Carbon Black responds to Capital One breach

​

In response to the recent Capital One breach, Tom Kellermann, Chief Cybersecurity Officer at Carbon Black (www.carbonblack.com), and former cyber commissioner for President Obama comments, "This breach highlights a few important realities for cybersecurity in 2019.  First, perimeter-based security measures will not prevent 100% of attacks, 100% of the time.  Without visibility into what’s occurring on an enterprise, a business may be completely blind to attacks like this, especially when you consider that Paige Thompson once worked at Amazon as an engineer for the same server business that supported Capital One.  Modern threats comes can come from all domains, including former employees, partners or contractors. A business needs to consider all the potential risks and work to gain visibility across the business into where potential weaknesses exist. 

Second, it’s absolutely imperative for businesses to be securing their cloud infrastructures and the critical data they hold. Capital One is one of the most ‘cloud-forward’ financial companies in the world; they should be partnering with solution providers who are intimately aware of how to keep the cloud secure.

What should not be lost in this is that Capital One is one of the globe’s most recognisable and ubiquitous financial brands that houses critical financial and personal information. As Carbon Black’s research has found, financial institutions are increasingly being targeted by advanced attacks that leverage “island hopping,” lateral movement, counter incident response and fileless attacks. The modern bank heist is now in cyberspace. 

Capital One customers who are concerned about this breach should keep a close eye on their statements and report any suspicious activity immediately. Customers should also consider signing up for security alerts from Capital One and be extra vigilant over the coming months for possible phishing emails.”