{"id":18381,"date":"2024-08-08T17:24:17","date_gmt":"2024-08-08T16:24:17","guid":{"rendered":"https:\/\/telecomkh.info\/?p=18381"},"modified":"2024-08-08T17:24:17","modified_gmt":"2024-08-08T16:24:17","slug":"2024-data-breach-investigations-report-vulnerability-exploitation-boom-threatens-cybersecurity","status":"publish","type":"post","link":"https:\/\/telecomkh.info\/?p=18381","title":{"rendered":"2024 Data Breach Investigations Report: Vulnerability exploitation boom threatens cybersecurity"},"content":{"rendered":"

Vulnerability exploitation surged by nearly 3X (180%) last year. Ransomware and the meteoric rise of extortion techniques accounted for a third (32%) of all breaches<\/strong><\/p>\n

Verizon Business released the findings of its 17th-annual Data Breach Investigations Report (DBIR), which analyzed a record-high 30,458 security incidents and 10,626 confirmed breaches in 2023\u2014a two-fold increase over 2022.
\nThe exploitation of vulnerabilities as an initial point of entry almost tripled from the previous year, accounting for 14% of all breaches. This spike was driven primarily by the increasing frequency of attacks targeting vulnerabilities on unpatched systems and devices (zero-day vulnerabilities) by ransomware actors. The MOVEit software breach was one of the largest drivers of these cyberattacks, first in the education sector and later spreading to finance and insurance industries.
\n\u201cThe exploitation of zero-day vulnerabilities by ransomware actors remains a persistent threat to safeguarding enterprises,\u201d said Chris Novak, Sr. Director of Cybersecurity Consulting, Verizon Business.
\nIn a possible relief to some anxieties, the rise of artificial intelligence (AI) was less of a culprit vs challenges in large-scale vulnerability management. \u201cWhile the adoption of artificial intelligence to gain access to valuable corporate assets is a concern on the horizon, a failure to patch basic vulnerabilities has threat actors not needing to advance their approach,\u201d Novak said.
\nAnalysis of the Cybersecurity Infrastructure and Security Agency (CISA) Known Exploited Vulnerabilities (KEV) catalog revealed that on average it takes organizations 55 days to remediate 50% of critical vulnerabilities following the availability of patches. Meanwhile, the median time for detecting the mass exploitations of the CISA KEV on the internet is five days.
\n\u201cThis year\u2019s DBIR findings reflect the evolving landscape that today\u2019s CISO\u2019s must navigate– balancing the need to address vulnerabilities quicker than ever before while investing in the continued employee education as it relates to ransomware and cybersecurity hygiene,\u201d said Craig Robinson, Research Vice President, Security Services at IDC. \u201cThe breadth and depth of the incidents examined in this report provides a window into how breaches are occurring, and despite the low-level of complexity are still proving to be incredibly costly for enterprises.\u201d
\nLast year, 15% of breaches involved a third party, including data custodians, third-party software vulnerabilities, and other direct or indirect supply chain issues. This metric\u2014new for the 2024 DBIR\u2014 shows a 68% increase from the previous period described in the 2023 DBIR.<\/p>\n

The human element continues to be the front door for cybercriminals<\/strong>
\nMost breaches (68%), whether they include a third party or not, involve a non-malicious human element, which refers to a person making an error or falling prey to a social engineering attack. This percentage is about the same as last year. One potential countervailing force is the improvement of reporting practices: 20% of users identified and reported phishing in simulation engagements, and 11% of users who clicked the email also reported it.
\n\u201cThe persistence of the human element in breaches shows that there is still plenty of room for improvement with regard to cybersecurity training, but the increase in self-reporting indicates a culture change that destigmatizes human error and may serve to shine a light on the importance of cybersecurity awareness among the general workforce,\u201d Novak added.<\/p>\n

Other key findings from this year\u2019s report include:<\/strong>
\n\u2022 32% of all breaches involved some type of extortion technique, including ransomware
\n\u2022 Over the past two years, roughly a quarter (between 24% and 25%) of financially motivated incidents involved pretexting
\n\u2022 Over the past 10 years, the Use of stolen credentials has appeared in almost one-third (31%) of all breaches
\n\u2022 Half of the reaches in EMEA are internal
\n\u2022 Espionage attacks continue to dominate in APAC region<\/p>\n

Above, image credited to Verizon<\/em><\/span><\/p>\n","protected":false},"excerpt":{"rendered":"

Vulnerability exploitation surged by nearly 3X (180%) last year. Ransomware and the meteoric rise of extortion techniques accounted for a third (32%) of all breaches Verizon Business released the findings of its 17th-annual Data Breach Investigations Report (DBIR), which analyzed a record-high 30,458 security incidents and 10,626 confirmed breaches in 2023\u2014a two-fold increase over 2022. … <\/p>\n

Continue reading \u00ab2024 Data Breach Investigations Report: Vulnerability exploitation boom threatens cybersecurity\u00bb<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":18382,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":[],"categories":[24],"tags":[],"_links":{"self":[{"href":"https:\/\/telecomkh.info\/index.php?rest_route=\/wp\/v2\/posts\/18381"}],"collection":[{"href":"https:\/\/telecomkh.info\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/telecomkh.info\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/telecomkh.info\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/telecomkh.info\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=18381"}],"version-history":[{"count":1,"href":"https:\/\/telecomkh.info\/index.php?rest_route=\/wp\/v2\/posts\/18381\/revisions"}],"predecessor-version":[{"id":18383,"href":"https:\/\/telecomkh.info\/index.php?rest_route=\/wp\/v2\/posts\/18381\/revisions\/18383"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/telecomkh.info\/index.php?rest_route=\/wp\/v2\/media\/18382"}],"wp:attachment":[{"href":"https:\/\/telecomkh.info\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=18381"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/telecomkh.info\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=18381"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/telecomkh.info\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=18381"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}