Seasons greetings from a Russian hack attack group
Originally published in 2015
Pulling down the drawbridge Cybersecurity experts say companies and agencies should not rely on air gaps for protection. “Air gapping has long been an Achilles’ heel of cybersecurity,” said Daniel Lance of Archer Security Group. “Think about it—even castles were breached when they had moats.” “I have yet to encounter any truly air-gapped networks in my travels,” said Leonard Chamberlin, also of Archer Security Group. “There’s always some type of external communications path there, whether known or unknown, that prevents the network from being truly air-gapped.” Lance said air gaps may make you let down your guard. “Unplugging from a network isn’t removing vulnerability. It simply changes the attack vector,” explained Lance. “In some cases, it even improves the effectiveness of an exploit. If I believe my network is safe, I might start to ignore warning signs.”
