • Business VPN Leader: Europe

  • Business VPN Mid-Market Leader

  • Business VPN Mid-Market Leader: Americas

  • Business VPN Small-Business Leader

  • Business VPN Small-Business Leader: Americas

Best Secure Access Service Edge (SASE) platforms

SASE platforms unify various security solutions into a cloud-native service for modern computing needs. These platforms, evolving from secure web gateways and cloud access security broker (CASB) software, include Zero-Trust networking and secure perimeters. NordLayer stands out on the following categories:

  • Cloud Security Leader

  • Cloud Security Leader: Americas

  • Cloud Security Small-Business Leader

  • Cloud Security Small-Business Leader: Americas

Network Access Control (NAC) leader category

In the Network Access Control (NAC) category, NordLayer’s awards demonstrate our prowess in policy control and data protection. G2 evaluates factors like partnership quality and security. So, G2’s recognition reinforces NordLayer’s position with titles like:

  • Network Access Control (NAC) Momentum Leader

  • Network Access Control (NAC) Leader: Americas

Significance of NordLayer’s diverse awards

NordLayer’s varied awards across different sectors highlight our dedication to solving cybersecurity challenges. These recognitions affirm the effectiveness of our approach, in line with our mission to simplify cybersecurity for organizations. With user appreciation as a key indicator of success, each award marks NordLayer’s progress in the cybersecurity field.

Organizations seeking to strengthen their cybersecurity can rely on NordLayer’s recognized solutions. For more information or assistance, please contact our sales team.

Genetic data leak, 23andMe point to credential stuffing

Hackers are selling genetic data stolen from users of the company 23andMe. The company itself says they weren’t breached, although their users’ data was used by what seems to be a single threat actor stealing personal details and genetic data. This data was then published or advertised online. 23andMe suggested that the threat actor(s) gained unauthorized access with “recycled login credentials”, a technique known as credential stuffing.

The logic is simple: Keep trying stolen username/password combinations, and eventually, they’ll work on another site. An easy solution to credential stuffing attacks? You guessed it: Multi-factor authentication (MFA). While 23andMe has offered an MFA feature since 2019, it was not made mandatory for users. With genetic and personal data at stake and up to 7 million users affected by these recent breaches, it might be time for a change in policy.

The Bleach Breach: Clorox revenue and supply chain hit

Clorox, the household cleaning giant, predicts a more than 20% drop in quarterly sales due to a cyberattack (thought to be ransomware) that caused product shortages and operational disruptions. Manufacturing, often kept running by legacy systems and sprawling workforces, suffers more cyberattacks than any other industry.

The Clorox incident is being linked to the same group responsible for the MGM and Caesars Palace hacks, discussed in our previous episode, which occurred around the same time in August 2023. “Scattered Spider” is notorious for using social engineering methods to gain access to internal systems. The Clorox Company’s share price has dropped by over 7 percent in the last month.

Wearable AI: Trendy or just trending?

Tech companies are rushing to secure the lead in wearable AI products. Meta has collaborated with Ray-Ban on a pair of high-tech glasses, enabling wearers to live stream directly from the glasses to Facebook or Instagram and voice activate Meta AI, “an advanced conversational assistant”. Jony Ive, Apple’s legendary former design lead, and OpenAI are reportedly teaming up to design the “iPhone of AI”.

Rewind.ai unveiled a neck-worn pendant that records conversations to your smartphone and creates a searchable database of life moments. Humane, imagining “a world where you can take AI everywhere”, have developed a smart device that resembles a badge or lapel pin.

The common goal here seems to be for technology to rely less on screens, to fade from view, and become all but invisible.

Stay tuned for the next episode of Cyberview.

About Version 2 Digital

Version 2 Digital is one of the most dynamic IT companies in Asia. The company distributes a wide range of IT products across various areas including cyber security, cloud, data protection, end points, infrastructures, system monitoring, storage, networking, business productivity and communication products.

Through an extensive network of channels, point of sales, resellers, and partnership companies, Version 2 offers quality products and services which are highly acclaimed in the market. Its customers cover a wide spectrum which include Global 1000 enterprises, regional listed companies, different vertical industries, public utilities, Government, a vast number of successful SMEs, and consumers in various Asian cities.

About NordLayer

NordLayer is an adaptive network access security solution for modern businesses – from the world’s most trusted cybersecurity brand, Nord Security. The web has become a chaotic space where safety and trust have been compromised by cybercrime and data protection issues. Therefore, our team has a global mission to shape a more trusted and peaceful online future for people everywhere.

Need help? Our team is just a message away