Cyber-criminals have ramped up their efforts in response to widespread disruption and remote teams, attacking businesses with new and old threats. Whatever the technology, most of the attacks had one thing in common: they were all directed against people rather than infrastructure.
Even though the world is halfway through 2021, the events of 2020 will reverberate in the cyber security space for some time to come.
Last year, even as ransomware attacks climbed dramatically, email was still a major point of entry. Meanwhile, credential phishing, another mass-focused threat, was the most common type of attack, accounting for the majority of all malicious messages. In the threat landscape, increasingly complex business email compromise (BEC) attacks have evolved.
There were also some new contenders. Steganography, for example, the technique of hiding malicious payloads in images and audio files, has also been very successful.
Let’s take a look at some of the most common forms of crowdsourced attacks today and see what businesses can do to protect themselves.
Ransomware threat on the Rise
Ransomware attacks increased 300 percent last year, according to Proofpoint’s “The Human Factor 2021” report, and in 2021, they have already hit some high-profile targets that have dominated global news headlines for weeks.
Today’s ransomware onslaught appears to be a little different. Where malware payloads used to arrive in the email, they now frequently appear as two-stage attacks.
Full Article: Defending Against People-Focused Attacks in the Modern Threat Landscape
In 2021 due to the coronavirus pandemic, the continuing shift to hybrid work has become an advantage for cybercriminals.
For 2022, we can assume more of the same as well as several worsening threats to keep us on our toes.McAfee and FireEye released their 2022 Threat Predictions, inspecting the top cybersecurity threats they expect businesses will face in 2022.Bad actors have taken the word of success techniques from 2021, which includes the ones making headlines tied to ransomware, nation-states, social media, and the moving reliance on a remote workforce.
They are expected to pivot the ones into next year’s campaigns and grow in sophistication, wielding the capability to wreak more havoc across the globe.In the recently combined entity, skilled engineers and security architects offer a preview of how the threat landscape might look in 2021 and how these new or evolving threats could potentially impact enterprises, countries, and civilians.“Over this past year, we have seen cyber criminals get smarter and quicker at retooling their tactics to follow new bad actor schemes — from ransomware to nation-states — and we don’t anticipate that changing in 2022,” said Raj Samani, fellow and chief scientist at McAfee.With the evolving threat landscape and the continued impact of the global pandemic, it is crucial that enterprises stay aware of the cybersecurity trends so that they can be proactive and actionable in protecting their information.Cyber threat predictions for enterprises in 2022Game of ransomware thrones.Self-reliant cybercrime groups will shift the stability of power in the RaaS eco-kingdom from those who manage the ransomware to those who manage the victim’s networks.
For More Information: Top Cybersecurity Threats Enterprises will face in 2022
With cybercrime breaches, malware and ransomware attacks on a toll in Australia, the IT and Security industry is suffering a bolt.
The IT sector has come under a huge threat.
While it is a fact that no company is safe from a cyber-attack, penetration tests can become a big source of help in boosting immunity.
But, can your business benefit from a penetration test.Visit: https://www.activict.com.au/can-your-business-benefit-from-a-penetration-test/
Although, more than half of the organizations surveyed were hit by a cyberattack in the last year, a lack of visibility remains high, threat detection is problematic, false alarms cost time and money, according to a new research.
Uncomfortable truth #1: Over two-thirds of organizations were hit by a cyberattack in the last year.
More than a third are discovered on the server.
#2: IT teams lack visibility and spend lot of time spotting the attack.
Clearly 13 hours is a lot of time for a hacker to have uninterrupted access to your systems and data, and enough time to wreak significant damage, extract sensitive data, steal credentials, install Trojans, ransomware and more.
#3: IT teams can’t plug their security gaps because they don’t know what they are.
- One in five IT managers are unaware how their most significant cyber-attack entered their organizations.
- Larger organizations are more likely to know how threats got in than the smaller ones. They likely have more skilled resources and more comprehensive cybersecurity solutions than smaller companies do.
#4: Organizations lose 41 days each year investigating non-issues.
- Organizations spend, on average, four days a month investigating potential security issues, or 48 days a year.
- Only 15% turn out to be actual infections. As a result, 41 days are lost investigating non-issues.
#5: Four out of Five organizations are struggling with detection and response mostly due to a lack of security expertise.
IT Managers wish they had a stronger security team.
- 80% of all respondents
- 85% among those who have experienced cyberattack
- 71% among those who haven’t experienced once.
#6: Cyber victims learn the hard way.
More than half of organizations don’t see the value in investing in cybersecurity solutions. Most also think they don’t have digital assets that need that protection, only to realize that a cyberattack will impact all business operations, not just IT.
Organizations victimized by a cyberattack in the last year are more cautious and spend more time investigating potential incidents.
Recommendations:
Be Proactive.
- Unfortunately, 54% of organizations think cybersecurity investments are not important or not beneficial. This research finds that one cyberattack will take cybersecurity from business priority #n to priority #1.
Enhance Visibility.
- Organizations should start with an assumption that a threat will make its way through, be mindful of the limitations to their visibility into threats and their resulting inability to identify and block the gaps in their defenses.
Source: https://www.ascentinfosec.com/blog/customers-are-struggling-with-lack-of-visibility-and-threat-detection/
