CS Jan-Feb 2024

More documents

Recommendations

Info

news Bernard Montell. HORNETSECURITY REVEALS EVER-GROWING THREAT FROM CYBERCRIMINALS Cyber Security Report uncovers massive step-up in phishing attacks CYBERATTACKS BREACHING DEFENCES ON MASSIVE SCALE Security leadership "needs to be involved in high-end business decision making". Of the cyberattacks that have been experienced by UK organisations in the last two years, 48% of these were successful, according to Tenable. "This forces security teams to focus time and efforts on reactively mitigating cyberattacks, rather than preventing them in the first instance," says the company. With just 60% of UK organisations confident that their cybersecurity practices are capable of successfully reducing the organisation's risk exposure, there is obviously work to be done. Comments Bernard Montel, EMEA technical director and security strategist, Tenable: "Our study confirms that security teams are being overwhelmed by the sheer volume of cyberattacks they have to react to. As the attack surface becomes ever more complex, this imbalance will only worsen. Security leadership needs to be involved in high-end business decision making." An analysis of 45 billion emails found a 144% increase in 'Daniel Hofmann. phishing, compared to last year, rising from 12.5% of all threats in 2022 to 30.5% this year. Hornetsecurity's Cyber Security Report 2024 reveals the growing threat of cybercriminals using harmful web links in this way. It is phishing, however, that remains the most common email attack technique, states the company. Its use increased by nearly 4% points this year, rising from 39.6% to 43.3% of all email attacks. Commenting on the latest report findings, Daniel Hofmann, Hornetsecurity CEO, says: "Email continues to be one of the key methods of attack that threat actors use - and it's essential that firms of all sizes, and across all sectors, put in place a robust email security strategy to future-proof their business. The boom in malicious web links and steady rise in phishing demonstrates that organisations cannot underestimate the damage such threats can cause and must ensure they use next gen security service, while also maintaining security awareness throughout the workplace." Of the 45 billion emails analysed, more than a third (36.4%) were categorised as unwanted. Within this category, just over 3.6% - or more than 585 million - were identified as malicious. This represents the widespread nature of the risk, with a vast number of emails posing potential threats. Threat actors are savvy and adaptable, adds the company, stating: "In the last year, following Microsoft disabling macros by default in Office, there was a significant decline in the use of DOCX files (by 9.5 percentage points) and XLSX files (by 6.7 percentage points). Instead, cyber-criminals opted for HTML files [37.1% of files analysed], PDFs [23.3%] and Archive files [20.8%]. HTML file usage is a particularly notable trend: usage rose by 76.6% over the last year." To see the full Cyber Security Report, including predictions for 2024, go to: https://www.hornetsecurity.com/en/cyber-security-report CYBER THREATS ARE HITTING BUSINESS LEADERS HARD Cyberattacks are growing increasingly sophisticated, with 97% of companies being targeted by email-based phishing attacks in 2022. That is the finding of Mimecast's 2023 State of Email Security report. This increase in cyber threats is having a real impact on business leaders, the company says, show-ing that "cyber risk is not just an IT problem, but a critical vulnerability for the organisation". The most prevalent attacks highlighted in the report reported are phishing, ransomware and spoofing. Phishing was found to be the most widespread, especially among large enterprises with more than 10,000 employees, where 73% reported a significant rise in phishing attempts. Smaller businesses were affected more severely. Although two-thirds reported falling victim to ransomware, 73% of those who acknowledged suffering a ransomware attack were from companies with 1,000-5,000 employees. 6 computing security Jan/Feb 2024 @CSMagAndAwards www.computingsecurity.co.uk
DON’T SaaSSS GET YOUR KICKED! ! TAKE CONTROL NOW AND PROTECT YOUR SaaS DATA Global SaaS vendors like Microsoft, Google and Salesforce don’t assume any responsibility for your data hosted in their applications. So, it’s up to you to take control and fully protect your SaaS data from cyber threats or accidental loss. Arcserve SaaS Backup offers complete protection for your SaaS data, eliminating business interruptions due to unrecoverable data loss. Arcserve SaaS Backup Complete protection for all your SaaS data. arcserve.com The unified data resilience platform
Page 1: Computing Security Secure systems,
Page 4 and 5: Secure systems, secure data, secure
Page 8 and 9: news Sukru Ilker Birakoglu. SUPPORT
Page 10 and 11: 2024 predictions THROUGH THE ‘LUR
Page 12 and 13: 2024 predictions Aaron Kiemele, Jam
Page 14 and 15: training SAFEGUARDING HR IN THE AGE
Page 16 and 17: cybersecurity THE TOP-LEVEL FIBRE B
Page 18 and 19: artificial intelligence AI - WHERE
Page 20 and 21: artificial intelligence Gareth Lock
Page 22 and 23: phishing PHISHING FOR THE ANSWERS D
Page 24 and 25: ansomware WE SHALL NOT BE MOVED! SE
Page 26 and 27: ansomware Raja Patel - Sophos: cybe
Page 28 and 29: attack… attack POINT OF IMPACT IN
Page 30 and 31: attack… attack Amit Sinha, DigiCe
Page 32 and 33: cybercrime STAYING ABOVE THE WATER
Page 34 and 35: cybercrime crisis is behind us, the
Page 36: Computing Security Secure systems,

CS Jan-Feb 2024

You also want an ePaper? Increase the reach of your titles

Delete template?

Save as template?