Hey, do you know what happens when you take all your staff and have them work without web proxies and office firewalls and security appliances?

You rely on every endpoint having working security controls.

The press were looking for Coronavirus angles on every InfoSec story to pass the coverage bar a few months ago.

But the story hasn’t been Coronavirus themed lures particularly.

It’s that companies often aren’t prepared for these ways of working, and the gaps are super real.

Example: fictional org with 2000 call center workers on Win7 laptops in an office.

Proxy blocks personal webmail. Corporate email filters Emotet. Firewall has IDS and blocks Emotet C2 on wire. Sweet.

Everybody works from home. Karen opens Emotet from Yahoo email.

It’s obviously creating pressure on InfoSec people in an already problematic situation.

‘threat actors’ are often just businesses nowadays. As companies begin to run into financial woes they will struggle to pay ransoms - attackers will become even more aggressive and numerous.