Cyber-attack on Australian Domain Registrar Puts Thousands of Websites at Risk

The Australian registrar has databases containing the domain name of various companies, and domain name system (DNS) server details. The company has started updating customers on the progress in the investigations, a week after the security incident. Unauthorized access to such information may allow attackers to redirect visitors of legitimate websites to malicious sites. Visit to malicious websites may result in download of malware without user's knowledge. Attackers may also attempt to extract financial information such as credit card details through malicious websites. Websites hosted by the company are more vulnerable to attacks. Attackers may gain unauthorized access to databases containing confidential information associated with such websites.

Regular security evaluation is crucial to safeguard computer systems, networks and websites. Inadequately protected network, power and communication cables, undefined access privileges, lack of restriction on access to printers and external devices create opportunities for offenders to perpetrate crime. Unauthorized access to critical devices may cause theft, damage and leakage of sensitive data, which may have negative financial and business implications. Security professionals of the company must periodically upgrade or replace outdated devices in accordance with improvements in technology. Old and obsolete equipment's may have confidential information. Organizations must have appropriate procedures to degauss data, and destruct obsolete equipment's. Hiring experienced professionals qualified in IT degree programs, and network administration, may help in devising appropriate hardware testing and quality assessment procedures.

Organizations must have appropriate incident management and response procedures in place to deal with security incidents. They must define and establish access controls to secure access to systems containing sensitive information. Regular huddle sessions, mandatory e-learning and online IT degree programs may help in creating cyber security awareness among employees. Proactive action is crucial to strengthen the defenses against cyber threats. Organizations may use Mock tests to test the preparedness of IT professionals in the event of security incidents. Professionals may leverage online IT courses and security certification programs to enhance their technical capabilities in dealing with sophisticated attacks.

eccuni

Contact Author