{"id":310852,"date":"2021-07-28T18:13:32","date_gmt":"2021-07-28T15:13:32","guid":{"rendered":"https:\/\/en.buradabiliyorum.com\/as-cyberattacks-skyrocket-canada-needs-to-work-with-and-not-hinder-cybersecurity-experts\/"},"modified":"2021-07-28T18:13:32","modified_gmt":"2021-07-28T15:13:32","slug":"as-cyberattacks-skyrocket-canada-needs-to-work-with-and-not-hinder-cybersecurity-experts","status":"publish","type":"post","link":"https:\/\/buradabiliyorum.com\/en\/as-cyberattacks-skyrocket-canada-needs-to-work-with-and-not-hinder-cybersecurity-experts\/","title":{"rendered":"#As cyberattacks skyrocket, Canada needs to work with\u2014and not hinder\u2014cybersecurity experts"},"content":{"rendered":"

“#As cyberattacks skyrocket, Canada needs to work with\u2014and not hinder\u2014cybersecurity experts<\/strong>”<\/p>\n

\n
\n
\n
\"As
\n When assessing whether the Government of Canada meets standards for vulnerability disclosure in comparison to G20 members, we discovered that Canada is falling behind its peers. Credit: Cybersecure Policy Exchange, Ryerson University, Author provided
\n <\/figcaption><\/figure>\n<\/div>\n<\/div>\n

Cyberattacks are on the rise, impacting people, systems, infrastructures and governments with potentially devastating and far-reaching effects. Most recently, these include the massive REvil ransomware attack and the discovery that the Pegasus spyware was tracking more than 1,000 people.<\/p>\n

A common cause of cyberattacks involves the exploitation of security vulnerabilities. These are conditions or behaviours<\/a> that can enable the breach, misuse and manipulation of data. Examples can include poorly written computer code or something as simple as failing to install a security patch.<\/p>\n

Exploiting vulnerabilities<\/b><\/p>\n

There can be particularly significant impacts when attackers exploit security vulnerabilities involving digital systems used by federal governments. <\/p>\n

For example, in July 2015, the United States Office of Personnel Management announced that malicious hackers had exfiltrated highly sensitive personal information and fingerprints of roughly 21.5 million federal workers and their associates<\/a>, due to a string of poor security practices and system vulnerabilities.<\/p>\n

The massive data breach served as a wake-up call for the U.S. federal government. Barack Obama’s administration consequently announced the Department of Defense would be responsible for storing federal employee data<\/a>. <\/p>\n

Not long after that, the “Hack the Pentagon” pilot program was announced<\/a>, where the U.S. government invited external experts to responsibly report security flaws.<\/p>\n

This pilot paved the way for what has become a standard security practice used by the U.S. government. Since 2020, all American federal agencies have been required to enable the disclosure of security vulnerabilities<\/a>.<\/p>\n


\n