Paris Olympics 2024 Sponsors Warned of Cyber-Attack Threats by Tenable

 


Tenable Warns of Heightened Cyber-Attack Risks for Paris Olympics 2024 Sponsors

As the Paris Olympics 2024 approaches, Tenable has issued a stark warning about the increased risk of cyber-attacks targeting key sponsors and individuals closely associated with the event. Cybersecurity experts caution that these groups are particularly vulnerable to cyber breaches, including ransomware, identity management breaches, and physical attacks on critical hardware such as CCTV systems and ticket gates.


The Gravity of the Threat

Past incidents underscore the severity of the threat. The Tokyo 2021 Games experienced an estimated 450 million cyber-attacks, highlighting the substantial risks that high-profile global events attract. Bernard Montel, EMEA Technical Director and Security Strategist at Tenable, noted, “Organizations associated with the games will soon enter an IT ‘freeze’ period, meaning their systems will be left as they are to avoid any periods of inaccessibility or disruption. While this makes sense, it also makes systems incredibly vulnerable because of a lack of proactive security updating.”

Comprehensive Security Measures

Securing computing environments from such cybersecurity threats requires meticulous preparation and a robust combination of resources, personnel, and technology. For entities at risk throughout July, Tenable recommends comprehensive measures, including:

  • Conducting a Full Inventory Check: Ensure all software is up-to-date and necessary patches are applied.
  • Revising User Permissions: Enhance user access security by identifying administrative accounts and implementing multi-factor authentication.
  • Careful Access and Identity Management: Accounts should only be created under exceptional circumstances.
  • Continuous Monitoring: Vigilantly watch for signs of abnormal behavior or suspicious activity, and be prepared to take immediate action if a critical vulnerability is identified.

The Opportunistic Nature of Cyber Threats

Montel emphasized the opportunistic nature of cyber threats during such large-scale events, stating, “The Olympic motto is Citius, Altius, Fortius, meaning Faster, Higher, Stronger. While Olympians live and breathe this sentiment, so too do the hackers and scammers preparing to exploit the Games.”

Vigilance and Preparedness

In anticipation of potential cyber-attacks, companies and sponsors involved in Paris 2024 must remain vigilantly prepared. “There are many sponsors and suppliers preparing to successfully deliver Paris 2024, all of whom will have dedicated infrastructure and resources. Unfortunately, this makes them prime targets for hackers over the next month,” Montel added.

A Variety of Anticipated Threats

The anticipated threats include ransomware and distraction attacks, where a Denial of Service (DDoS) attack targets critical systems already running at full capacity to divert attention and allow hackers to exploit other security gaps. Growing geopolitical tensions also raise concerns of physical threats targeting critical infrastructure such as CCTV systems, security gates, ticket turnstiles, and even energy providers.

Additionally, Microsoft recently warned of a disinformation campaign by Russia aimed at undermining the reputation of the International Olympic Committee and stirring fears of violence at the upcoming Games. This disinformation campaign could serve to further destabilize an already complex security environment.

Conclusion

As the Paris Olympics 2024 draws near, the heightened risk of cyber-attacks necessitates vigilant preparedness and proactive security measures from all involved. By taking comprehensive steps to secure their systems, sponsors and companies can help mitigate the threats posed by opportunistic cybercriminals and ensure the success and safety of this global event.


No comments:

CISA Sounds Alarm on ICS Security: Baxter and Mitsubishi Products Affected

  Cybersecurity Alerts: Vulnerabilities in Healthcare and Industrial Control Systems This week, the US Cybersecurity and Infrastructure Secu...