Infotaktika Group LLC, part of Tsikada Holding, presented the results of its cybersecurity research on covert channel behavior in general network and industrial protocols at the 34th MiTSOBI-2025 Conference.

Igor Yuryevich Zhukov, Head of the Development Department, acted as one of the moderators of the "Modern Cybersecurity Technologies" section and delivered a presentation titled "Current Issues of Information Transmission Through Network Covert Channels in the Context of Information Security."

"Covert data transmission channels are not only a serious information security threat, but also a potential protection tool. Detecting covert channels requires the use of advanced analysis methods, while effective protection is based on anomaly detection, traffic normalization, transmission timing control, and regulatory compliance," emphasized Igor Yuryevich.

Tsikada Holding brings together companies with many years of experience in cybersecurity. Our specialists develop comprehensive solutions to protect against modern threats, including data leak prevention systems. The holding pays special attention to research and development, which makes it possible to create innovative products that meet regulatory requirements.

Igor Zhukov, Head of the Development Department at Infotaktika Group, part of Tsikada Holding, presented research on accelerating the Falcon algorithm, one of the key candidates to replace modern digital signature schemes in the era of quantum computers.

Why Is This Relevant?

Falcon is a promising algorithm that offers compact keys and signatures compared to alternative solutions.

Most existing optimizations focus on hardware acceleration, which limits their practical application.

The proposed approach improves computational efficiency on standard hardware.

The recent increase in cyberattacks on domestic companies is not connected by a single campaign, and each incident has its own causes, according to an information security expert. The attackers' main goal is not only to cause damage, but also to generate media attention.

Said Atsiev, Deputy CEO for Cybersecurity at Tsikada Holding, commented on the latest wave of cyberattacks targeting domestic companies. According to him, although each incident has its own technical specifics, they are united by hackers' desire to achieve maximum public impact.

"The Winlab breach did not cause serious damage, but it received wide media coverage," the expert noted. "The external environment remains aggressive: groups are attacking companies of all levels for publicity. Foreign actors still view the local market as a priority target."

Atsiev named phishing, vulnerabilities in web services, and employee password leaks among the main attack vectors. "Companies often hide the details of breaches, which prevents systematic threat analysis," he emphasized. "The key trend now is cyber resilience. It is important not to panic, but to strengthen protection consistently."

Tsikada Holding continues to help businesses build effective protection systems against cyber threats

“Record leaks of passwords and tokens in 2024 are an alarming signal for businesses that still rely on outdated methods of storing digital secrets. The problem lies not only in technical vulnerabilities, but also in the human factor: employees use weak passwords, reuse them across different services, fall victim to phishing, or simply do not fully understand the risks.”

Vadim Burtsev, Information Security Architect at Tsikada JSC, gave an extended comment for CISOCLUB.

Why Has the Problem Become More Acute?

Analysis shows that companies still rely on unreliable methods: simple passwords, reuse of access credentials, and lack of control over tokens. At the same time, attackers actively use phishing and automated attacks, making outdated protection methods ineffective.

Internal vulnerabilities pose a particular risk: employees who are not trained in cyber hygiene and fragmented access management systems. As a result, companies face compromised corporate accounts, personal data leaks, and even disruptions in the work of entire departments.

According to Neuroinform, in Q2 2025 the number of targeted attacks on IT systems of domestic companies commissioned by competitors increased by 26%. The main targets were industrial enterprises at 34%, financial organizations at 28%, and IT companies at 16%.

Analysts note that attackers are looking for access to customer databases, contracts, and internal strategies. Some customers go further and attempt to disrupt a competitor’s digital infrastructure.

Said Atsiev, Deputy CEO for Cybersecurity at Tsikada JSC, commented for CISOCLUB:

"We can neither confirm nor refute these statistics. In the projects and with the customers we work with, such cases are quite rare, while attacks are usually carried out for industrial espionage or political influence. As for the domestic market, if such situations become public, the reputational damage for the initiating company is too significant, while the potential losses for competitors are too limited. For private companies, such actions are strategically unprofitable and carry substantial risks for the beneficiary."