MSPs – the next, great cyberattack?
written by Michael Anderson posted on December 17, 2020
The cyber war may be coming to your IT-managed service provider. Is your MSP ready?
Look no further than the recent cyberattack on SolarWinds, an IT-infrastructure management software company that works with technology and IT-managed service providers. It appears that hackers are breaking into MSPs in order to attack as many company networks as possible in one swoop.
As mentioned in Channele2e’s article, “MSPs: The Preferred Cyberattack Target in 2021,” not only does one successful MSP attack give attackers access to the service provider’s network, but also its clients’ data. The potential revenue from a single attack increases exponentially.
In 2021, it’ll be important for MSPs to prepare for these upcoming threats. At 365 Technologies, we are continually anticipating trends to ensure that our clients’ infrastructure is secure.
We’ve partnered with Artic Wolf®, a world-renowned market leader in security operations, and SentinelOne™, an industry leader providing Advanced Endpoint Detection to protect ourselves and our clients from malicious cyberattacks.
We’ve also taken these steps for ourselves and our clients:
- Implementing multi-factor authentication.
- Updating software and hardware.
- Keeping an inventory of software and hardware to ensure we implement patches and updates quickly.
- Creating secure backups, testing restores and ensuring our clients can “rollback” – that is, restore files that have been maliciously encrypted or deleted.
- Centralizing security to ensure patches and updates roll out at a single access point quickly.
- Creating access constraints – known as “least privilege” – which grants users access only to what is essential to do their jobs. This leaves no accidentally open entry points for hackers to gain access to a client’s infrastructure.
