Company
Date Published
Author
CSO
Word count
2360
Language
English
Hacker News points
None

Summary

CrowdStrike's 2019 Cyber Front Lines Report highlights key insights into the evolving cybersecurity landscape, emphasizing that cyber adversaries continue to exploit security gaps for business disruption, data theft, and monetary gain. The report reveals that business disruption was the primary attack objective in 36% of incidents, often involving ransomware and destructive malware, while data theft accounted for 25% of breaches, including intellectual property and personal data. It also notes an increase in average dwell time to 95 days due to advanced adversaries using sophisticated techniques to remain undetected, underscoring the need for proactive threat hunting. Despite these challenges, there has been an improvement in organizations' ability to self-detect breaches, with 79% of them identifying intrusions internally. Spear-phishing remains a prevalent attack vector, alongside web attacks and compromised credentials, while the adoption of multifactor authentication is contributing to a decline in the latter. CrowdStrike recommends following the "1-10-60 rule" to enhance detection and response times, which involves detecting intrusions in one minute, investigating in 10 minutes, and remediating within 60 minutes to prevent potential breaches.