Over the past few weeks, we've seen a massive spike in remote workforces. Seemingly overnight, companies are transforming traditional office personnel into remote workers. While the catalyst has prompted swift actions to protect employees' health, companies are struggling to provide the technical resources needed to maintain business continuity – without incurring added risk – under these new circumstances. Existing infrastructure had to be scaled or new infrastructure had to be deployed to meet the demand. When people's health and wellbeing are at stake, it's understandable that organizations couldn't necessarily take the time to consider the cybersecurity ramifications of these actions.
The Secureworks® Adversary Group works with our customers on a daily basis, and we have noticed an uptick in concern regarding how to best address the external attack surface of their remote access deployments. To address immediate health and safety risks, some organizations have had to deploy technology with which they were unfamiliar or untrained to properly use – with only hours to do so. With uncertainty ahead, organizations that have rapidly adopted remote practices are essentially building the car while driving, which presents significant challenges operationally and unfortunately, it also presents opportunity to opportunistic threat actors. Over the last few weeks, we've worked with several customers, testing their remote access infrastructure to make sure it was implemented correctly. The more awareness companies have regarding their remote access vulnerabilities, the better prepared they'll be to defend against a potential attacker.
Two primary issues should be investigated to thoroughly test remote access infrastructure from an Internet connection:
Investigate potential exposure points within the appliances / infrastructure resulting from a technical misconfiguration. Popular vulnerabilities like the ones found in securing remote adoption growth
