The data for 2023 has been tabulated and we can now share some cybersecurity trends we saw unfold over the course of 2023:
- Dwell time continues to decrease and now averages under one week. Dwell time is the length of time a criminal has access to your internal systems before launching an obvious attack. A few years ago, dwell time was often 200 days or more, and criminals are still getting their work done today, so criminals are moving faster than ever. 95% of attacks were launched after initial access, so a strong Endpoint Detection and Response (EDR) solution is required. Real-time monitoring of EDR and MDR solutions by a 24/7 SOC like SNAP-Defense is absolutely required to catch criminals before they deliver their payload.
- 78% of all incidents were cloud-related. In other words, just because your data is in the cloud does not mean you’re safe from ransomware and other modern attacks. SNAP-Defense protects both Microsoft 365 and Google Workspace cloud environments.
- Business email compromise attempts rose 210%. Advanced Email Security services are a key front-line of defense.
- There was a 64% increase in double-extortion ransomware incidents where criminals demanded payment to decrypt data and again to prevent its public release.
- RDP and VPN attacks are still common. Don’t use default ports and settings.
Predictions for 2024:
- We will see more criminal use of AI, including deepfakes and password cracking, so cybersecurity awareness training and multifactor authentication will be more important than ever.
- Criminals will continue targeting IT support firms and other companies, like building automation, accountants, bookkeeping services, etc., that have access to multiple client networks. These are sometimes referred to as supply chain attacks. Service providers must ensure they are using unique credentials and sophisticated security protocols for remote connections to client computers, clouds, and networks.
