Home Greater than 90% of enterprises surveyed have been hit by profitable cyberattacks

onJanuary 27, 2022

Greater than 90% of enterprises surveyed have been hit by profitable cyberattacks

Cyber Security

4 min read

[ad_1]

Because the begin of the pandemic, some 83% of these polled by Anomali have seen a rise in tried cyberattacks, whereas most have witnessed an increase in phishing emails.

Picture: Shutterstock/Khakimullin Aleksandr

Cyberattacks can affect any group, large or small. However giant enterprises are sometimes extra tempting targets because of the huge quantity of profitable knowledge they maintain. A brand new report from cybersecurity agency Anomali reveals a rise in profitable cyberattacks and presents concepts on how organizations can higher defend themselves.

Revealed on Thursday, the “2022 Anomali Cybersecurity Insights Report” is predicated on a survey of 800 cybersecurity choice makers commissioned by Anomali and performed by Harris between September 9 and October 13 of 2021. The survey elicited responses from professionals within the US, UK, Canada and different international locations who work full time in such industries as manufacturing, telecommunications and monetary providers.

Among the many respondents, 87% mentioned that their organizations have been victims of profitable cyberattacks someday over the previous three years. On this case, a profitable assault is one which brought on injury, disruption or a knowledge breach. Because the pandemic began nearly two years in the past, 83% of these polled have skilled a rise in tried cyberattacks, whereas 87% have been hit with an increase in phishing emails, lots of them exploiting coronavirus-related themes.

SEE: NIST Cybersecurity Framework: A cheat sheet for professionals (free PDF) (TechRepublic)

Ransomware has brought on turmoil for lots of the respondents, with greater than half saying they have been impacted by this sort of assault over the previous three years. Some 39% of them mentioned they paid the ransom. Amongst these, 58% paid someplace between $100,000 and nearly $1 million, whereas 7% shelled out $1 million or extra.

Monetary losses on account of cyberattacks, phishing campaigns, and knowledge breaches have surged, particularly from 2019 to 2020. In 2019, some 15% of the organizations suffered losses of $500,000 or extra. In 2020, that share nearly doubled to twenty-eight%.

As cyberattacks have grown extra subtle and efficient, safety has turn into a better problem. Solely 49% of the respondents mentioned they strongly agree that their safety groups are capable of prioritize threats based mostly on developments, severity and doable affect. Even much less (46%) mentioned they strongly agree that their safety applied sciences can evolve to detect recognized threats. Additional, 32% strongly agree that their safety groups wrestle to maintain up with the shortly altering nature of cyberthreats.

Detecting and recovering from an assault can take time. These surveyed mentioned that they tackle common 3.6 days to detect recognized assaults that come from cybercriminal organizations, 3.5 days to detect these from particular person hackers, 3.3 days for these from superior persistent threats (APTs) and a pair of.9 days for these from nation states. Following
the Photo voltaic Winds exploit

in 2020, organizations took on common 2.9 days to reply and three.1 days to recuperate.

SEE: What are cellular VPN apps and why you need to be utilizing them (TechRepublic Premium)

How are organizations attempting to take care of the rise in cyberattacks? The survey uncovered a number of totally different concepts.

To higher detect safety points with legacy methods, respondents are more and more profiting from new applied sciences. Amongst these polled, 59% have employed menace intelligence, 48% are utilizing
prolonged detection and response

(XDR) applied sciences and 43% depend on the MITRE ATT&CK Framework.

Some 78% of the safety professionals mentioned they’ve reassessed their cybersecurity technique for the reason that pandemic began, 74% reported that their safety budgets have elevated over the previous yr and 38% mentioned that just about 40% of their total IT price range is now geared towards cybersecurity.

Lastly, the respondents have been requested what elements they use to judge new safety applied sciences. The issue thought-about probably the most important as cited by 48% was the extent of help out there to customers. Ease of use got here in second, cited by 46% of these surveyed, whereas the power to combine with different safety methods was the third most necessary issue, talked about by 44%. The least necessary elements have been return on funding with 33% and value with 26%.

“This new analysis reveals that adversaries haven’t solely stepped up the variety of assaults they’ve began launching since COVID-19 first struck the world however have additionally significantly improved their success charges,” Anomali president Hugh Njemanze mentioned in a press launch. “We have been inspired to study that many organizations are devoting extra sources to cybersecurity and adopting new applied sciences to turn into extra resilient. We have been additionally deeply involved over how troublesome it’s for them to detect and reply to attackers earlier than and after they’ve made their manner into networks.”