Experts in cybersecurity are enduring a very difficult month.
The period currently referred to as Black October has not even concluded, yet it has already generated dozens of significant cyber threats and artificial intelligence-discovered flaws across the web.
Once severe vulnerabilities within PHP—the programming language powering roughly 70% of all websites—were brought to light using AI technology and revealed by the PHP Foundation on October 21st, a global rush to patch vulnerable servers commenced immediately.
Cloud infrastructure provider Cloudflare documented millions of exploit attempts targeting this flaw following its disclosure, succeeding thousands of similar attempts registered over the prior hours.
Certain nations, including Finland and France, temporarily restricted access to specific web platforms, while the National Security Agency (NSA) in the United States cautioned enterprises to apply security patches right away or take compromised systems offline.
NEAR protocol creator Illia Polosukhin stated, “We are at Security Armageddon now.” Meanwhile, Jason Clinton, the chief security adviser at Anthropic, warned that, “as bad as things have gotten in the past 4 days, they are going to get a lot worse before they get better.”
United Kingdom residents are even being encouraged to prepare for emergencies like extreme weather events or cyber incidents that might sever access to vital infrastructure such as the internet, water supplies, or electrical power. American military bases have received instructions to prepare for 90 days of autonomous operations under the FORTRESS program.
Houston, do we have a problem?
Aside from rushing out to store walkie-talkies and canned provisions, is there anything regular people can do to limit their vulnerability?
So how bad is Black October, really?
“It’s really bad. It looks like the rest of the internet is waking up to the reality we had three months ago,” shares Rob Hamilton, a Bitcoin security investigator involved with the Bitcoin Red Team, in an interview with Magazine.
UK government is urging citizens to be ready for an emergency. Source: gov.uk
Over the past week or so, cloud hosting firm Railway revealed that an unauthorized actor gained entry to and decrypted user credentials and API keys, seemingly focusing on AI service providers.
Related: France is world’s most dangerous place for Bitcoiners: 90 attacks in 7 months
Healthcare diagnostics titan Quest Diagnostics verified a breach affecting confidential patient health data, whereas Indian cybersecurity organization eMudhra was found to possess eight digital certificate authorities featuring weak keys that could potentially allow malicious actors to impersonate legitimate websites. Furthermore, code repository GitHub suffered a major outage that underscored how heavily the programming community depends on shared infrastructure.
Austin Devers, senior director of security at GitHub, remarks that events of this nature serve as a “clear reminder that reliability requires constant work,” because contemporary software development is “so connected.”
Railway security incident. Source: Railway
Jonathan Riss, an open-source intelligence and blockchain analytics expert at blockchain security company CertiK, told Magazine:
“What concerns us most is how a single weakness in shared infrastructure can expose many organizations simultaneously.”
Unfortunately, he notes that artificial intelligence’s capability to discover vulnerabilities is not matched by its ability to remediate them:
“Finding vulnerabilities faster does not automatically give us the capacity to resolve them faster.”
Why things are likely to get worse
One primary reason the situation continues to deteriorate is that AI has fundamentally altered the economics of cybersecurity.
Tasks that previously demanded state-level resources and advanced hackers can now be executed by a teenager sitting in a basement.
Matt Shumer, an AI investor and entrepreneur, pointed out that AI empowers non-technical individuals to discover flaws and exploit them, leaving defenders “racing to keep up.”
“Every weak spot still has to be fixed, tested and installed on millions of systems run by people who are already stretched thin.”
According to Devers, AI-powered security utilities are “dramatically” lowering the threshold for “uncovering complex, deep-seated flaws in widely used codebases.”
Related: Keystone says website breach exposed hardware wallet buyers’ addresses
What can ordinary people actually do?
There are several practical measures everyday individuals can adopt to remain safer online throughout this unstable period.
The internet is under attack. Source: Matt Shumer
Shumer advises avoiding unfamiliar websites, and firmly urges users against inputting passwords or credit card details into unknown platforms “until this blows over,” noting that smaller sites are the “least likely to have patched.”
Uninstall unused applications and disconnect smart home devices you do not require. Keep some physical cash at home along with a few days’ worth of groceries, “if you want to be extra careful.”
Devers states that the strongest defense involves “locking down personal access points and keeping overall footprints small.” Enable Multi-Factor Authentication (MFA) across every account, preferably utilizing an authenticator application or physical hardware security key rather than text messages.
“This acts as a circuit breaker and stops hackers from logging into your account even if the underlying software is compromised.”
He additionally emphasizes never reusing passwords: “Create strong, unique passwords for every site, and periodically disconnect old app permissions or third-party connections you no longer use.” Ensure your operating systems and web browsers update automatically:
“While platform teams work to fix cloud-level security issues on the backend, keeping your devices secure ensures hackers can’t use your personal hardware as a back door into your accounts.”
To self-custody or not self-custody, that is the question
While the alarming surge in security breaches has prompted certain cryptocurrency holders to explore alternatives and specific experts to recommend against self-custody, others—such as Casa chief security officer and Bitcoin proponent Jameson Lopp—remind users that doing so defeats the entire purpose.
“You can only benefit from Bitcoin’s unique properties when you hold your own keys. […] Giving up your keys doesn’t make the risk go away, he says. It moves the risk somewhere you can’t see or control.”
Riss advises dividing smaller balances intended for active use into a hot wallet while keeping long-term assets in a hardware storage device, and to “actually read what you’re signing rather than approving blind.”
Although these safety measures can minimize your susceptibility to threats, everyday users can merely secure local endpoints and possess minimal influence over broader issues.
You can “reduce blast radius,” he observes, “not prevent infrastructure compromise.”
Consequently, while users can enhance their personal cybersecurity habits, ultimately, “the structural burden sits with platforms and providers.”
Magazine: Scammer loses $4.8M stored on tampered Ledgers: Asia Express
Originally published at https://cointelegraph.com/magazine/cybersecuritys-black-october-how-to-protect-yourself?utm_source=rss_feed&utm_medium=rss&utm_campaign=rss_partner_inbound.
