Cybersecurity Vulnerabilities Research Articles

A lightweight framework for cyber risk management in Western Balkan higher education institutions.

Higher education institutions (HEIs) have a significant presence in cyberspace. Data breaches in academic institutions are becoming prevalent. Online platforms in HEIs are a new learning mode, particularly in the post-COVID era. Recent studies on information security indicate a substantial increase in cybersecurity attacks in HEIs, because of their decentralized e-learning structure and diversity of users. In Western Balkans, there is a notable absence of incident response plans in universities, colleges, and academic institutions. Moreover, e-learning management systems have been implemented without considering security. This study proposes a cybersecurity methodology called a lightweight framework with proactive controls to address these challenges. The framework aims to identify cybersecurity vulnerabilities in learning management systems in Western Balkan countries and suggest proactive controls based on a penetration test approach.

Cybersecurity in the Internet of Things (IoT) Era: Safeguarding Connected Systems and Data

In the era of the Internet of Things (IoT), where devices are interconnected at an unprecedented scale, ensuring cybersecurity has become paramount. This journal article explores the challenges and strategies associated with safeguarding connected systems and data in the IoT landscape. The study delves into the unique cybersecurity risks posed by the proliferation of IoT devices and analyzes the evolving threat landscape. The article begins by elucidating the significance of IoT in contemporary society, emphasizing its transformative impact on various sectors. Subsequently, it identifies the vulnerabilities inherent in interconnected systems, ranging from privacy concerns to potential disruptions caused by cyber-attacks. A comprehensive review of current cybersecurity frameworks and protocols follows, assessing their efficacy in addressing the dynamic threats faced by IoT ecosystems. The study highlights the importance of encryption, authentication, and intrusion detection in fortifying IoT networks against cyber threats. Case studies and real-world examples are employed to illustrate the practical implications of cybersecurity vulnerabilities in IoT devices. Furthermore, the article examines emerging technologies and innovative approaches aimed at enhancing the resilience of connected systems. The findings underscore the need for a holistic cybersecurity approach that integrates technological advancements with robust policies and user awareness. Recommendations include the adoption of standardized security measures, continuous monitoring, and collaborative efforts among stakeholders to mitigate IoT-related risks. In conclusion, this article contributes to the discourse on IoT cybersecurity, offering insights into the evolving nature of threats and effective countermeasures. As society becomes increasingly reliant on interconnected devices, ensuring the security of IoT ecosystems is imperative for fostering a trustworthy and resilient digital environment.

IMPLEMENTING AI IN BUSINESS MODELS: STRATEGIES FOR EFFICIENCY AND INNOVATION

This review delves into the profound impact of artificial intelligence (AI) integration on contemporary business paradigms. The paper meticulously explores diverse AI applications, including machine learning, natural language processing, and predictive analytics, illustrating how these technologies can revolutionize operational processes, augment decision-making capabilities, and foster unparalleled innovation within organizations. Drawing from case studies and industry examples across various sectors such as finance, healthcare, retail, and manufacturing, the study elucidates successful AI implementation strategies. It examines the importance of robust data governance frameworks to ensure quality and integrity, the acquisition of AI talent, and the imperative of fostering a culture of innovation and adaptability within organizations undergoing AI transformation. Furthermore, the paper addresses the nuanced challenges and risks inherent in AI adoption, spanning ethical considerations surrounding data privacy and bias mitigation, cybersecurity vulnerabilities, and the potential impact on the workforce. By providing a comprehensive overview of the opportunities and challenges associated with AI integration in business models, the study equips organizational leaders, policymakers, and stakeholders with invaluable insights to navigate the evolving landscape of AI-driven innovation. It underscores the significance of strategic foresight, cross-functional collaboration, and continuous learning in harnessing the full potential of AI technologies to drive sustainable growth and competitive advantage in the digital era.
 Keywords: AI, Business, Models, Strategies, Efficiency, Innovation.

Cybersecurity Vulnerabilities in Healthcare: A Threat to Patient Security

Healthcare information systems hold significant importance; hence, their cybersecurity is crucial. Exposed networks make it easy for cybercriminals to launch cyberattacks and access healthcare data. Thus, concerns regarding cybersecurity and its link to healthcare privacy, confidential data, and medical devices are growing. Therefore, cybersecurity vulnerabilities in healthcare and patient security are significant issues. Healthcare information systems comprise correlated networks and play a vital role in treating and saving patients. However, advanced circulated ransomware attacks on hospitals prevent access to electronic health records for providing appropriate patient care, thus forcing doctors to turn to other facilities. These cyberattacks can leak patient data, and regaining control of information systems and patient data is highly expensive, thus resulting in extensive monetary losses. Cyberattacks aimed toward electronic medical records, information technology systems, and medical devices have corrupted the best systems across clinics and small offices with physicians, as well as merged health systems. There is an urgency to address cybersecurity vulnerabilities in healthcare; however, opinions differ regarding suitable measures for safeguarding patient data and ensuring infrastructural security. We aimed to reconcile these diverging hypotheses and provide an understanding of the current landscape and directions for further improvements by reviewing several studies on healthcare cybersecurity. We also interviewed healthcare professionals, cybersecurity experts, and administrators and distributed a survey questionnaire to healthcare organizations to gather quantitative data on existing cybersecurity measures and vulnerabilities. Our analyses show that healthcare organizations are vulnerable to a variety of threats, cyberattacks disrupt the health sector, cybersecurity vulnerabilities impact patient security, and implementations of cybersecurity measures are inconsistent across organizations. Owing to the sophisticated nature of cyberattacks, the healthcare industry must prioritize cybersecurity and provide the funding required to develop critical systems for safeguarding patients and their data. The study's findings underscore the need for standardized cybersecurity practices in healthcare to address inconsistencies in measures across organizations. Adequate and ongoing investment in cybersecurity infrastructure is imperative to counter increasingly sophisticated cyberattacks. Additionally, protecting patient data and maintaining trust within the healthcare sector are ethical imperatives that should guide industry actions. By embracing these implications, the healthcare industry can enhance patient security, financial stability, and ethical integrity.

The Growing Number of Cybersecurity Vulnerabilities Inside Healthcare Supply Chain

The healthcare supply chain is increasingly vulnerable to cybersecurity risks due to the integration of digital technology. The rise of digital records, telemedicine, and network connectivity has made it more susceptible to cyberattacks. The COVID-19 pandemic has further exacerbated this vulnerability, highlighting deficiencies in medical supplies, equipment, and services. The sector has implemented cybersecurity precautions, such as following HIPAA and GDPR, and collaborating with authorities and experts. However, the changing threat landscape necessitates continuous updates and changes. The study uses secondary data from the past three years to highlight the need for strong cybersecurity protocols to protect patient data, deliver services, and defend the supply chain from new threats. Future research should explore leveraging blockchain and AI-based cybersecurity, as well as strengthening government regulation, international cooperation, cybersecurity education, and patient empowerment.

The Internet of Things (IoT) in World Practice: Review and Analysis

This article explores the contemporary realm of the Internet of Things (IoT) and its influence on society and the economy. The primary emphasis lies in examining the principal patterns within the realm of IoT, encompassing the escalation of connected device quantities and the utilisation of 5G networks. The article encompasses various facets, including an overview of the evolution and possibilities of IoT, encompassing the advancement of intelligent urban areas and the influence of 5G networks. The analysis of threats and vulnerabilities related to this technology focuses on detecting common flaws, including weak passwords, unsecured network services, and inadequate privacy measures.
 Furthermore, the essay presents concrete hazards in diverse sectors that employ IoT technology. Particular emphasis is given to potential cybersecurity vulnerabilities in healthcare, manufacturing, agriculture, retail, transport and logistics, energy, and smart cities. These businesses have distinct challenges and hazards due to incorporating IoT technologies.
 The authors also analyse the substantial financial commitment to IoT and its profound influence on the worldwide economy, including data on the expansion of the IoT market and investments in IoT technologies and smart cities. The findings emphasise that the Internet of Things (IoT) substantially influences society and the economy. However, it necessitates meticulous consideration of cybersecurity and privacy concerns. The authors underscore the significance of creating efficacious cyber security policies to safeguard against the possible hazards presented by IoT technology.
 
 

Internet of Things (IoT) and cyber security in the control of electrical energy systems: A review

This article provides an assessment of the use of Internet of Things (IoT) technology in the control of electrical energy power systems and its cybersecurity risks. Electrical energy systems are complex and critical infrastructures today, and effective management and control of these systems are of great importance. The use of IoT technology in electrical energy systems allows these systems to become more efficient, flexible, and intelligent. However, the use of this technology also brings various cyber security risks. While this article examines the applications of IoT in power systems, it also focuses on how these systems can be protected against cybersecurity vulnerabilities.

Digital transformation and the challenges associated with applying digital technologies in achieving strategic flexibility in public administration: a case study in Jordan

The study aimed to identify the impact of digital transformation and analyze the obstacles and complexities facing the integration of digital technologies into Jordanian Customs and their subsequent impact on achieving strategic flexibility. The study aims to uncover challenges, evaluate their effects, and suggest recommendations to enhance adaptive strategies within Jordanian Customs considering digital transformations. The study included employees in Jordanian General Customs, including customs officials, IT staff, and administrative staff working on digital initiatives. A population of 670 individuals was identified, from whom a purposive sample of (465) directly involved in digital transformation efforts was selected to participate in the study. The study used the descriptive analytical approach to comprehensively investigate the challenges of digital transformation within Jordanian Customs. Surveys, interviews, analysis of regulatory documents formed data collection methods. Quantitative data were subjected to descriptive analysis and regression modeling, while qualitative insights were thematically analyzed to provide a comprehensive understanding of the challenges faced. The analysis revealed the results, the most important of which is that digital transformation has a positive, statistically significant impact in its four dimensions (strategy, organizational culture, transformational leadership, and human resources) in achieving strategic agility in Jordanian Customs, and reveals multi-faceted challenges prevailing within Jordanian Customs, including structural constraints. Infrastructure, resistance to change, cyber security vulnerabilities, and skills gaps among the workforces. The regression analysis highlighted the significant impact of these challenges in hindering the achievement of strategic flexibility within the Customs Department. Based on the results of the study, Jordanian Customs is recommended to take proactive measures to confront the challenges identified. This includes investing in a robust technology infrastructure, implementing targeted training programs to improve employee skills, promoting a culture of innovation, and establishing cross-departmental collaboration to enhance adaptability and strategic flexibility. The study recommended increasing attention to training workers and raising their capabilities to deal with digital transformation positively and improve services.

Innovative Solutions for Cybersecurity Vulnerabilities in Business Operations: Scope and Impact

Innovative Solutions for Cybersecurity Vulnerabilities in Business Operations: Scope and Impact

Post-Market Safety Measures for Cybersecurity Vulnerabilities in Medical Devices: International Perspectives

Post-Market Safety Measures for Cybersecurity Vulnerabilities in Medical Devices: International Perspectives

Mitigating Cybersecurity Risks in the Digitization of Banking Operations: Strategies, Challenges, and Best Practices for Zambian Commercial Banks

This study explores cybersecurity risk mitigation strategies within the Zambian banking sector amidst rapid digitization. Utilizing a mixed methods approach, data from a survey involving 123 bank employees/managers from banks operating in Zambia and expert interviews with bank cybersecurity staff. The study offers comprehensive insights into stakeholders’ perceptions, challenges, opportunities, implemented strategies, and recommended best practices for Cybersecurity Risk Mitigation (CSRM). The findings highlight a diverse landscape of digitization efforts among banks, influencing their exposure to cybersecurity vulnerabilities ranging from fundamental lapses to sophisticated threats like advanced persistent threats (APTs) and ransomware. Current cybersecurity strategies, including security audits and regulatory compliance, are prevalent but exhibit varying effectiveness, particularly in areas such as encryption and incident response readiness. Employee training emerges as a pivotal factor despite mixed perceptions regarding its efficacy, underscoring its critical role in mitigating human-induced vulnerabilities and adapting to evolving cyber threats effectively. Best practices identified in the study emphasize rigorous regulatory compliance tailored to the banking sector, secure software development practices, and robust vendor risk management protocols. Recommendations derived from the study advocate enhancing regulatory adherence, investing in advanced encryption technologies, and prioritizing comprehensive, context-specific employee training programs to foster a resilient cybersecurity culture across Zambian banks. These insights contribute valuable perspectives on cybersecurity challenges specific to the Zambian banking sector, advocating adaptive strategies to safeguard digital operations effectively amidst evolving cyber threats. This study not only addresses current gaps in cybersecurity resilience but also provides practical recommendations such as enhanced regulatory compliance, improved encryption and incidence response, prioritization of employee training and implementation of secure software practices aimed at enhancing overall preparedness and resilience against cybersecurity threats in Zambian banking operations undergoing digital transformation.

Flood Risks of Cyber‐Physical Attacks in a Smart Storm Water System

AbstractThe rise in smart water technologies has introduced new cybersecurity vulnerabilities for water infrastructures. However, the implications of cyber‐physical attacks on the systems like urban drainage systems remain underexplored. This research delves into this gap, introducing a method to quantify flood risks in the face of cyber‐physical threats. We apply this approach to a smart stormwater system—a real‐time controlled network of pond‐conduit configurations, fitted with water level detectors and gate regulators. Our focus is on a specific cyber‐physical threat: false data injection (FDI). In FDI attacks, adversaries introduce deceptive data that mimics legitimate system noises, evading detection. Our risk assessment incorporates factors like sensor noises and weather prediction uncertainties. Findings reveal that FDIs can amplify flood risks by feeding the control system false data, leading to erroneous outflow directives. Notably, FDI attacks can reshape flood risk dynamics across different storm intensities, accentuating flood risks during less severe but more frequent storms. This study offers valuable insights for strategizing investments in smart stormwater systems, keeping cyber‐physical threats in perspective. Furthermore, our risk quantification method can be extended to other water system networks, such as irrigation channels and multi‐reservoir systems, aiding in cyber‐defense planning.

Enabling Industry 4.0 Transformation in Calabria region: Framework, Machine Interconnection and ERP Synergy

The work describes some peculiar aspects of industrial research project mainly based on the implementation of technologies enabling Industry 4.0 paradigm in the region Calabria, Italy. In particular, the focus is on the I4.0 Framework, machine interconnection and the role of Enterprise Resource Planning (ERP) systems. Since Calabria is a less developed Region, the adoption of Industry 4.0 technologies can be a greater opportunity for local small and medium enterprises (SMEs) to boost their manufacturing processes and, consequently, economic development. The Framework 4.0 offers a structured approach to integrate various industrial components, optimising production lines and supply chains. Machine interconnection is a crucial aspect of Industry 4.0, creating intelligent networks that enable real-time data analysis and autonomous decision-making. By incorporating Internet of Things (IoT) sensors and data analytics, Calabrian industries can achieve enhanced productivity and predictive maintenance. Integration with the Framework 4.0 provides end-to-end visibility, supporting better planning, informed decision-making and improved collaboration. However, the adoption of Industry 4.0 in Calabria presents challenges, including the need for substantial investments in technology and infrastructure, upskilling the workforce and addressing cybersecurity vulnerabilities. In conclusion, Industry 4.0 holds transformative potential for Calabria's industries and the ones belonging to other less developer European regions; leveraging the Framework 4.0, machine interconnection, and ERP systems, the regions can achieve increased competitiveness and sustainable economic growth in the Fourth Industrial Revolution.

SOCIAL MEDIA LANDSCAPE IN THE REPUBLIC OF KAZAKHSTAN: NAVIGATING YOUTH BEHAVIOR AND ENSURING INFORMATION SECURITY

In today’s digitally interconnected world, social media has emerged as a prominent force shaping the behaviors, attitudes, and interactions of youth populations worldwide. This research endeavors to explore the intricate relationship between social media engagement and cybersecurity within the context of the Republic of Kazakhstan.The primary purpose of this scientific inquiry is to investigate the ways in which Kazakhstani youth engage with social media platforms and to assess the associated cybersecurity challenges and implica-tions. Through a multidimensional approach, the study aims to delineate the main directions and ideas underlying the intersection of youth behavior on social media and the imperative of information security.This research holds significant scientific and practical importance by shedding light on the evolving dynamics of social media usage among Kazakhstani youth and the corresponding cybersecurity risks. By identifying key patterns, vulnerabilities, and protective measures, this study seeks to inform policymak-ers, educators, and stakeholders about the urgent need for comprehensive strategies to safeguard the digital well-being of young individuals.Employing a mixed-method research methodology comprising surveys, interviews, and data analy-sis, this study provides a comprehensive examination of social media dynamics and cybersecurity resil-ience among Kazakhstani youth. The main results and analysis reveal insights into the prevalent behav-iors, perceptions, and attitudes of youth towards social media, alongside an assessment of cybersecurity vulnerabilities and mitigation strategies.The research underscores the importance of proactive measures to enhance cybersecurity aware-ness, digital literacy, and regulatory frameworks to address the emerging challenges posed by social media usage among Kazakhstani youth. By contributing empirical evidence and actionable insights, this study enriches the relevant field of knowledge and informs policy interventions aimed at fostering a safer and more secure digital environment for youth in Kazakhstan and beyond.

Innovative Solutions for Cybersecurity Vulnerabilities in Business Operations: Scope and Impact

Innovative Solutions for Cybersecurity Vulnerabilities in Business Operations: Scope and Impact

A Cybersecurity Analysis of Construction Sites in Abuja, Nigeria

This research delves into the cybersecurity vulnerabilities of construction sites in Abuja, Nigeria, within the context of Construction 4.0 advancements. Recognizing the growing risk of cyber threats in the industry, the research explores the critical intersection of emerging technologies and effective cybersecurity practices. The central tenet of the research is the urgent need for robust cybersecurity measures in light of the construction sector's inherent susceptibility to cyberattacks. Employing a mixed-methods approach, including semi-structured interviews to guide the development of surveys conducted with 323 participants carefully selected using stratified sampling, the research comprehensively analyzes the current state of cybersecurity practices within Abuja's construction landscape. Key findings reveal intricate dynamics of cybersecurity preparedness across different industry segments. Notably, 0% of the surveyed participants reported dedicated cybersecurity teams and minimal training on vulnerabilities was conducted. The analysis identifies a lack of correlation between years of experience and digital adoption with the implementation of cybersecurity best practices. Underscoring the crucial role of cybersecurity in Construction 4.0 initiatives, the research emphasizes the need for tailored strategies and policies specific to the Nigerian context. Recommendations advocate for collaborative efforts, enhanced knowledge-sharing, and strategic investments to fortify the sector against evolving cyber threats.

ICVTest: A Practical Black-Box Penetration Testing Framework for Evaluating Cybersecurity of Intelligent Connected Vehicles

Intelligent connected vehicles (ICVs) are equipped with extensive electronic control units which offer convenience but also pose significant cybersecurity risks. Penetration testing, recommended in ISO/SAE 21434 “Road vehicles—Cybersecurity engineering”, is an effective approach to identify cybersecurity vulnerabilities in ICVs. However, there is limited research on vehicle penetration testing from a black-box perspective due to the complex architecture of ICVs. Additionally, no penetration testing framework has been proposed to guide security testers on conducting penetration testing for the whole vehicle. The lack of framework guidance results in the inexperienced security testers being uncertain about the processes to follow for conducting penetration testing. Moreover, the inexperienced security testers are unsure about which tests to perform in order to systematically evaluate the vehicle’s cybersecurity. To enhance the penetration testing efficiency of ICVs, this paper presents a black-box penetration testing framework, ICVTest. ICVTest proposes a standardized penetration testing process to facilitate step-by-step completion of the penetration testing, thereby addressing the issue of inexperienced testers lacking guidance on how to initiate work when confronted with ICV. Also, ICVTest includes 10 sets of test cases covering hardware and software security tests. Testers can select appropriate test cases based on the specific cybersecurity threats faced by the target object, thereby reducing the complexity of penetration testing tasks. Furthermore, we have developed a vehicle cybersecurity testing platform for ICVTest that seamlessly integrates various testing tools. The platform enables even novice testers to conduct vehicle black-box penetration testing in accordance with the given guidance which addresses the current industry’s challenge of an overwhelming number of testing tasks coupled with a shortage of skilled professionals. For the first time, we propose a comprehensive black-box penetration testing framework and implement the framework in the form of a cybersecurity testing platform. We apply ICVTest to evaluate an electric vehicle manufactured in 2021 for assessing the framework’s availability. With the aid of ICVTest, even testers with limited experience in automotive penetration can effectively evaluate the security risks of ICVs. In our experiments, numerous cybersecurity vulnerabilities were identified involving in-vehicle sensors, remote vehicle control systems, and in-vehicle controller area network (CAN) bus.

Digital hoarding and personal use digital data

ABSTRACT The problem of “Digital Hoarding” has been studied in a workplace context but less so in relation to personal use digital data. In this study, we examine the relationship between scores on a measure of Digital Hoarding and the digital behaviors associated with personal technology. One hundred and sixty-seven participants completed the Digital Hoarding Questionnaire (DHQ) to assess digital hoarding tendencies. Participants indicated their main storage device for personal use digital data and thought about this when completing a new measure – the Digital Behaviors for Personal use Questionnaire (DBPUQ) designed to capture information item management behaviors and affective responses to digital information items. Higher scores on the DHQ correlated with difficulty finding information items, attachment and distress at potential loss of information items. Participants’ choice of personal device was not associated with DHQ scores, information item management behaviors, affective responses or total information items stored. This work provides a first step toward a better understanding of personal use digital data hoarding. We discuss the implications of digital hoarding of personal use data with respect to increased feelings of anxiety, cybersecurity vulnerabilities, and sustainability concerns. Understanding digital hoarding in a personal use data context is foundational for developing design solutions and behavioral interventions aimed at reducing digital data overload.

How the White House’s AI Executive Order Could Increase U.S. Cyber Vulnerabilities

On October 30, the White House released its “Executive Order” on the Safe, Secure, and Trustworthy Development and Use of Artificial Intelligence.” It is a lengthy document, spanning over 30 pages in the Federal Register. But two short portions of the Executive Order (EO) are of particular concern in terms of the cybersecurity vulnerabilities they will create: Under the EO, the government will institute mandatory reporting of information about the “physical and cybersecurity measures taken to protect” model weights associated with certain large AI models, as well as the location and computing power of “large-scale computing cluster(s).”

Seamless Industry 4.0 Integration: A Multilayered Cyber-Security Framework for Resilient SCADA Deployments in CPPS

The increased connectivity and automation capabilities of Industry 4.0 cyber-physical production systems (CPPS) create significant cyber-security vulnerabilities in supervisory control and data acquisition (SCADA) environments if robust protections are not properly implemented. Legacy industrial control systems and new IP-enabled sensors, instruments, controllers, and appliances often lack basic safeguards like encryption, rigorous access controls, and endpoint security. This exposes manufacturers to substantial risks of cyberattacks that could manipulate, disrupt, or disable critical physical assets and processes related to their production lines and facilities. This study presents a multilayered cybersecurity framework to address these challenges and harden SCADA environments by implementing granular access controls, network micro-segmentation, anomaly detection, encrypted communications, and legacy system upgrades. The multilayered defense-in-depth (DID) approach combines policies, processes, and technologies to counter emerging vulnerabilities. The methodology was implemented in an electronics manufacturing facility across access control, zoning, monitoring, and encryption scenarios. Results show security improvements, including 57.4% fewer unauthorized access events, 41.2% faster threat containment, and 79.2% fewer hacking attempts. The quantified metrics highlight the CPPS resilience and threat mitigation capabilities enabled by the securely designed SCADA architecture, which allows manufacturers to confidently pursue Industry 4.0 integration and digital transformation with minimized disruption.