Tech

Narrow job titles are fading into the distance, and employers are looking for candidates with a wide variety of skills to join most fields. As in any industry, the more you know, the more attractive you will be for a role in cybersecurity. Amassing a breadth of security, cloud, and networking knowledge will help your chances of being a top candidate and help you execute in the long run as you combat all kinds of present-day and future attacks.

Aamir Lakhani, Cybersecurity Researcher for Fortinets FortiGuard Labs

The recent convergence of networking and security calls for convergence in skills. Before the surge in digital transformation, OT and IT were separate, independent networks. OT systems were considered relatively safe from outside threats because they weren't connected to the internet. But as digital innovation continues, OT networks have converged with IT networks to reduce costs, increase productivity, and gain market share. Now all networks are suddenly exposed to the entire threat landscape. And a lot of threats mean we need a lot of different specialties. Unfortunately, as technology advances, so do cybercriminals.

The Cyber Kill Chain

There are many threats out there coming from all sorts of areas, and combatting each kind requires specific skills. If we look at the seven steps of the cyber kill chain - reconnaissance, weaponization, delivery, exploitation, installation, command and control, actions - we can shine the light on the processes and use that as a roadmap to see what kinds of skills we need to develop to thwart each step.

1. Reconnaissance involves things like harvesting email addresses and compiling information. The skills needed to foil this step are just fundamental cybersecurity hygiene, such as recognizing phishing emails. Anyone can learn them at any age or stage in their career.

2. Weaponization uses that information to embed malware into a document, for example, or host the malware on a compromised domain. This is the stage when the attacker is creating the attack, and there are few security controls, even security awareness, that can have an impact at this stage.

3. Delivery sends out the attack via email attachments and websites to transmit the malware to the victim's targeted environment. This is the step where people, not technology, can stop the attack in its tracks. Organization-wide training on what to look for can help employees obtain the skills needed to halt the delivery of an attack.

4. Exploitation targets an application or operating system vulnerability. This is the step when the attack is "detonated." This is where we have trained IT personnel tasked with ensuring the systems are up to date and have an antivirus installed. They also ensure that all sensitive data is secured.

5. Installation is when the attacker installs the malware on the victim. This step goes beyond the "human firewall" and requires trained staff to keep the system secure and look for abnormal behavior.

6. Command and control is when the attacker has control of the machine. Malware is not often automated, so this stage happens manually. This step is once a system is compromised or infected. This is why "hunting" is a popular tactic - the hunters are looking for abnormal outbound activities.

7. Actions on the objective of data exfiltration involve collecting, encrypting, and extracting information from the victim environment. Once the attacker has access and control inside an organization, they can execute on their objectives.

Knowing the cyber kill chain stages and their inherent outcomes is a first step in combatting cybercrime. Cybersecurity is all about learning how to adapt and be flexible, as things are constantly changing, and awareness training can be hugely beneficial.

Be Aware

There are many free training programs out there to get started. The Fortinet NSE Certification Program prepares professionals for a career in cybersecurity and trains you on multiple Fortinet products. (It's best to get various vendor training to become familiar with other cybersecurity products as well.) Non-vendor training and penetration testing (also called "pen testing" or "ethical hacking") can also be interesting and educational. Concentrate on ethical hacking techniques to understand the mindset and tactics of cyber adversaries, but also find training and information on:

• Incident response forensics

• Coding techniques

• Logging techniques

• Network engineering

• Threat intelligence

And instead of just focusing on one area of expertise, essential technical skills to develop include:

• Threat hunting

• Reverse malware engineering

• Pen testing

• Exploit dev exposure

• Managing big data sets

• Tools like virtualization, container-based tech, LINUX-based tech, scripting languages, JavaScript (is essential), and a solid understanding of networking

Pursue Your Passion

There is a growing need for qualified talent who can help in the fight against modern attacks. And while some cybersecurity careers are molded in the traditional sense, through college programs and internships, there are other paths that individuals can take to enter this field independently.

The Fortinet NSE Training Institute helps develop career pathways and supports more than 300 academic institutes across 80 countries with programs for all levels. It encompasses the Certification Program, the Fortinet Security Academy Program, and the Veterans Program, all designed to help shrink the cybersecurity skills gap and kill the cyber kill chain. Fortinet also offers education pathways to develop security operations, Security-Driven Networking, Adaptive Cloud Security, and Zero Trust Access.

Any career can be fulfilling if you are doing something you love. Just getting a job and punching a clock day-to-day is not sustainable nor fulfilling. Along with developing a diverse skill set, bring forward your innate talents, problem-solving skills, an inquiring mind, tenacity. And you have to be flexible and willing to adapt along with the landscape, all the while being humble enough to admit that there will always be more things to learn.

Microsoft announced that Windows 11, an operating system designed for the world of hybrid work, is now available to businesses and consumers across the region.

Microsoft-Windows 11

Pre-loaded in select PCs and available through an upgrade of Windows 10, Windows 11 empowers productivity, inspires creativity, and promotes wellbeing in hybrid work environments, by allowing its users to strike a balance between productivity and play.

"Hybrid work may be the future, but it brings its own challenges," said Mohammed Arif, Business Group Director, Modern Work and Security for Microsoft UAE. "Windows 11 has now arrived to bring an inclusive, easy, inspirational experience to everyone and help them achieve more than ever before. Tools that allow you to work from anywhere as if you were in a room with your collaborators; tools that allow you to work, rest, and play effortlessly while remaining productive - Windows 11 is the ultimate partner for the new normal."

Windows 11 was built for the hybrid future, with experiences that work how people work. It is the operating system of the new normal, secure by design and simple for IT professionals to deploy and manage. The new OS is a powerhouse of speed, efficiency, and optimised experiences, be they through touch, digital pen, or voice input. Microsoft has included new accessibility options designed by and for people of determination, and a new design and new sounds provide a work environment of calm and ease. Snap Layouts, Snap Groups, and Desktops provide more powerful ways to multitask and optimise screen real estate.

''Windows 11 is answering customer needs with new design & tools and a completely refreshed calming user experience," said Henrik Ertman Baunsgaard, General Manager, Consumer Sales and Marketing, Middle East & Africa, Microsoft. "A human connection with chat in Windows connecting to the people you care about. A great browser performance with personalized content and newsfeed and a best way to play games with Direct X12 Ultimate with direct storage, auto HDR and Xbox Game Pass Ultimate for cloud gaming.''

The Start feature leverages the power of the cloud to gather all a users most recent content in one place, regardless of the devices on which that content was created and last viewed. With Widgets, AI-powered feeds ensure that the most important information is at a users fingertips. And Chat from Microsoft Teams is now integrated into the taskbar.

Microsoft believes that, in the new normal, leisure should be a vital part of daily life. Windows 11 is a gaming powerhouse, stocked with the latest technologies, such as DirectX12 Ultimate, DirectStorage, Auto HDR, and Xbox Game Pass, to make sure leisure time is as smooth an experience as focused work. Microsoft Store has been redesigned to make it even easier for people to search and discover their favourite apps and content, in a single, trusted location.

The Windows 11 unveiling happened by a light show at the Burj Khalifa in collaboration with distribution partner Sharaf DG. Nilesh Khalkho, Founder Member & CEO - Sharaf DG commented, "Sharaf DG is thrilled to exclusively partner for the launch of Windows 11 at Burj Khalifa. Windows 11 is a powerful operating system built to balance work and leisure seamlessly. Designed to be all-inclusive and optimized for the new world, it can change the way businesses and individuals collaborate."

Sharaf DG has contributed substantial growth for Microsoft year-on-year, including the recently concluded Back To School season. With a large market share in Modern PCs which are built for an effortless upgrade to Windows 11 and a renewed focus on Gaming PCs, we have proudly aligned our customers for a smooth transition.