Trends in the IT industry also indicate changes related not only to protection but also to the threats to data processed in IT systems, as well as data collected by various devices connected to the Internet.
GDPR Will Change Everything
Receive a package of free GDPR guides and micro-trainings
It should not be forgotten that May 25, 2018, is the date from which every data controller obligated to do so must have implemented and applied GDPR solutions. This means that latecomers have less than six months to complete a vast amount of implementation work. In this situation, it is worth considering whether to seek assistance from a specialized company engaged in GDPR implementations. Time is running out, and the sanctions provided for in GDPR for non-compliance can be quite daunting.
Personal Data as a "Hot Commodity"
The year 2018 will likely be remembered as the year in which the first court case in Poland related to a serious data breach began. The entire country was informed that nearly a million personal data records had allegedly leaked from the office of a court bailiff and were shared with third parties.
Unfortunately, this phenomenon perfectly illustrates how highly sought-after personal data is in the market. The previous trade in mailing lists is no longer sufficient, and criminals are beginning to reach into much broader areas of our lives, obtaining our PESEL numbers, residential addresses, or even information about our health status.
The GDPR may mitigate this phenomenon through high financial penalties imposed on entities and individuals employing improper practices in the field of personal data protection.
New Areas of Interest for Hackers
Experts predict that ransomware attacks will continue to evolve in 2018. Recently, there has been a consistent increase in attacks carried out using this method, and there are no signs that this trend will change. Although these types of attacks are not technically more sophisticated, they rely solely on user negligence. The increasing volume of tasks to be completed and the growing number of emails flooding our inboxes will make ransomware one of the main threats lurking for each of us in 2018.
Unfortunately, hackers will not overlook the area of the so-called Internet of Things (IoT), which has recently firmly established itself in our homes and cars. Video cameras and microphones installed, for example, in televisions are increasingly becoming a source of interest not only for hackers but, as reported by the whistleblower portal WikiLeaks, also for government agencies. The Internet of Things has entered our lives to such an extent that the issue of the data processed within it is becoming increasingly noticeable.
Important
Practically every one of us uses an Internet-connected television at home, and "smart" ovens or refrigerators that inform us about the need to purchase certain products are becoming more common. This new functionality—besides the obvious benefits for the user—also generates a number of dangers. Manufacturers of such devices focus primarily on functionality, often neglecting their proper security. As a result, an increase in attacks on these types of devices should be expected, not only to gain control over them but primarily to obtain data about the preferences and habits of their users, which can be used to define the purchasing preferences of the device owners.
The automotive sector will also not go unnoticed. Most modern cars are equipped not only with smart media stations that connect to the Internet, allowing for web browsing, watching online television, etc., but also with remote diagnostics and vehicle telemetry monitoring. Each of these functionalities utilizes Internet connections, making them vulnerable to attacks aimed at both taking control of the vehicle and acquiring data from it. Data regarding driving behavior, dynamics, number of passengers, or vehicle location is becoming increasingly attractive for marketing purposes, thus placing it in the crosshairs of cybercriminals.
The same situation applies to various gadgets used to monitor the health of their users. Smartwatches and fitness bands, which connect directly to phones and thus automatically to the Internet, are very popular. These devices collect a range of information about our lifestyle, health, and eating habits. Such data constitutes a valuable "commodity," particularly in the sports, medical, or insurance industries, making it one of the main areas of interest for cybercriminals.
Cryptocurrencies – a threat like never before
The emergence and popularization of cryptocurrencies such as bitcoin, ethereum, and litecoin have caused quite a stir not only on the Internet but also in international currency markets. The price of bitcoin has already reached nearly 50,000 zlotys, and this value may still increase. Cryptocurrencies, which are not recognized as legal tender in any country in the world, have led to a kind of revolution taking place before our eyes. Unfortunately, this type of payment method has become an excellent tool for carrying out often illegal transactions in the so-called dark web (the Internet used, for example, for selling illegally obtained data, such as credit card numbers, etc.).
Important
The threats associated with "mining" cryptocurrencies, i.e., searching the Internet for specific data, are significant because this process requires substantial computing power and a fast Internet connection. To this end, seemingly ordinary applications, such as office software, are created that, without our knowledge, "mine" cryptocurrencies, consuming our internet bandwidth and often significantly burdening our computer's resources. Unfortunately, one can become infected with cryptocurrency mining simply by browsing ordinary websites, which may contain code that, when executed, causes the visitor's computer to start mining - such a situation occurred earlier this year when one of the largest newspapers in Poland had a hidden script on its portal.
The National Bank of Poland and the Financial Supervision Authority have issued warnings about the dangers posed by cryptocurrencies, and the National Judicial Administration is seizing "miners" used for finding cryptocurrencies online, thus initiating discussions at the national level about the threats posed by cryptocurrencies. It should be noted that cryptocurrencies do not have real backing, as is the case with recognized means of payment, such as the Polish złoty, which is guaranteed by the country's central bank. Unfortunately, acquiring cryptocurrencies poses a threat to each of us, as criminals will create seemingly innocuous-looking software (messengers, performance testing applications, etc.) that, unbeknownst to us, utilizes the acquired hardware resources for mining cryptocurrencies. This phenomenon is becoming increasingly common, and given the current prices of cryptocurrencies, it will certainly gain momentum.
New Threats and New Protections
Working with good GDPR tools is not work!
Summary
The coming months will bring many changes to the data protection system currently in place. Many new requirements will affect not only data controllers but also the IT industry. An increasing number of threats from the internet will lurk for us both on the websites we browse and, above all, in our email inboxes or from devices connected to the Internet. The revolution in online payments utilizing cryptocurrencies is sweeping across the globe, so it is likely that most of us will also have the opportunity to encounter this form of payment.
It is important to remember that not only technology is evolving—attack techniques and theft methods via computer hardware and the Internet are also changing. Increasingly "sophisticated" methods of acquiring not only our data but also our money are becoming a threat that we must contend with every day.
