IT Managers Struggling to Keep Up with Numerous Targeted Cyber attacks

By Soko Directory Team / July 11, 2019




IT managers are flooded with cyber attacks coming from all directions and are struggling to keep up due to a lack of security expertise, budget and up to date technology, a new study has revealed.

The study, conducted by Sophos and dubbed “The Impossible Puzzle of Cybersecurity” polled 3,100 IT decision makers from mid-sized businesses in the US, Canada, Mexico, Colombia, Brazil, UK, France, Germany, Australia, Japan, India, and South Africa.

The Sophos survey shows how attack techniques are varied and often multi-staged, increasing the difficulty to defend networks.

One in five IT managers surveyed didn’t know how they were breached, and the diversity of attack methods means no one defensive strategy is a silver bullet.

“Cybercriminals are evolving their attack methods and often use multiple payloads to maximize profits. Software exploits were the initial point of entry in 23 percent of incidents, but they were also used in some fashion in 35 percent of all attacks, demonstrating how exploits are used at multiple stages of the attack chain,” said Chester Wisniewski, principal research scientist, Sophos.

“Organizations that are only patching externally facing high-risk servers are left vulnerable internally and cybercriminals are taking advantage of this and other security lapses,” he added.

The wide range, multiple stages, and scale of today’s attacks are proving effective.

For example, 53 percent of those who fell victim to a cyber attack was hit by a phishing email, and 30 percent by ransomware. Forty-one percent said they suffered a data breach.

Weak Links in Security Increasingly Lead to Supply Chain Compromises

Based on the responses, it’s not surprising that 75 percent of IT managers consider software exploits, unpatched vulnerabilities and/or zero-day threats as a top security risk.

Fifty percent consider phishing a top security risk.

Alarmingly, only 16 percent of IT managers consider the supply chain a top security risk, exposing an additional weak spot that cybercriminals will likely add to their repertoire of attack vectors.

“Cybercriminals are always looking for a way into an organization, and supply chain attacks are ranking higher now on their list of methods. IT managers should prioritize supply chain as a security risk, but don’t because they consider these attacks perpetrated by nation states on high profile targets. While it is true that nation-states may have created the blueprints for these attacks, once these techniques are publicized, other cybercriminals often adopt them for their ingenuity and high success rate,” said Wisniewski.

Read Also: Sophos Announces Intercept X for Server with Endpoint Detection and Response To Help Businesses Battle Cyberattacks

“Supply chain attacks are also an effective way for cybercriminals to carry out automated, active attacks, where they select a victim from a larger pool of prospects and then actively hack into that specific organization using hand-to-keyboard techniques and lateral movements to evade detection and reach their destination.”

Lack of Security Expertise, Budget and Up to Date Technology

According to the Sophos survey, IT managers reported that 26 percent of their team’s time is spent managing security, on average.

Yet, 86 percent agree security expertise could be improved and 80 percent want a stronger team in place to detect, investigate and respond to security incidents.

Recruiting talent is also an issue, with 79 percent saying that recruiting people with the cybersecurity skills they need is challenge.

Regarding budget, 66 percent said their organization’s cybersecurity budget (including people and technology) is below what it needs to be. Having current technology in place is another problem, with 75 percent agreeing that staying up to date with cybersecurity technology is a challenge for their organization.

This lack of security expertise, budget and up to date technology indicates IT managers are struggling to respond to cyberattacks instead of proactively planning and handling what’s coming next.

“Staying on top of where threats are coming from takes dedicated expertise, but IT managers often have a hard time finding the right talent or don’t have a proper security system in place that allows them to respond quickly and efficiently to attacks,” said Wisniewski.

“If organizations can adopt a security system with products that work together to share intelligence and automatically react to threats, then IT security teams can avoid the trap of perpetually catching up after yesterday’s attack and better defend against what’s going to happen tomorrow. Having a security ‘system’ in place helps alleviate the security skills gap IT managers are facing. It’s much more time and cost effective for businesses to grow their security maturity with simple to use tools that coordinate with each other across an entire estate.”

Synchronized Security Solves the Impossible Puzzle of Cybersecurity

With cyber threats coming from supply chain attacks, phishing emails, software exploits, vulnerabilities, insecure wireless networks, and much more, businesses need a security solution that helps them eliminate gaps and better identify previously unseen threats.

Sophos Synchronized Security, a single integrated system, provides this much-needed visibility to threats by integrating Sophos endpoint, network, mobile, Wi-Fi, and encryption products to share information in real-time and automatically respond to incidents.

Read Also: Sophos Acquires Rook Security to Provide Managed Detection and Response



About Soko Directory Team

Soko Directory is a Financial and Markets digital portal that tracks brands, listed firms on the NSE, SMEs and trend setters in the markets eco-system.Find us on Facebook: facebook.com/SokoDirectory and on Twitter: twitter.com/SokoDirectory

View other posts by Soko Directory Team


More Articles From This Author








Other Related Articles










SOKO DIRECTORY & FINANCIAL GUIDE

ARCHIVES

2019
  • January 2019 (256)
  • February 2019 (216)
  • March 2019 (285)
  • April 2019 (254)
  • May 2019 (272)
  • June 2019 (252)
  • July 2019 (150)
  • 2018
  • January 2018 (291)
  • February 2018 (219)
  • March 2018 (278)
  • April 2018 (225)
  • May 2018 (238)
  • June 2018 (178)
  • July 2018 (257)
  • August 2018 (249)
  • September 2018 (256)
  • October 2018 (287)
  • November 2018 (284)
  • December 2018 (187)
  • 2017
  • January 2017 (183)
  • February 2017 (195)
  • March 2017 (207)
  • April 2017 (104)
  • May 2017 (169)
  • June 2017 (206)
  • July 2017 (190)
  • August 2017 (195)
  • September 2017 (186)
  • October 2017 (235)
  • November 2017 (253)
  • December 2017 (266)
  • 2016
  • January 2016 (165)
  • February 2016 (165)
  • March 2016 (190)
  • April 2016 (143)
  • May 2016 (246)
  • June 2016 (183)
  • July 2016 (271)
  • August 2016 (249)
  • September 2016 (234)
  • October 2016 (191)
  • November 2016 (243)
  • December 2016 (153)
  • 2015
  • January 2015 (1)
  • February 2015 (4)
  • March 2015 (166)
  • April 2015 (109)
  • May 2015 (117)
  • June 2015 (121)
  • July 2015 (150)
  • August 2015 (157)
  • September 2015 (189)
  • October 2015 (170)
  • November 2015 (174)
  • December 2015 (208)
  • 2014
  • March 2014 (2)
  • 2013
  • March 2013 (10)
  • June 2013 (1)
  • 2012
  • March 2012 (7)
  • April 2012 (15)
  • May 2012 (1)
  • July 2012 (1)
  • August 2012 (4)
  • October 2012 (2)
  • November 2012 (2)
  • December 2012 (1)
  • 2011
    2010
    2009
    2008
    2007
    2006
    2005
    2004
    2003
    2002
    2001
    2000
    1999
    1998
    1997
    1996
    1995
    1994
    1993
    1992
    1991
    1990
    1989
    1988
    1987
    1986
    1985
    1984
    1983
    1982
    1981
    1980
    1979
    1978
    1977
    1976
    1975
    1974
    1973
    1972
    1971
    1970
    1969
    1968
    1967
    1966
    1965
    1964
    1963
    1962
    1961
    1960
    1959
    1958
    1957
    1956
    1955
    1954
    1953
    1952
    1951
    1950