CTS Attack: State-Sponsored & Serious Crime
What’s the problem?
Law firms are failing to prioritise their cybersecurity. Encompassing everything connected to the Internet, this failing not only ignores internal security but also their third-party supply security. As such, firms across the legal sector are unknowingly and unwittingly adopting insecure positions by default.
What’s the harm?
This month’s cyberattacks on Allen & Overy and IT provider CTS are symptoms and outcomes of these failings. The damage these attacks have inflicted is extensive and potentially unlimited, with consequential impact unknown.
What should law firms do?
There is only one way to prevent such attacks from occurring. That is by prioritising robust and resilient cybersecurity. This must include Internet Assets, Domains, DNS records and servers.
“Prioritising ‘REAL’ cybersecurity is the only way to prevent cyberattacks. Everything else is simply waiting.” Andy Jenkinson, CIP CEO, Global DNS Security Expert
You cannot be cybersecure without significant effort and expertise.
How do law firms do this?
To find out about your current cyber exposure and risk – and learn what you can do about it – get in touch:
CTS Attack Update for Law Firms (25/11/2023) – Andy Jenkinson (Cybersec Innovation Partners) and Sophie Newbould (innov8law)