{"id":109206,"date":"2020-04-14T06:00:28","date_gmt":"2020-04-14T13:00:28","guid":{"rendered":"https:\/\/www.paloaltonetworks.com\/blog\/?p=109206"},"modified":"2020-05-06T18:33:06","modified_gmt":"2020-05-07T01:33:06","slug":"policy-video-conferencing","status":"publish","type":"post","link":"https:\/\/www2.paloaltonetworks.com\/blog\/2020\/04\/policy-video-conferencing\/","title":{"rendered":"The Rush to Video Conferencing \u2013 Are We Failing to Use Good Cyber Hygiene?"},"content":{"rendered":"

Sadly, one of life\u2019s proven realities is, when a technology becomes popular adversaries will target it. With so many people switching to video conferencing, it\u2019s no surprise that adversaries have started to give it their focus. Indeed, as the <\/span>capacity of video conferencing in the cloud is being tested<\/span><\/a>, reports of misuse have already begun, and this should be a warning flag of more to come.<\/span><\/p>\n

So I come to my second truism, which is that all too often when we are in a rush the basic rules and lessons we\u2019ve learnt can go out the window. As such, when we are in challenging times or situations, we should try to ensure we still embrace our Security 101 logic.<\/span><\/p>\n

In recent weeks, there has been a spate of domain typosquatting, where adversaries are registering close to genuine domain names and then sending out invites. We have learnt to check the URLs in emails and web domains. We need to do the same for video conferences. Consider asking your IT security team to remind staff of this or including it in your phishing training program for employees, if you have one.<\/span><\/p>\n

What's created more noise in the last week is video conferencing bombing, where third parties look for valid video conference IDs that haven\u2019t been secured. News stories tell of third parties taking over sessions to show inappropriate content. But the reality is a third party could just as easily be a silent listener and simply grab valuable business intel either from the conversations or what's being shared onscreen.\u00a0<\/span><\/p>\n

This is a message not just for businesses to recognise but also society in general. Whether video conferencing is being used simply to catch up with friends or teach children from home, no one wants an uninvited and unpredictable guest on the line.<\/span><\/p>\n

Some very basic security controls can go a long way.<\/b><\/p>\n