English
Magyar
Technological advances not only offer opportunities for society, but also provide cybercriminals with new methods of attack. Not only does every new technology have vulnerabilities that can be exploited; hackers themselves use sophisticated technology to carry out their crimes. Here, we examine some of the most significant security threats to watch out for in 2023.
Artificial Intelligence and Machine Learning
Cybercriminals are increasingly using artificial intelligence and machine learning to identify vulnerabilities in systems and evade detection by security measures. Artificial intelligence and machine learning are being used to speed up and improve the accuracy of brute-force attacks, as well as to identify patterns within IT systems that reveal weaknesses in software or security measures. At the same time, hackers are also learning how to compromise AI-based security systems by infecting them with files that behave like malware but are actually benign. This tricks the security tool into classifying these files as safe. Once this has happened, the system may become infected with malware without the security tool removing it.
IoT vulnerabilities
Despite numerous headlines over the years, IoT devices remain a target for hackers due to weak passwords and insecure networks. These days, such devices are used in almost every sector, from healthcare monitoring through industrial operations to fleet management. In 2023, cybercriminals will continue to exploit IoT vulnerabilities to steal data and take control of devices. The latter will increasingly be used for ransom purposes.
Mobile threats
The growing use of banking apps and smartphone payments has made mobile hacking attacks much more lucrative for cybercriminals, and the number of attacks could rise significantly in 2023. We can expect to see an increase in the use of mobile malware and attempts to bypass biometric authentication. The use of mobile antivirus tools and VPNs is strongly recommended.
Cloud-based vulnerabilities
Although cloud service providers invest heavily in protecting their infrastructure against intrusion and infection, for the growing number of businesses and organisations using the cloud, the greatest security challenge comes from within. Issues such as poor password management, phishing attacks and human error can leave the door wide open to data breaches. As so many companies are adopting cloud technology, they will become a prime target for cybercriminals in 2023.
Vehicle hacking
Today’s vehicles are packed with modern technology. An average petrol-powered car contains around 1,000 microprocessors, whilst electric vehicles can have as many as 3,000. These power the computer systems on which we rely for safety, control, convenience, comfort and connectivity.
From a hacker’s perspective, what makes vehicles vulnerable is the fact that they communicate via Wi-Fi, 5G and Bluetooth. Hackers can attempt to take control of cars in the same way that ransomware takes control of computers, enabling individuals and businesses to regain use of their vehicles in exchange for a ransom. Apps used to adjust a car’s settings or monitor its usage are also vulnerable to hacking.
Targeted ransomware
Whilst every business and device user is vulnerable to ransomware, we are increasingly seeing cybercriminals targeting specific organisations. In 2022, we witnessed targeted attacks against local authorities, universities and healthcare providers, as well as large corporations – including many service providers. Whilst poor security may play a part in the selection of targets, it appears that these types of organisations are attacked because, due to the nature of their work, they are more likely to pay the ransom in order to restore their systems more quickly. This pattern is expected to continue in 2023.
State-sponsored attacks
There is currently a great deal of political tension on the international stage. Apart from the conflict in Ukraine, relations between Western countries and states such as China, Iran and North Korea remain fragile. Whilst diplomacy takes place at a human level, in the cyber world most countries are seeking new methods to carry out cyberattacks and to fend off attacks directed against them. Unfortunately, some countries carry out state-sponsored attacks as a means of intimidation or to test how successful their cyber operations might be. Although these are often aimed at disrupting government and military systems, there are other targets as well, particularly organisations operating national infrastructure (rail, road, healthcare, utilities and communications, etc.), as well as companies providing services or equipment to the armed forces.
Summary
In 2023, cybercriminals will be looking for new methods of attack and new targets. With increasingly sophisticated tools at their disposal, they will exploit new technologies that are becoming more widely used.