Securonix Threat Labs Unveils 2023 Threat Report, Detailing Year’s Most Impactful Trends, Threats and Vulnerabilities
SIEM
Annual Report Reveals Cyberthreat Activity Nearly Doubled Year-Over-Year
Addison, TX – August 8, 2023 – Securonix, Inc., a leader in Unified Defense SIEM, today released its annual Threat Report , which details the year’s most significant threats and vulnerabilities, identifies frequently observed indicators of compromise (IoCs) and tactics, techniques and procedures (TTPs), and reveals the top data sources where these activities were detected. According to the report, the dynamic nature of threats, broadening attack surface and evolving adversarial tactics have led to increased vulnerabilities for individuals and organizations. Securonix Autonomous Threat Sweeper (ATS) observed 1,588 global cyberthreats over the past year and issued nearly twice the amount of threat awareness notifications as it did in 2022.
“As enterprises continue to adapt to the evolving threat landscape and strive to protect their perimeter-less environments, threat actors have also undergone significant changes to evade traditional security measures and enhance their ability to compromise systems,” said Sina Chehreghani, Manager of Threat Hunting & Incident Response at Securonix. “It is imperative that we recognize this shift, increase proactive security measures and work together as an industry to collaboratively disseminate threat intelligence. These steps are critical in efforts to mitigate emerging threats and defend against nefarious actors.”
Key findings from the 2023 Securonix Threat Report include:
- Phishing attacks increased by 62% over the last year and continue to serve as the leading vector of threats.
- Vacation-request phishing email attacks grew by 25% compared to the previous 12 months.
- The number of IoCs and TTPs scanned is up 35% year-over-year and 14% per month on average during the same period.
- The most frequently seen data sources showing active threats over the last year include IDS/IPS/UTM/Threat Detection, Endpoint Management Systems, Data Loss Prevention and Email Security.
- Threats identified in the wild increased by an average of 32% per month in the past year while threats identified in environments ballooned by 25%.
- Securonix Threat Labs investigated nearly 550 threats in environments in the last year, and SSH honeypot data points were seen across more environments than any other threat during that period.
The report found that complex cyberattacks are proliferating across a wide range of industries, sizes and geographies. This emphasizes the importance of increased vigilance and amplifies the need for robust telemetry that enables security researchers to understand emerging threats, develop effective countermeasures and proactively enhance their security posture by implementing necessary safeguards and configurations. As nefarious actors and attack groups continued their relentless pursuit of financial gain over the past year, Securonix Threat Labs research shows that the steady growth in cyberthreat activity underscores threat actors’ adaptability, cleverness and willingness to utilize older yet effective methods.
Securonix Threat Labs empowers security teams to protect their organizations against emerging threats by bringing together the industry’s foremost experts to develop and implement the latest countermeasures and best practices. For more information on Securonix Threat Labs, including its latest advisories, IoCs and threat hunting queries, please visit: https://www.securonix.com//securonix-threat-research-lab.
To access the Securonix Threat Labs 2023 Cyber Threat Report, please visit: https://www.securonix.com//resources/2023-securonix-threat-report/
About Securonix
Securonix is leading the evolution of SIEM for today’s hybrid cloud, data-driven enterprises. Securonix Unified Defense SIEM provides organizations with the first and only content-driven threat detection, investigation and response (TDIR) solution built with a highly scalable data cloud and a unified experience from the analyst to the CISO. The innovative cloud-native solution enables organizations to scale up their security operations and keep up with evolving threats. For more information, visit www.securonix.com or follow us on LinkedIn, Facebook, and Twitter.
Contact:
Geoff Lopes
fama PR for Securonix