ISLAMABAD:
Advanced persistent threats (APTs), classified as human-driven cyberattacks, have been detected in 25% of companies, accounting for over 43% of all high-severity incidents, which marks a staggering 74% increase compared to 2023 and a 43% rise from 2022, according to the latest Kaspersky Managed Detection and Response (MDR) analyst report.
The annual MDR analyst report provides insights based on the analysis of MDR incidents identified by a team of Kaspersky’s security operations centre. The report sheds light on the most prevalent attacker tactics, techniques and tools as well as the characteristics of detected incidents and their distribution across regions and industry sectors.
Despite advancements in automated detection technologies, determined attackers continue to exploit vulnerabilities and circumvent these systems. Notably, APTs were identified across every sector except telecommunications, with the IT and government sectors bearing the brunt.
Moreover, incidents characterised as human-driven attacks confirmed by customers as cyber exercises comprised more than 17% of total incidents. Additionally, severe violations of security policies comprised approximately 12% of high-severity events, with malware-related incidents accounting for over 12%, predominantly affecting the financial, industrial and IT sectors.
“In 2024, we observed a significant escalation in advanced persistent threats and this alarming trend emphasises that even with advancements in automated detection, determined human-driven attacks continue to exploit vulnerabilities across various sectors. Organisations must enhance their preparedness and invest in comprehensive cybersecurity strategies to counteract these sophisticated threats,” stated Sergey Soldatov, Head of Security Operations Centre at Kaspersky.
If companies lack cybersecurity personnel or expertise, they can apply for Managed Detection and Response and Incident Response to investigate incidents and receive expert support. These services encompass the entire incident management cycle, from threat identification to continuous protection and remediation.
#companies #humandriven #cyberattacks
Leave a Reply