By using this site, you agree to the Privacy Policy and Terms of Use.
Accept
eBusiness Life MagazineeBusiness Life Magazine
  • Home
  • NewsBytes
  • Big Issues
  • Columns
  • Cyberparenting
  • Tech Talk
  • Gadget Review
  • Interviews
  • Our People
Notification Show More
Font ResizerAa
eBusiness Life MagazineeBusiness Life Magazine
Font ResizerAa
  • Categories
  • More Foxiz
    • Blog Index
    • Sitemap
Follow US
eBusiness Life Magazine > Blog > NewsBytes > HP Wolf Survey Calls For Security Concerns Over Firmware Attacks
NewsBytes

HP Wolf Survey Calls For Security Concerns Over Firmware Attacks

ELadmin1
Last updated: 2022/07/01 at 6:33 AM
By ELadmin1
Share
6 Min Read
SHARE

HP Inc. has released research from HP Wolf Security showing changing workforce dynamics are creating new challenges for IT teams around firmware security. As business workforces become increasingly distributed, IT leaders say it’s harder than ever to defend against firmware attacks.

The shift to hybrid work models has transformed how organizations manage endpoint security, while also highlighting new challenges for IT teams around securing device firmware. The HP Wolf Security global survey of 1,100 IT leaders reveals that:

  • The threat of firmware attacks is a growing concern for IT leaders now that hybrid workers are connecting from home networks more frequently: With hybrid or remote work now the norm for many employees there is a greater risk of working on potentially unsecure home networks meaning that the level of threat posed by firmware attacks has risen. More than eight-in-ten (83%) IT leaders say firmware attacks against laptops and PCs now pose a significant threat, while 76% of ITDMs said firmware attacks against printers pose a significant threat.
  • Managing firmware security is becoming harder and taking longer in the era of hybrid work, leaving organizations exposed: More than two-thirds (67%) of IT leaders say protecting against, detecting, and recovering from firmware attacks has become more difficult and time-consuming due to the increase in home working, with 64% saying the same of analyzing the security of firmware configuration. As a result, 80% of IT leaders are worried about their capacity to respond to endpoint firmware attacks.

Speaking on the threat level, Global Head of Security for Personal Systems at HP Inc., Dr. Ian Pratt said: “Firmware attacks are very disruptive and much harder to detect or remediate than your typical malware – often requiring expert and even manual intervention to fix. This increases the cost and complexity of remediation considerably, particularly in hybrid environments where devices are not on site for IT teams to access. Having more endpoints sitting outside of the protection of the corporate network also reduces visibility and increases exposure to attacks coming in via unsecured networks.”

“At the same time, we are seeing a rise in destructive attacks – such as wiper malware. Last year, our research team saw attackers conducting reconnaissance on firmware configurations, with the likely intent of exploiting unsecured configurations to weaponize for financial gain. Once an attacker has gained control over the firmware configuration, they can exploit their position to gain persistence and hide from anti-malware solutions that live in the Operating System (OS). This gives them an advantage, allowing them to stealthily maintain persistence on target devices, so they can gain access to infrastructure across the enterprise and maximise their impact.”

Ad imageAd image

The security report notes that despite the clear risks that firmware attacks pose to organisations, device security is not always a major consideration in the hardware procurement process, with many organisations continuing to use technologies that are not built with security in mind. This issue is being exacerbated by the new shadow IT whereby employees are purchasing and connecting devices outside of IT purview while working remotely. HP Wolf Security’s Out of Mind and Out of Sight report found that 68% of office workers that purchased devices to support remote work said security wasn’t a major consideration in their purchasing decision. Furthermore, 43% didn’t have their new laptop or PC checked or installed by IT or security.

Chief Technologist for Security Research and Innovation at HP Labs, Boris Balacheff, comments: “Security must become part of the procurement process when purchasing new IT devices. Organizations need to play the long game, because the devices you procure today will be the environment you have to manage and protect tomorrow. State-of-the-art device security delivers protection for firmware against malware as well as physical tampering, with detection both below and above the OS and autonomous self-healing recovery from the hardware up – but this will only help address the issue for organizations that know to ask the right questions when they procure new devices.”

HP warns that one of the key issues that businesses face is that many organizations are still reliant on legacy devices that were built to older industry standards, where design for manageable security and resilience at scale was not a focus for hardware and firmware design. This is leaving a gap in enterprise security that could take years to close.

Balacheff concludes: “As attackers continue to invest in the capability to attack and disrupt PCs and other OT and IoT devices at the firmware level, organizations also need to learn how to monitor the state of the art in device security to keep updating procurement security requirements accordingly. This is what will enable leading organizations to stay ahead of emerging threats and protect, detect and remediate firmware attacks at scale in the era of hybrid work.”

ELadmin1 July 1, 2022 July 1, 2022
Share This Article
Facebook Twitter Whatsapp Whatsapp LinkedIn Copy Link Print
Leave a comment Leave a comment

Leave a Reply Cancel reply

Your email address will not be published. Required fields are marked *

Get Started
Additive Manufacturing Making Impact on Digitalization, More Sustainable Workflows – Study

With 3D printing making an impact on the digitalization of manufacturing and…

NCC Cautions MNOs Over Interconnection Agreements Default

… Lifts Phased Disconnection Mandate Against Globacom In a bid to protect…

Infrastructure Financing: AfDB And InfraCredit Sign $15 million Funding Agreement

The African Development Bank (AfDB) and Infrastructure Credit Guarantee Company Limited (InfraCredit)…

Moniepoint, NITHub Unilag Kicks Off 2nd Cohort Of HatchDev Programme 

Moniepoint Inc, Africa's top digital financial services provider, in collaboration with University…

Stakeholders Seek Ways To Mitigate Telecom Fibre Cuts

The Association of Telecommunication Companies Of Nigeria (ATCON) has highlighted fibre cuts…

Konga Health, L’Oréal Partner to Raise Personal Care Awareness with Discount Campaign
May 22, 2025
Canal+ MultiChoice takeover A Step Away From Final Approval
May 22, 2025
Intellectual Property: Temu Signs MoU With IACC, Joins Advisory Council
May 22, 2025
Despite Knowledge Gap, Marketing Leaders See Strong Potential In gTLDS – New ICANN Research
May 22, 2025
Containerized Infrastructure With Exposed Docker APIs At Risk Of New Cyber Attack – Kaspersky Alert
May 22, 2025

You Might Also Like

NewsBytes

Konga Health, L’Oréal Partner to Raise Personal Care Awareness with Discount Campaign

By Ebusiness Life
NewsBytes

Canal+ MultiChoice takeover A Step Away From Final Approval

By Ebusiness Life
NewsBytes

Intellectual Property: Temu Signs MoU With IACC, Joins Advisory Council

By Ebusiness Life
NewsBytes

Despite Knowledge Gap, Marketing Leaders See Strong Potential In gTLDS – New ICANN Research

By Ebusiness Life
Facebook Twitter Instagram
Company
  • Advertisement
  • Privacy Policy
  • Editorial Policy
  • Contact US
More Info
  • Newsletter

Sign Up For Free

Subscribe to our newsletter and don’t miss out on our latest reports

Join Community

Copyright 2023. Designed by Kreative TechPoint

adbanner
AdBlock Detected
Our site is an advertising supported site. Please whitelist to support our site.
Okay, I'll Whitelist
Welcome Back!

Sign in to your account

Lost your password?