Cybersecurity Threats in 2021 and Onward – How Nx Remains Secure

• Compromised Credentials – 20%
• Phishing – 17%
• Cloud Misconfiguration – 15%
• 3rd Party Vulnerability – 14%
• Physical Security Compromise – 9%
• Malicious Insider – 8%
• Accidental Data Loss/Lost Device – 6%
• System Error – 5%
• Business Email Compromise – 4%
• Social Engineering – 2%

Compromised Credentials / Password-Cracking

In password-based attacks, hackers use software and brute force attacks to access secure accounts.

• Nx has minimum password standards, an invalid login timeout, and a secure password reset / recovery method for Nx Cloud connected Systems. Users may also enable two-factor authentication for an added layer of security.
  

Phishing

Phishing is a method of sending fraudulent communications – usually email –  which mimic a reputable source in order to obtain login credentials.

• Phishing attacks could cause Nx System users to inadvertently give their login credentials to nefarious actors. Nx’ Secure Password Reset functionality ensures passwords are able to be reset / recovered quickly in such an instance.

Cloud Misconfiguration

Cloud Misconfiguration occurs when gaps or weak points in a cloud’s configuration leaves it at risk for attacks.

• Nx Cloud securely proxies remote connections to systems, removing the need to open or forward ports on secure networks.
• Nx has minimum password standards, an invalid login timeout, and a secure password reset / recovery method for Nx Cloud connected Systems.

Vulnerability in 3rd Party Software

A potential threat to an organization’s data, internal information, etc. caused by a vulnerability in a 3rd party’s supply chain or other outside parties.

• Nx monitors market news regularly and updates our customers about vulnerabilities as they emerge, are documented, and are addressed.

Physical Security Compromise

Physical Security Compromises occur when sensitive data or files have been breached due to the theft or unauthorized access of physical hardware. 

• Accidental Data Loss / Lost Device: Similar to a physical security compromise, accidental data loss is a breach in security due to weaknesses brought about by human error.
  • A physical security compromise and/or accidental data loss could give bad actors access to and the ability to control Nx systems. 
  • Nx has minimum password standards, an invalid login timeout, and a secure password reset / recovery method for Nx Cloud connected Systems. 

Malicious Insider

A security risk that originates from within the targeted organization – via a current or former employee or business associate who misuses their access to sensitive information or privileged accounts.

• Nx allows for fast reset / recovery of passwords.

System Error

A breach in security due to weaknesses brought about by a system error or misconfiguration.

• Nx uses HTTP and SSL to communicate with all System servers for secure, encrypted communications.

Social Engineering 

The use of deception to manipulate individuals into divulging confidential or personal information that may be used for fraudulent purposes.

• Business Email Compromise: A type of Social Engineering, business email compromises occur when an attacker manipulates employees inside an organization to divulge confidential information or perform unauthorized transactions by posing as someone the recipient trusts—typically a colleague, boss, or vendor. 
  • Nx allows for fast reset / recovery of passwords.

Other popular Security Threats include:

Malware
Malicious software that installs on computers through a vulnerability in an operating system or a piece of software. 

• Malware could potentially be used to intercept user credentials and video streams, or cause the user’s Nx System to function poorly due to interruption in system or network resources caused by the Malware.

Man-in-the-Middle Attack

This type of attack occurs when the attackers insert themselves into the middle of communications between two parties in order to intercept sensitive data. Typically this is accomplished by monitoring network traffic or through the use of Malware.

• Nx secure communications capabilities – including OpenSSL connections, HTTPS communications, and encrypted video traffic – were engineered to address this type of attack.

Distributed Denial of Service Attack (DDOS)

This type of attack is designed to flood systems, servers, or networks with traffic to exhaust resources, effectively killing the system’s ability to perform normally.

• Nx’ secure communications (SSL, HTTPS, Cloud Proxy, Secure Connections, and Encrypted Video) help to prevent DDOS attacks and server health monitoring provides the ability for operators to diagnose DDOS attacks in real-time.. 

SQL Injection

SQL injection occurs when a malicious actor inserts code into a server running an SQL database that forces the server to reveal information. 

• Nx utilizes the OWASP standard for prevention of SQL injection attacks and employs additional obfuscation techniques.

Zero-Day Exploit

A zero-day exploit hits after a network vulnerability is announced but before a patch or solution is implemented.

• Nx monitors market news regularly and updates our customers about Zero Day vulnerabilities as they emerge, are documented, and are addressed.