Tech News : Cyber Attacks Burn Out Security Experts

A new survey from CyberArk has revealed that increased workloads caused by a surge in cyber threats and attacks has led to 59 per cent of UK senior cyber security professionals facing burnout.

Cyber Crime Levels High 

The results of the survey highlight the growing workload pressure on cyber security professionals because in just the past 12 months alone, a staggering 80 per cent of UK organisations have experienced a ransomware attack, a 10 per cent increase on last year. Also, almost half of those affected (47 per cent) have opted to pay the ransom (at least twice) to enable recovery.

Workload And Other Challenges 

In order to protect businesses from growing threat levels, cyber security teams have, therefore, been required to work long hours whilst facing the challenges caused by the limited budgets and resources that are the result of economic pressures, as well as the challenges of a skills gap and global shortage of cybersecurity professionals. For example, a recent ISC2 report shows that there was a 3.4 million global shortage of cyber security professionals last year, compared with a total cyber workforce of 4.7 million.

Other Supporting Research 

Other research that supports the plight of under-pressure cyber security workers includes a Chartered Institute of Information Security (CIISec) survey that found almost a quarter of security practitioners work more than 48 hours per week, and Gartner research (2023) highlighting how high levels of stress could see nearly half of security leaders switching careers by 2025.

Taking A Break Or Leaving The Profession 

Consequently, even though cyber security professionals need to be performing at their absolute best, instead they are experiencing burnout (according to the CyberArk survey), and are choosing to either take a break from work to concentrate on their wellbeing or leaving the professions, thereby adding to the lack of security professionals in businesses, increasing the vulnerability of those businesses to cyber-attacks.

More Than Two-Thirds Of Senior Decision Makers Affected

CyberArk’s survey shows, for example, that 66 per cent of C-level executives (senior cyber defence decision makers in businesses) feel that they are experiencing burnout, which raises concerns about their ability to deal with the increasing and evolving threats effectively.

For example, as David Higgins, senior director, of the field technology office at CyberArk puts it: “Burnout is alarming in that context, because it impairs the ability to defend their organisation. One wrong decision or missed signal can open the door to reputational and monetary damage for an organisation.” 

What Does This Mean For Your Business? 

The findings from CyberArk paint a stark picture for UK businesses, showing the front-line against cybercrime is wearing thin. The apparent burnout epidemic among cybersecurity professionals is not only a health crisis but a strategic business vulnerability. When these specialists are overworked and stressed, their capacity to guard against cyber threats is compromised, and as a result, the risk to business operations, sensitive data, and company finances escalates.

UK companies should, therefore, take immediate steps to prioritise the well-being of their security teams. This means cultivating an environment where work-life balance is possible and supported by management. It also includes re-evaluating workloads to ensure they are sustainable and providing access to mental health resources. These measures may help in maintaining a vigilant and capable cybersecurity workforce.

Equally critical is addressing the shortage of cybersecurity professionals through targeted talent development and diversified recruitment strategies. Training programs and professional development opportunities can be powerful incentives for both recruitment and retention, and recruits that can grow with the company.

C-level executives (cyber security decision-makers) experiencing burnout themselves need to set the right tone for the organisation’s work culture, for example by openly acknowledging the issue and advocating for sufficient resources. This could (in some measure) help bring the change that reinforces the company’s defence against cyber threats.

Preventing cybersecurity burnout, therefore, is more than a human resources issue and is an essential investment in a business’s operational security. As cyber threats increase, it is clear that protecting the protectors through a compassionate and comprehensive approach to workforce management is not just beneficial but necessary for sustaining business integrity in the digital age.

Tech News : New Sub-60cm GPS Accuracy

US Startup Zephyr’s claim that it has solved smartphone GPS positioning problems through a network and software-based solution with sub-60cm accuracy has attracted $3.5 million seed funding.

The Issue 

Even though consumers have been putting growing demands on GPS through their increasing use of mobile devices and wearables, and many more businesses and services have become more reliant on it, GPS hasn’t had any major updates for more than 20 years, meaning that it is prone to errors, inaccuracy, and can sometimes be unreliable.

GPS accuracy on phones has traditionally suffered from various issues which affect the precision of location data. For example, problems like signal blockage from buildings, natural landscape features, or indoor and underground settings can prevent GPS signals from reaching a phone effectively. One key issue highlighted by Zephyr is “multi-path errors,” where a signal from a GPS satellite reaches a receiver more than once, caused by signals bouncing off buildings or other large objects, thereby confusing smartphones with a single antenna.

Also, atmospheric conditions and satellite geometry can play a role as signals can be distorted by the atmosphere, and if satellites are poorly positioned relative to each other, accuracy drops.

Phones can also face hardware limitations, e.g. the quality of the GPS receiver and the processing software can introduce errors. Assisted GPS, which uses network data to enhance location locking, can experience problems if network information is imprecise or outdated and electromagnetic interference from other devices can affect signal clarity.

The integration of additional satellite systems such as GLONASS, Galileo, and Beidou with traditional GPS, along with software improvements, have helped the everyday location accuracy of modern smartphones in recent times, nevertheless it’s often still not accurate enough for users.

The Implications 

Inaccurate GPS on phones can be frustrating for users by causing navigation problems, leading to lost time and potential safety concerns when driving or walking. It can also disrupt location-based services such as ridesharing, food delivery, or (more seriously) emergency assistance, where precise location information is crucial.

For those relying on GPS for fitness activities, inaccuracies can spoil exercise tracking and goals. Also, inaccurate GPS can affect social experiences by misplacing geotags on social media and leading to mistakes in personal and professional mapping efforts. While generally reliable, the limitations of phone GPS can, therefore, cause inconveniences in daily life.

Zephr’s CEO Sean Gorman summarises the problems that poor GPS accuracy can cause, saying: “GPS is an essential technology for so many services we now rely on, and yet it is plagued by inaccuracy. This poses many challenges for businesses and consumers, and it will hamper the growth of developing technologies like augmented reality and autonomy.”  

Mr Gorman points out the benefits of a solution that can improve accuracy, saying: “Improved accuracy in GPS can translate into millions of dollars in economic benefit, but for us, it’s about more than just money. A more accurate GPS system can also improve daily routines and personal safety, from preventing navigational errors to creating safer collision-avoidance systems in vehicles and enabling more advanced search-and-rescue efforts.” 

Zephr’s Solution 

Colorado-based Zephr claims that its network-based solution to GPS inaccuracy has achieved sub-60cm GPS accuracy in field trials (a level of accuracy typically not seen in consumer GPS solutions) using nothing more than existing satellites and mobile devices networked together to share correction data. The company says its “breakthrough” networked GPS solution enhances accuracy by 5X-10X (<1m) for mobile devices and wearables.

Zephr also claims that its solution (which is purely software-based and doesn’t require hardware changes to a device or a new chipset or firmware) will be able to increase accuracy in dense urban environments, thereby solving problems caused by building-bounce and blocked line-of-sight.

How? 

In short, Zephr’s system creates a multi-receiver system, i.e. it turns users’ mobile devices into base stations which generate error corrections. Interconnected GNSS (global navigation satellite system) measurements across multiple devices thereby enables Zephr’s system to not only eliminate common errors and inaccuracies, but also to bring a stable and reliable signal with less risk of interference.

The Benefits

The benefits of this software/network-based solution are:

– It’s fast and easy – billions of existing mobile devices can easily upgrade their GPS accuracy directly out of the box, with no need for hardware solutions.

– Easy integration – as a standalone SDK product it will allow any mobile app to easily upgrade GPS accuracy by embedding the feature.

– It’s cheap – it uses existing satellites and software.

– Economic and human value – it could create cost savings, create opportunities in many industries, and unlock new markets in new/emerging ones, e.g. navigation, delivery/logistics, rideshare, agriculture, advertising, search and rescue services, location-based apps, collision avoidance systems, autonomous vehicles (robot/drone delivery systems), augmented reality, location-based gaming, and smart cities.

– It retains privacy – Zephyr says: “User information is always minimised, anonymised, short-lived, never sold or transferred, and protected from third-party access.” 

Funding 

The simplicity and accuracy of the solution (plus its many possibilities) have meant that Zephr has been able to attract $3.5 million of funding in a seed round led by Space Capital and First Spark Ventures. It’s been reported that this significant amount of funding will help support Zephr’s GTM strategy as it goes for rapid growth over the next year.

What Does This Mean For Your Business? 

Zephyr’s GPS accuracy solution could represent a significant milestone for businesses across a broad spectrum of industries. With the claim of solving GPS inaccuracies using software, Zephyr’s technology promises to deliver sub-60cm location precision, a game-changer for any business reliant on geolocation data. This could mean enhanced reliability and fewer errors for logistics and delivery services, ensuring packages reach their destinations more efficiently, and with greater customer satisfaction. For the rideshare and transport sectors, improved accuracy will lead to quicker, more reliable pickups and drop-offs, optimising route planning and saving on fuel and time – in short, service improvements and cost substantial savings.

Emerging markets and technologies also stand to gain substantially from Zephyr’s innovation. For example, agricultural businesses can employ more precise GPS for planting, harvesting, and monitoring equipment, which can lead to better resource management and yield prediction. In advertising, location-based marketing could become more targeted and effective, with the potential to engage consumers based on precise location data.

For vital services like search and rescue, the benefits are potentially lifesaving, with the ability to pinpoint locations swiftly and accurately (when every second counts). Autonomous vehicles, including drones and robots for delivery systems could also benefit by being able to navigate more safely and efficiently, reducing the risk of accidents and enabling them to operate in more complex environments. This could help advance this whole new field, e.g. Amazon’s robots and its new delivery drones. The augmented reality and gaming industries could also see an uptick in immersion and gameplay possibilities, as real-world accuracy becomes a stable foundation for virtual experiences, thereby helping to create new products and opportunities and generate more revenue.

There may also be an important knock-on effect of this precision for smart city initiatives. For example, urban planning, infrastructure management, and public safety could all be revolutionised with accurate, reliable geolocation data at their core. The implications for the Internet of Things (IoT) are also vast, with the potential for devices to communicate and operate with a new level of location intelligence.

Zephyr’s commitment to privacy is also likely to be promising for businesses using the technology and for more privacy-conscious consumers.

Zephyr’s fix and what essentially represents the first big (and necessary) change to a GPS system in 20+ years that’s been increasingly in demand could see widespread integration into countless applications. This could inject efficiency and accuracy into current services while catalysing the development of new ones. As a result, businesses that adapt quickly to this technology could see significant ROI, not only through direct economic benefits but also via enhanced customer trust and brand reputation. The $3.5 million in seed funding reflects investor confidence in Zephyr’s solution, suggesting a ripe market ready for businesses harnessing the power of improved GPS technology.

Tech-Trivia : Did You Know? This Week in Tech-History

November 10, 2004 : What’s In a Name?

On November 9th 2004, the well-known web-browser ‘Firefox’ was released, although it had earlier been called something entirely different altogether.

Originally created in 2002 by members of the Mozilla community, the browser had the codename “Phoenix”. This was supposed to reflect the project’s aim to “rise from the ashes of Netscape Navigator” after it was defeated in the browser wars by Microsoft’s Internet Explorer. However, a software company named Phoenix Technologies meant there were trademark issues, so it was renamed.

The next (brief) iteration was “Firebird”, which is a more literal expression of what a Phoenix is. However, once again this led to conflicts with another software project.

Ultimately,  “Firefox” was selected. However, this animal has nothing to do with foxes, even though the logo suggests otherwise. It is, in fact, the colloquial term for the red panda, which was adopted as the mascot for the project following its renaming. A red panda was chosen because, at the time, relatively few people knew about this animal and was therefore less likely to cause yet more trademark issues! As an aside, a red-panda’s habitat is around China and as a species they are related to skunks, weasels and raccoons and so they are completely unrelated to giant Pandas (which are actually a type of bear).

As far as naming is concerned, the plot thickens because the community called Mozilla was originally so-called because ‘Mozilla’ was originally the code name for the Netscape Navigator web browser, and it was a portmanteau created from the words “Mosaic” and “Godzilla.” The name was chosen to signal Netscape’s goal to be the “Mosaic killer,” as Mosaic was the dominant web browser at the time Netscape was being developed. The addition of “Godzilla” to the mix signified the hope that Netscape would become a powerful and formidable player in the browser space, much like the fictional monster. Phew!

Currently, as of October 2023, the browser share of Firefox is around 3.06% (i.e. about 90% down from its prime in 2009 when it had about 32% browser share). So, it looks like Firefox’s best days are behind it but who knows what’s around the corner?

Security Stop Press : ChatGPT Release Linked To Massive Phishing Surge

Threat Detection Technology SlashNext has reported that in the 12 months that ChatGPT’s been publicly available, the number of phishing emails has jumped 1,265 per cent, with credential phishing, a common first step in data breaches, seeing a 967 per cent increase.

SlashNext’s State of Phishing 2023 report notes that cybercriminals may have been leveraging LLM chatbots like ChatGPT to help write more convincing phishing emails and to launch highly targeted phishing attacks. Generative AI chatbots may also have lowered the barriers for any bad actors wanting to launch such campaigns (i.e. by giving less skilled cyber criminals the tools to run more complex phishing attacks).

Businesses can safeguard against phishing attacks by taking measures such as educating employees to recognise fraudulent communications, enforcing strong password policies, using MFA, keeping software up-to-date and installing anti-phishing tools, and by having an effective incident response plan to mitigate damage from breaches.

Sustainability-in-Tech : New AI Model Classifies Energy-Wasteful Homes

A new deep-learning AI algorithm, developed as part of a study by the University of Cambridge, can identify and classify ‘Hard to Decarbonise’ houses (energy-wasting homes) with 90 per cent accuracy.

What Are ‘Hard-to-Decarbonise’ Houses? 

Hard-to-Decarbonise (HtD) houses/buildings are really a subset of residential structures that present unique challenges in reducing carbon emissions due to their design, old age, construction, location, or the behaviours of occupants.

Why Are They Such A Problem? 

These buildings are significant because they account for a sizable portion (roughly a quarter) of all homes and are responsible for over 25 per cent of direct residential sector emissions. As the urban population looks set to swell, ensuring these buildings’ sustainability has, therefore, become critical to meeting the global carbon reduction goals.

Why Hasn’t This Problem Been Tackled Effectively So Far? 

The effort to decarbonise HtD buildings has been marred by several issues. Historically, for example, there’s been a lack of focus on identifying and studying these specific types of buildings, with much of the research skewing towards general energy usage and efficiency. This gap has made it challenging to develop targeted strategies for their upgrade and retrofitting. Also, the identification of HtD buildings has, up until now, been complex and reliant on detailed and varied data that has not been readily accessible or sufficiently prioritised (so far) in energy performance datasets.

Also, technological and economic factors have compounded the difficulty. For example, HtD homes often require more sophisticated and expensive work to make them more energy efficient, which may not be feasible given current technological and economic constraints. This is problematic for not only meeting emissions targets but also for addressing social issues like fuel poverty, where the least efficient homes are often inhabited by those least able to afford their retrofitting.

A New Approach – With The Help Of AI 

The new approach developed by the University of Cambridge, uses deep learning to classify HtD buildings. The research team has reported that their new AI-based method for the classification of HtD buildings can achieve an overall precision of 82 per cent on the building level.

The new method uses publicly available data – a dataset of HtD houses (in Cambridge for the test), organised with criteria derived from the Energy Performance Certificate (EPC) which results from detailed inspections of houses. Street view images (SVI), aerial view images (AVI), land surface temperature (LST), and building stock data are also used together for the prediction with deep learning.  The AI model at the heart of the new method is also able to reach its classification of buildings by pinpointing the parts of a building which are losing the most heat, e.g. the windows and the roof, and whether a home is old or modern.

What Does This Mean For Your Organisation? 

With so many UK homes being energy inefficient and a major source of carbon emissions, plus the pressing need to decarbonise the residential sector by 2050, yet with identification and classification of HtD buildings being too complex and reliant on data that hasn’t been accessible or sufficiently prioritised (so far) in energy performance datasets, a new method that appears to work is very welcome.

The recent breakthrough by the University of Cambridge in utilising AI trained to identify hard-to-decarbonise buildings using open-source data (a first) is a big step forward that could provide policymakers with a fast and effective way to audit and find out just how many houses they have to decarbonise.

As Dr Ronita Bardhan, the head of Cambridge’s Sustainable Design Group and co-author of the study has pointed out, this new and better tool for targeting energy inefficiency within the residential sector could help direct policymakers identify the high-priority houses, thereby saving them precious time and resources. This new method means that AI could, therefore, provide a way to make better decarbonisation policy decisions, and make serious inroads into reducing the stubbornly high emissions of this sector, thereby also providing a better chance of meeting decarbonisation targets.

Additionally, this progress in AI and building analytics could offer a competitive edge by promoting data-driven decision-making in real estate development, urban planning, and energy policy. As tech companies continually seek to leverage their expertise in data handling, the AI model’s adaptability to identify HtD homes based on open-source data streams such as EPC, SVI, AVI, and LST can be integrated into existing and future tech solutions.

The discovery of this new method (model), which the Cambridge researchers appear confident they can significantly increase the detail and accuracy of over time is an advance in corporate social responsibility. However, it’s only just been tested and the imperative now is to harness its potential and translate it into actionable strategies that yield measurable results in decarbonising the residential sector, aligning with global sustainability commitments, and reinforcing the role of innovative technology in societal advancement.

Tech Tip – Enhance Password Security with Emojis

If you’d like to fortify your passwords to make them exceptionally challenging to crack, incorporating emojis can prove remarkably effective.

It might come as a surprise to many users but, as highlighted recently by Kaspersky, some popular apps and online platforms (e.g. Dropbox and OpenAI) permit the use of emojis to bolster the strength of passwords.

For example, computers treat emojis much like they do numbers and special characters. Whereas traditional passwords consisting of letters, numbers, and punctuation offer less than a hundred permutations for each character, Unicode boasts over 3,600 standardised emojis. Consequently, by simply adding one emoji to your password, you increase the complexity for hackers by almost 4,000 possible variations per symbol. Experts suggest that employing five distinct emoticons is akin to using a typical nine-character password.

Therefore, if you’d like to craft a password that is highly resistant to guessing or brute force attacks and offers an additional, unexpected layer of security against cyber threats, incorporating a couple of easily memorable (and swiftly typable) emojis may be the solution.

As a word of caution, however, some emojis are harder to enter. For example, on desktops, there may in some cases be problems in passing verification when signing in.

Each week we bring you the latest tech news and tips that may relate to your business, re-written in an techy free style. 

Archives