Weekly cyberattacks jumped by 50% in 2021, with a peak in December due largely to the Log4J exploit

Cybercriminals loved a banner 12 months in 2021; excellent news for them however unhealthy information for his or her victims. For 2021 as a complete, the variety of cyberattacks in opposition to company networks soared by 50% from the earlier 12 months, cyber risk intelligence supplier Test Level Analysis stated in a report launched on Monday.

SEE: Incident response coverage (TechRepublic Premium)

The 12 months ended with an particularly tough fourth quarter that noticed an all-time peak in weekly cyberattacks at 925 per group. This capper was due largely to the Log4J vulnerability, in response to Test Level. Since changing into public data in December, the flaw in Apache’s Log4j utility has prompted hackers to scan for unpatched methods on which they will remotely run malicious code and take management of affected computer systems.

For 2021, the schooling/analysis sector was hit by the best variety of cyberattacks, averaging 1,605 per group every week, a 75% improve from 2020. The federal government/navy sector was subsequent, with 1,136 assaults per week, a acquire of 57% from the earlier 12 months. In third was the communications trade with 1,079 assaults per group every week, a 51% improve.

Internationally, Africa bore the brunt of the very best variety of assaults final 12 months, with a median of 1,582 per week per group. APAC (Asia-Pacific) was second, averaging 1,353 weekly assaults per group, adopted by Latin America with 1,118 assaults weekly, Europe with 670 assaults weekly, and North America with a median of 503 weekly assaults per group.

“Hackers hold innovating,” stated Test Level Software program information analysis supervisor Omer Dembinsky. “New penetration methods and evasion strategies have made it a lot simpler for hackers to execute malicious intentions. What’s most alarming is that we’re seeing some pivotal societal industries surge into the most-attacked checklist. Schooling, authorities and healthcare industries made it into the highest 5 most attacked industries checklist, worldwide. I anticipate these numbers to extend going into 2022, as hackers will proceed to innovate and discover new strategies to execute cyberattacks, particularly ransomware.”

To guard your group from cyberattack, Test Level provides the next ideas:

1. Patch. Attackers usually penetrate networks by exploiting identified safety vulnerabilities for which a patch is out there however has not been utilized. Make sure that the most recent essential safety patches are put in on all methods and software program.
2. Section. Section your networks and apply robust firewall and intrusion prevention safeguards between these segments to forestall malware from navigating throughout your complete community.
3. Educate workers. Consciousness by customers will help stop an assault earlier than it hits. Educate your customers so that they know report one thing suspicious and doubtlessly malicious to your assist desk or IT folks.
4. Implement superior safety safety. Nobody expertise can defend your group from each kind of risk. As an alternative, contemplate a spread of key applied sciences, equivalent to machine studying, sandboxing, anomaly detection and content material disarmament. Two key components that may show efficient are risk extraction (file sanitization) and risk emulation (superior sandboxing). Individually, these provide robust safety. Collectively, they supply a complete strategy to fight unknown malware each on the community degree and on endpoint gadgets.

“We’re in a cyber pandemic, if you’ll,” Dembinsky stated. “I strongly urge the general public, particularly these within the schooling, authorities and healthcare sectors, to study the fundamentals on defend themselves. Easy measures equivalent to patching, segmenting your networks and educating workers can go a good distance in making the world safer.”

Cybersecurity Insider Publication

Strengthen your group’s IT safety defenses by preserving abreast of the most recent cybersecurity information, options, and finest practices.
Delivered Tuesdays and Thursdays

Join at the moment

Additionally see