TLDR:
- A recent Kaspersky report highlights a rise in lengthy cyberattacks.
- Trusted relationships are increasingly exploited by attackers to gain access.
- Businesses should prioritize employee training and implement strong security measures.
- Managed security services and incident response assistance can further enhance protection.
A recent report by Kaspersky reveals a concerning trend in cyberattacks: trusted relationships are becoming a common entry point for attackers. This article explores the findings of the Kaspersky Incident Response 2023 report and offers recommendations for businesses to mitigate these risks.
Increased Prevalence of Long-Lasting Attacks
The report indicates that over 20% of cyberattacks in ;2023 lasted more than a month, marking a significant rise from previous years. This highlights the growing sophistication of cybercriminals who employ tactics to prolong their presence within a network.
Exploiting Trust: A Deceptive Tactic
Kaspersky identified a rise in attacks leveraging trusted relationships. Hackers compromise a trusted partner to gain access to multiple victims, making detection and mitigation more challenging. These attacks often go unnoticed until a data leak occurs, allowing attackers extended time to inflict damage.
Importance of Cybersecurity Measures
The report emphasizes the critical role of cybersecurity awareness and robust security protocols. Businesses should prioritize employee training, implement strong password policies, and back up critical data regularly. Additionally, managed security services and incident response assistance can significantly enhance protection against advanced attacks.
Kaspersky’s Recommendations
To combat these evolving threats, Kaspersky suggests several security measures:
- Foster a culture of cybersecurity awareness among employees.
- Restrict public access to management ports.
- Enforce a zero-tolerance policy for patch management.
- Implement robust password policies and multi-factor authentication.
- Back up critical data regularly.
- Consider managed security services for advanced threat detection.
- Seek help from cybersecurity experts in case of suspicious activity.
To learn more, please visit Incident Response 2023 report link.