New Year’s cybersecurity resolutions that every startup should keep


As regular readers of TechCrunch will know, 2024 was — much like the years before it — full of data breaches, ransomware attacks, and mass-hacks exploiting some of the most trivial software vulnerabilities. Even the most well-resourced organizations failed to keep hackers out of their systems over the past twelve months. AT&T experienced its second massive breach of the year, this time affecting “nearly all customers”; Ticketmaster had an alleged 560 million records stolen in the hack of cloud storage giant Snowflake; and health insurance giant Change Healthcare was hit by a ransomware crew that accessed the sensitive medical details of at least a third of all Americans. 

Your startup doesn’t have to suffer the same fate in 2025. Some of the simplest things in security can help keep malicious hackers at bay. 

Here are some simple — but effective! — cybersecurity resolutions you should make as we head into the new year. 

Securely store your company passwords

Password managers securely store all of your company passwords, so your employees don’t have to worry about remembering them. Password managers also help to create and save unique and complex passwords for all your accounts. This can help prevent account intrusions caused by password re-use, where hackers take advantage of people using the same username and password across various online accounts. As soon as one password is compromised, the hackers can access the person’s other accounts using the same password. Some companies are moving away from passwords altogether and relying on passkeys, which are resistant to phishing attacks, and other passwordless technology.

Implement multi-factor authentication

Passwords alone are not on their own enough to defend your most important accounts against malicious threats. Hackers stole at least 1 billion personal records in 2024, helped largely by the use of stolen credentials for corporate accounts that were left unprotected by multifactor authentication. 

MFA, a security feature that requires users to provide an additional code beyond just a password when logging in, makes it far more difficult for cybercriminals to break into online accounts. In the case of cloud computing giant Snowflake, mandating the use of MFA could have prevented a pair of hackers from stealing highly sensitive data from AT&T and more than a hundred other corporate customers.

Most security folks will recommend using authenticator apps that generate login codes on the device, rather than codes sent by SMS text message, which can in some cases be intercepted.

Keep your software up-to-date

Some of the most damaging breaches of 2024 were caused by a years-old problem: Unpatched vulnerabilities in third-party software. One big hacking target in recent years are managed file-transfer tools, the software used by large companies and enterprises for transferring often large data files over the internet. Some file-transfer products and other enterprise technologies have been around for years (or longer), and are targeted for their propensity to store troves of sensitive company data. 

While some bugs are exploited as zero-days — a vulnerability that comes to light before a patch is available — the best thing companies can do is ensure your internal software is kept up-to-date and that security patches are applied as soon as possible. 

Backup your company data

Ransomware attacks had another record-breaking year in 2024, with companies paying hackers huge sums of money in order to get their data back (and prevent it from being leaked online). Regularly backing up your company’s data is a critical line of defense against data encryption and data-theft attacks. Backups, too, can also be targeted by hackers for their ability to help victims effectively restore their business operations without significant data loss. Having encrypted offsite backups can help in the event of security or data disasters.

Stop picking up the phone

While hackers have for years relied on malware-laced email lures as their weapon of choice against unsuspected victims, some hacking groups are turning to fraudulent phone calls as their primary way of hacking into organizations. A single phone call to the IT help desk of casino and hotel giant MGM reportedly led to its massive breach in 2023, which cost the entertainment giant at least $100 million. As TechCrunch’s Zack Whittaker writes perfectly here: Always be skeptical of unexpected calls, even if they come from a legitimate-looking contact, and never share confidential information over the phone without verifying them through another means of communication first.  

Be transparent

Even if you do everything right, there are no guarantees that your startup won’t be targeted. Startups are a prime target for hackers, thanks to their limited resources compared to larger companies. If your company falls victim to a cyberattack, being upfront about the incident can make a real difference in terms of outcomes. Transparency can help your customers take any action as necessary, and sharing information can help others defend against similar attacks in future. 

Not only can keeping a data breach under wraps cause reputational damage and potentially cost you significantly in fines — but it could also land you a spot in TechCrunch’s annual ‘badly handled breaches’ roundup. 



Source link

Related Posts

133 thoughts on “New Year’s cybersecurity resolutions that every startup should keep”

  3. مایمیدیو، وزارت آموزش و پرورش به منظور تسهیل دسترسی کاربران به خدمات الکترونیکی، اقدام به راه‌اندازی سامانه‌های متعددی مانند سایت مای مدیو my.medu.ir نموده است.

    Reply

  9. eptamin.ir، سامانه نسخه الکترونیک تامین اجتماعی ep.tamin.ir یکی دیگر از سایت های سازمان تامین اجتماعی در جهت ترویج خدمات الکترونیکی می باشد

    Reply

  11. منابع دکتری روانشناسی بالینی وزارت بهداشت، شامل کتاب‌ها و مراجع معتبر در حوزه‌های مختلف روانشناسی، به‌ویژه روانشناسی بالینی، روان‌درمانی، آسیب‌شناسی روانی، آمار و روش تحقیق، نوروسایکولوژی، و روان‌سنجی هستند.

    Reply

  27. hey there and thank you for your information – I’ve certainly picked up anything new from right
    here. I did however expertise some technical issues using this site, since I experienced to reload the website
    lots of times previous to I could get it to load correctly.
    I had been wondering if your hosting is OK? Not that I’m complaining, but sluggish loading instances times
    will often affect your placement in google and can damage
    your high-quality score if advertising and marketing with
    Adwords. Anyway I am adding this RSS to my email and could look
    out for much more of your respective interesting content.
    Make sure you update this again soon.

    Reply

  47. You won’t believe what happened!

    Elon Musk went undercover as a homeless man in a luxury restaurant, and the shocking ending will leave
    you speechless! This social experiment reveals a powerful lesson about kindness, respect,
    and true character.

    Watch till the end to see how one simple act of kindness changed everything!
    ❤️

    Don’t miss this eye-opening video!
    #ElonMusk #SocialExperiment #KindnessMatters #MustWatch

    Reply

  49. افتتاح حساب بانکی ویژه فرهنگیان در بانک صادرات ایران، در راستای حمایت از جامعه فرهنگیان کشور، بانک ها اقدام به ارائه خدمات مالی ویژه ای از جمله افتتاح حساب بانکی ویژه فرهنگیان در بانک صادرات ایران کرده اند.

    Reply

  51. کندو مای مدیو، سایت کندو به آدرس kandoo.medu.ir توسط مرکز توسعه ی آموزش مجازی، فناوری و امنیت اطلاعات وزارت آموزش و پرورش در جهت ارائه بستر آموزش مناسب در مقطع های مختلف تحصیلی راه اندازی شده است.

    Reply

  55. سامانه پذیرش استعدادهای برتر ملی دانشگاه فرهنگیان، دانشگاه فرهنگیان، به منظور جذب نخبگان و استعدادهای درخشان، سامانه پذیرش استعدادهای برتر ملی دانشگاه فرهنگیان را به نشانی reg.cfu.ac.ir راه‌اندازی نموده است.

    Reply

  85. iranesp.ir، سامانه اطلاعات مصرف کنندگان انرژی با نام اختصاری ساما به آدرس اینترنتی iranesp.ir برای مدیریت مصرف کنندگان برق و گاز که دارای تعرفه های صنعتی و کشاورزی می باشد راه اندازی شده است.

    Reply

  97. اعتراض به نتایج آزمون ورودی مدارس تیزهوشان، پس از اعلام نتایج آزمون ورودی مدارس تیزهوشان، دانش‌آموزانی که می خواهند نسبت به اعتراض به نتایج آزمون ورودی مدارس تیزهوشان اقدام نمایند، می‌توانند از طریق سامانه مای مدیو به نشانی my.medu.ir اقدام به ثبت اعتراض نمایند.

    Reply

  98. زمان برگزاری آزمون ورودی دبیرستان ماندگار البرز، با توجه به آمار قابل توجه موفقیت دانش‌آموزان این دبیرستان در آزمون‌های سراسری و المپیادهای علمی، آگاهی از زمان برگزاری آزمون ورودی دبیرستان ماندگار البرز، دغدغه‌ای مهم برای بسیاری از دانش‌آموزان و اولیاء محسوب می‌شود.

    Reply

  106. ثبت‌نام در آزمون ورودی دوره اول متوسطه مدارس علامه طباطبایی، به منظور تسهیل فرآیند ثبت‌نام در آزمون ورودی دوره اول متوسطه مدارس علامه طباطبایی، دانش‌آموزان مستعد و علاقه‌مند می‌توانند در بازه زمانی تعیین‌شده به وب‌سایت‌های رسمی این مجموعه به نشانی‌های alameh.ir و mat.ir مراجعه نمایند.

    Reply

  109. رشته‌های قابل انتخاب در کنکور کاردانی به کارشناسی، کنکور کاردانی به کارشناسی، فرصتی مهم برای فارغ‌التحصیلان و دانشجویان ترم آخر مقطع کاردانی است تا با شرکت در آن، سطح تحصیلات خود را به کارشناسی ناپیوسته ارتقا دهند.

    Reply

  124. دفتر گزارش‌های آماری سامانه سیدا ویژه مدارس، به عنوان یک منبع اطلاعاتی جامع شامل داده‌های کلیدی دانش‌آموزان از جمله مشخصات فردی، آدرس دقیق و پایه تحصیلی آنان، در دسترس مدیران مدارس از طریق سامانه مای مدیو قرار دارد.

    Reply

Leave a Reply

Your email address will not be published. Required fields are marked *