Microsoft’s latest Cyber Signals report highlights threats to large venues, and sporting and entertainment events, based on its learnings and telemetry from delivering cybersecurity support to critical infrastructure facilities during the State of Qatar’s hosting of the FIFA World Cup in 2022.
With major sporting events, like the recent netball and soccer tournaments across the world and on the African continent and more to look forward to later this year, such as the rugby and cricket contests, Microsoft anticipates that large scale events such as these will continue to attract cyberthreats.
“Cybersecurity threats to large events and venues, especially those in increasingly connected environments, are diverse and complex, and require constant vigilance and collaboration among stakeholders to prevent and mitigate escalation,” says Colin Erasmus, Chief Operations Officer at Microsoft South Africa.
Vulnerabilities of Venue IT Systems
Venue IT systems and arenas contain hundreds of known and unknown vulnerabilities that allow threat actors to target critical business services such as point-of-sale devices, IT infrastructures, and visitor devices.
Additionally, teams, coaches, and athletes themselves are also vulnerable to data loss on athletic performance, competitive advantage, and personal information.
“The huge swell of attendees and staff that bring data and information with them through their own devices increases the attack surface and can also be targeted through vulnerable event digital amenities, like companion mobile apps, wireless hotspots, and QR codes with malicious URLs,” adds Erasmus.
Microsoft Defender Experts Risk Assessment
Microsoft Defender Experts for Hunting developed comprehensive cybersecurity defences for Qatari facilities and organisations supporting the soccer tournament. Defender Experts for Hunting conducted an initial risk assessment, factoring in threat actor profiles, adversary tactics, techniques, and procedures, and other global intelligence from Microsoft’s telemetry.
Microsoft ultimately analysed more than 634.4 million events while providing cybersecurity defences for Qatari facilities and organisations throughout November and December of 2022.
Training Programmes Crucial for Educating Employees
Furthermore, user awareness and training programmes are crucial to educating employees and stakeholders about cybersecurity best practices, such as recognising phishing emails, using multifactor authentication or passwordless protection, and avoiding suspicious links or downloads. Microsoft Security Solutions also offer expert coverage on security matters.
“It is essential to partner with reputable cybersecurity firms to continuously monitor network traffic, detect potential threats in real time, and respond swiftly to any security incidents.
Knowing safe practices can help enterprises and attendees sidestep becoming victims of data theft or social engineering attacks,” concludes Erasmus.