The choice of printers as targets for

[relemedf5w023]

Once the attackers have gained access to the network, they look for credentials to penetrate sources of confidential information. “If the attack is successful, the attackers can gain access to the credentials of the domain used to configure the enterprise’s printer services and connect to the company’s internal resources,” they add.

attacks is due to their weak security, which gives room for maneuver and helps to hide from corporate firewalls. "The network activity of printers is not monitored, and an attacker can, for example, change the code in the printer's memory, which is deleted upon reboot, leaving no traces," the experts explain.

Solutions
How can enterprises protect their networks, which hong kong whatsapp data have dozens or hundreds of printers of different models connected to them? It is important to understand that the attack surface expands in direct proportion to the number of network devices: the more of them, the higher the risks. One of the options for protection is self-healing methods. We are talking about artificial intelligence-powered intrusion detection systems that autonomously track and suppress threats before they spread across the network. But NCC Group experts are skeptical about such methods. According to them, in most cases, an attacker exploits a vulnerability that developers have overlooked, but how can autonomous detection systems know about them if the developers themselves do not know about them? “An attacker will develop an exploit for a printer they control so that it can bypass any binary vulnerability protection methods or any detection system that the printer may have,” the experts explained.

An enterprise can strengthen its defenses with AI that detects abnormal network behavior. For example, it can detect when a printer fails to communicate with the network, prompting the IT department to respond, but such software does not guarantee 100% protection. “Anomaly detection systems are probabilistic, and sophisticated attacks can still bypass them,” security experts warn.