Martti Kebbinau emphasizes the need for broader awareness of cyber hygiene to bolster corporate cybersecurity.
In the second quarter of 2024, Telia’s security measures thwarted over 700 million cyberattacks intended to disrupt business activities. This is not an isolated incident; the first quarter saw a staggering 729 million attacks. While such figures may seem excessive, they underscore a stark reality that businesses must confront. Yet, many still view cybercrime as a fleeting concern that will eventually fade away.
Imagine someone repeatedly trying to break into your home through every door and window throughout the day, aiming to steal all your valuables. The analogy here is that cybercriminals are infiltrating the digital realm, seeking to exploit unsecured virtual entry points to steal crucial data or disrupt operations, using ever-advanced technology.
Despite this threat, people tend to invest heavily in home security, opting for high-end locks and alarm systems, while businesses often skimp on similar precautions. Business data holds far greater value than household possessions, and its theft can result in severe reputational harm or even business closure.
Recent data breaches, such as those affecting Apotheka with the theft of 10,000 health records, Asper Biogene’s genetic data theft, and the Finnish psychotherapy center Vaastamo’s bankruptcy due to ransomware and data leaks, highlight the pressing nature of these threats.
Even though reports of cyber incidents are frequent, many local businesses are slow to learn from these examples. One reason is the high cost of robust cybersecurity measures, which can be a tough sell during economic downturns. Moreover, many businesses mistakenly believe their sector is not a target for cybercriminals.
This assumption is quickly debunked by Telia’s Turvanet report, which shows that in the past quarter, the manufacturing sector faced over 137 million attacks, wholesale and retail trade experienced over 127 million attacks, and the hospitality and catering industry saw over 90 million attacks. Real estate-related businesses were also significantly targeted. Other sectors were not spared either.
A major issue is the widespread lack of understanding about cybersecurity. Many non-IT professionals struggle to grasp the threats posed by malicious bots, which targeted Telia’s business clients over 3.5 million times last quarter, phishing sites, which were blocked over 467 million times, and DDoS attacks, which surged by over 70 percent from the first quarter. People tend to ignore what they don’t understand.
Therefore, the inclusion of cybersecurity skill development across all age groups in the national cybersecurity strategy by the Ministry of Economic Affairs and the Information System Authority is a significant step forward. Improving cyber hygiene awareness among the general population will undoubtedly strengthen corporate cybersecurity.
Research indicates that employee accounts are often vulnerable points through which hackers can breach company databases. Employing skilled cybersecurity professionals who stay ahead of threats and train others to identify risks is crucial.
Recently, a significant number of attacks originated from Western countries, with the USA (over 189 million), Poland (over 180 million), and Canada (over 93 million) leading the way, while attacks from Russia numbered around 871,000.
Moreover, there has been a notable rise in attacks from countries like India, China, and various African nations. It’s important to note that cyberattacks are not necessarily perpetrated by individuals from these countries; rather, the global nature of the internet means that infected devices and servers can be operated from anywhere.
Despite being on Europe’s periphery, we are not immune to cyberattacks. The trend is towards increasing incidents, signaling that these attacks are becoming a prevalent form of digital burglary driven by easy gains. Just as we adapted to the threat of physical burglaries in the 1990s by enhancing home security, it is now crucial to safeguard our digital assets with sophisticated virtual security systems.
