Library of External Reports

Security Intelligence Report, 2017 Microsoft - data from over 600 million computers – 74 pgs – 18 August 2017 Over two-thirds of incoming attacks on Azure services in 1Q17 came from IP addresses in China (35,1%) and the U.S. (32.5 %). Trojans were the most commonly encountered category of malicious software in 1Q17 by a large margin, led by Win32/Xadupi. About 8 % of RCE and EOP vulnerabilities were exploited within 30 days of the corresponding security update release. 300% increase in user accounts attacked the past 12 months

The top constraints to adopting advanced security products and solutions, according to the benchmark study, are: Budget (cited by 35% of the respondents), Product compatibility (28%), Certification (25%), and Talent (25%).

Cyber Threat-Scape Report - Accenture - 56 pigs - 5 October 2017 Criminal marketplaces are profitable and tools are more accessible to all. Destructive cyber-threat activity is becoming more common and attribution is getting harder Although governments are trying hard to avoid future leaks, more exploit arsenals will be exposed in the coming years. An increasingly lucrative criminal marketplace is driving differentiated criminal offerings, emboldening and enabling more actors with better capabilities.

2017 Payment Security Report - Verizon – 58pgs – 7th December 2017 66% of customers say they are unlikely to do business with an organization that experienced a breach

Cyber Security: Export Strategy Department for International Trade – 20pgs – 26th March Pursue, Enable, Respond: The three Key stages of the new cyber security strategy. 90% of big businesses have been hit by a major cyber attack but still lack a good understanding around potential cyber risks.

2018 Cost of a Data Breach Study: Global Overview Ponemon Institute LLC - 47pgs – 12th July 2018 US organizations pay the highest price for losing customers after a data breach. Healthcare companies have the highest days to contain a cyber incident at 103 days. Third party involvement in a breach and extensive cloud migration at the time of the breach increase the cost. Incident response teams and the extensive use of encryption result in the greatest decrease the cost of a breach. The typical enterprise is estimated to have a 28% chance of suffering a material breach in the next 24 months. The cost of the typical data breach has risen 6.4% this year, and now stands at $3.86 million

Netwrix – 36pgs – 2nd October 2018 22% of intellectual property theft is due to a human error. 26% of organizations do not have a designated compliance person. 70% of companies are already doing risk assessment but not regularly enough. Insiders cause an overwhelming majority of security incidents by accidental actions. Most organizations are failing to implement the fundamental security practices that mitigate IT risk

McAfee – 34pgs – 18th December 2018 Cryptomining Boom Times Continue. Underground Forums Boost the Effectiveness of Cybercriminals. Total “coin miner” malware has grown more than 4,000% in the past year.

70% of brand impersonation attacks spoofed Microsoft. Over 90% of organizations report being hit by targeted email attacks. 20% of identity deception attacks involved the use of compromised accounts. 20% of the inbound attacks that target employees are account takeover-based threats. 96% of successful data breaches begin with an email, averaging $7.9m in costs per incident. Costs reported to Security Operations Centers exceeded $4.86m to triage, investigate and remediate

78% increase in supply chain attacks in 2018. 56% increase of web attacks on endpoints in 2018. 48% of malicious email attachments are office files, an increase of 5% in past 12 months. 20% decrease in overall ransomware, however enterprise and mobile ransomware increased by 12% and 33% respectively.

93% of respondents are dealing with rogue cloud app usage. Only 10% of organizations can analyze 75%+ of their security events. 85% of respondents interested in replacing passwords with new forms of authentication. 45% of respondents planning to deploy automated patch management in next 24 months.

189 million mobile bot attacks were recorded, a 12% rise since H1 2018. 244 million human-initiated attacks were recorded in H2 2018, as well as 3 billion bot attacks. 2.1 billion bot attacks on e-commerce merchants were blocked, a 142% growth compared to last year. Desktop transactions using mobile tethers are 2.4x more likely to be fraud than devices connected via WiFi/fixed-line broadband.

61% of respondents admit their organisation has encountered a data breach. 82% of European firms say they are moderately or extremely secure, 6% lower than globally. 98% of European companies are storing sensitive data in digitally transformative environments. 41% of European companies say their security spending is increasing, down 31% lower than 2018.

53% YoY rise in the amount of files with sensitive data shared in the cloud. 21% of files in the cloud contain sensitive data, a 17% rise in the past two years. 80% of all organizations experience at least 1 compromised account threat per month. 27.7% YoY increase of threat events in the cloud (i.e. compromised account, privileged user or insider threat).

Cofense – 35pgs – 5th June 2019 1 in 7 emails reported to Cofense were confirmed as malicious. 55% of phishing emails utilizing cloud filesharing services used Sharepoint. 90% of malicious emails verified by Cofense were found in environments using secure email gateways. 74% of phishing threats are Credential Phishing, 15% Malware, 9% Business Email Compromise and 2% Scams.