123 Reg's AI Attack
UK registrar 123 Reg says an "AI-driven cyberattack" on September 18 exposed customer data, and it suspects a China-nexus attacker.
Key terms
AP Cybersecurity alignment
- 1.2.C.3When available, users should enable multifactor authentication (MFA), which will require the user to provide extra proof of identity—such as a one-time code—in addition to the password as an extra layer of security.Learning objective: Explain how to make authentication stronger.
- 2.1.C.6In the taking-action phase of an attack, adversaries act on their objectives by collecting targeted data, exfiltrating it, and disrupting services or destroying data.Learning objective: Describe the phases of a cyberattack.
- 5.1.C.1Data security risks can involve a compromise of confidentiality when unauthorized persons can access sensitive data, integrity when data can be manipulated or altered from its intended state, and availability when data can be…Learning objective: Assess and document risks from application and data vulnerabilities.
AP Networking alignment
- 1.4.B.1To prevent phishing-based account compromise, users should verify message sources and use caution before interacting with emails or messages, especially those requesting sensitive information. Users should: • verify the…Learning objective: Implement device- and account-level security practices to prevent phishing, credential compromise, and data loss.
- 1.4.B.6To protect devices and accounts from unauthorized access, users should configure strong security settings. Users should: • enable MFA • enable screen lock with a strong PIN, password, or biometric authentication • disable…Learning objective: Implement device- and account-level security practices to prevent phishing, credential compromise, and data loss.
- 4.1.A.3When confidentiality is compromised, systems are vulnerable to having sensitive data exposed or stolen. A breach of confidentiality can be identified by: • unauthorized access • network traffic showing exfiltration of…Learning objective: Identify evidence of compromised confidentiality, integrity, or availability.