Security News > 2020 > January > Cyber attackers turn to business disruption as primary attack objective

Over the course of 2019, 36% of the incidents that CrowdStrike investigated were most often caused by ransomware, destructive malware or denial of service attacks, revealing that business disruption was often the main attack objective of cybercriminals.

Another notable finding in the new CrowdStrike Services Report shows a large increase in dwell time to an average of 95 days in 2019 - up from 85 days in 2018 - meaning that adversaries were able to hide their activities from defenders for longer, and that organizations still lack the technology necessary to harden network defenses, prevent exploitation and mitigate cyber risk.

Business disruption as primary attack objective Third-party compromises serve as a force multiplier for attacks.

Threat activity around API keys for public cloud-based infrastructure has become more targeted as attackers increase their ability to rapidly and systematically harvest information assets.

The report found that organizations that meet the 1-10-60 benchmark - detect an incident in one minute, investigate in 10 minutes and remediate within an hour - are improving their chances of stopping cyber adversaries.

News URL

http://feedproxy.google.com/~r/HelpNetSecurity/~3/ZWgCASl6QOI/