Even with the shifting menace panorama, organizations view malware, phishing, and information breaches as their greatest threats.
Nearly a 3rd of respondents in Fastly’s “Battle Hearth with Hearth” survey stated they think about information breaches and information loss as the largest cybersecurity menace to their organizations over the following 12 months. Malware (29%) and phishing (26%) spherical out the highest three. What’s notable is the change in focus from 2021, when 31% of respondents named malware as their greatest menace, adopted by distributed denial-of-service assaults (26%) and assaults focusing on identified vulnerabilities (25%).
Whereas assaults exploiting vulnerabilities or misconfigured providers had been perceived as the largest threats in 2021, malware, phishing, and ransomware seemed to be greater points in 2022. Fastly famous the truth that the “ENISA Menace Panorama 2022” report additionally recognized ransomware as the highest menace companies had been involved about, whereas malware was the second mostly recognized menace.
Fastly’s information confirmed that simply 14% had been involved about DDoS assaults in 2022 — which is a surprisingly steep decline, particularly contemplating the stratospheric improve in DDoS assaults in 2022. There have been 60% extra DDoS assaults within the first six months of 2022 than in all of 2021, in keeping with the report. One motive for the disconnect could also be as a result of content material supply networks (CDNs) are capable of take up the overwhelming majority of DDoS assaults, liberating up IT to concentrate on different areas, acknowledged Sean Leach, Fastly’s chief product architect, within the report.
Whereas assaults in opposition to distant employees didn’t present up on the record of threats organizations are anxious about, Fastly’s information means that organizations are nonetheless very involved about their capacity to guard distant employees. Practically half, or 46%, predicted that assaults on distant employees will drive cybersecurity threats over the following 12 months.
“Distant employees create no further vulnerability on their very own,” Leach acknowledged, noting that issues about securing distant employees have extra to do with adoption of latest applied sciences and studying methods to use safety controls successfully.
To bolster their defenses, 51% of world companies are actively investing in distant worker safety, with an additional 38% planning on investing in it inside the subsequent two years, Fastly stated in its report.
General, IT leaders are rising their cybersecurity investments to usher in extra instruments and applied sciences to defend in opposition to threats — 73% stated they had been rising cybersecurity funding. Sadly, extra instruments do not essentially imply higher safety, as a few of these instruments might not simply combine with the prevailing safety stack or with one another, Leach stated.
“As an alternative of shopping for any variety of pointless instruments, companies with profitable safety methods typically work with fewer applied sciences which work carefully collectively and are deeply built-in with each other,” Leach stated.
