{"id":47544,"date":"2022-07-15T18:13:26","date_gmt":"2022-07-15T18:13:26","guid":{"rendered":"https:\/\/www.darkreading.com\/edge-ask-the-experts\/what-are-the-risks-of-employees-going-on-a-hybrid-holiday-"},"modified":"2022-07-15T18:13:26","modified_gmt":"2022-07-15T18:13:26","slug":"what-are-the-risks-of-employees-going-on-a-hybrid-holiday","status":"publish","type":"post","link":"https:\/\/www.threatshub.org\/blog\/what-are-the-risks-of-employees-going-on-a-hybrid-holiday\/","title":{"rendered":"What Are the Risks of Employees Going on a ‘Hybrid Holiday’?"},"content":{"rendered":"
<\/div>\n
\n

Many employees are requesting a “hybrid holiday” \u2014 where longer holidays are booked with the intention of spending time working remotely from the travel destination. In a Virgin Media O2 survey from earlier this year<\/a>, 76% of workers polled said they were considering adding remote-work days around their annual leave to extend their time away.<\/em><\/p>\n

Question: What are the risks of employees going on a hybrid holiday?<\/strong><\/p>\n

John Ayers, Interim CISO and Vice President of Product, Advanced Detection, & Response at Optiv:<\/strong> Threat actors are like any other criminals \u2014 they do reconnaissance, and social media has become the best recon tool in the trade craft. With employees now looking to combine work with holiday plans, this has only increased the security risks for users and their companies.<\/p>\n

Let’s take an example of going overseas to Rome. It’s a nice place to visit, but you also need to work. First, Internet is not a “like for like,” meaning the type of access you would have there is not like yours at home. Yes, we all have been led to believe coffee shop and hotel Wi-Fi<\/a> is OK to use since COVID \u2014 but it is not.<\/p>\n

Second, not all locations are friendly. Most companies should be deploying, or have already deployed, geo-blocking in order to prevent employees from connecting in countries or locations with high risk or out of the US. Geo-blocking is a great tool to prevent and deny all access from a region. Most CISOs today need to protect access to data, which means denying access from devices based on location. They are trying to prevent MitM (man-in-the-middle attack<\/a>). Why is that important? MitM employs someone setting up an access point that might not be what you think it is.<\/p>\n

Each time you fire up the laptop or mobile device and log into Amazon or your work email, you are practicing what we call “data in motion” using the rogue Wi-Fi connection, which is now collecting all that data.<\/p>\n

The risks here are:<\/p>\n