Security Teams Face Burnout Amid Fight Against Geopolitically Motivated Attacks

By

Security teams today are facing endless waves of cyberattacks. They continue to reel from pandemic disruptions and burnout while bracing for a barrage of cyberattacks. Many of those attacks are geopolitically motivated – specifically, tied to Russia’s invasion of Ukraine. In fact, according to VMware’s eighth annual Global Incident Response Threat Report, 65% of defenders state that cyberattacks have increased since Russia invaded Ukraine of February 24.

Many of the cyber attacks are directly related to Russia’s Ukraine campaign.  Leading up to the invasion, Russian cyberattacks hit Ukraine’s largest gas retailer, their defense ministry’s website and at least 21 companies involved in the liquefied natural gas industry. This included Chevron, Cheniere Energy and Kinder Morgan. New malware and exploits targeting Ukrainian government networks, domestic telecom companies and other critical infrastructure continued after the invasion.

Zero-day exploits also are showing no signs of abatement after record levels last year. A little less than two-thirds of respondents said they experienced such attacks in the past 12 months, up from 51% in 2021. This surge is also attributed to largely to geopolitical conflict.

The report shined a light on emerging threats such as deepfakes. Deepfake attacks rose by 13% with 66% of respondents saying they witnessed them in the past 12 months. Email was the top delivery method at more than three-fourths, for such attacks, which corresponds with the rise in BECs. From 2016 to 2021, BEC incidents cost organizations an estimated $43.3 billion, according to the FBI.

“Cybercriminals have evolved beyond using synthetic video and audio,” said Rick McElroy, principal cybersecurity strategist at VMware. “Their new goal is to use deepfake technology to compromise organizations and gain access to their environment.”

APIs are also increasingly under threat – 23% of all attacks seen by respondents in the past 12 months compromised API security. Breached systems can be used to distribute attacks, known as progressive API attacks.

With rising threats, incident responders are fighting back and 87% saying that they are able to disrupt a cybercriminal’s activities sometimes or very often. However, they need to be able to perform even better if they hope to continue to repel threats. Security teams need more visibility across today’s widening attack surfaces to be better equipped to weather the storm.

To do this, security teams should:

  • Focus on workloads holistically. Companies must understand the inner workings of their entire workload.
  • Inspect in-band traffic. Many modern attacks succeed by disguising themselves as legitimate IT practices.
  • Integrate network detection and response with endpoint detection and response.
  • Embrace Zero Trust principles. This broad approach to security assumes every digital transaction could be dangerous.
  • Conduct continuous threat hunting. Security teams should assume attackers have multiple avenues into their organization.

Just as security teams were feeling a calm from pandemic disruptions, an endless wave of threats came in full force, and have not slowed down. As long as security teams have more visibility of the widening attack surface, they will be better equipped to defeat the bad actors and prevent successful attacks.




Edited by Erik Linask

TechZone360 Editor

SHARE THIS ARTICLE
Related Articles

5 Tips to Protect Your Website From Hackers

By: Contributing Writer    9/21/2022

Having an online presence today is critical for every organization, but as organizations increase their online visibility, they need to be constantly …

Read More

Intel Addressing Semiconductor Challenge with $20B Silicon Heartland Facility

By: Greg Tavarez    9/20/2022

Intel broke ground at the Silicon Heartland in Ohio and revealed the first phase of an education program to innovate and develop new capabilities with…

Read More

Food Tech and The Vegan Revolution

By: Juhi Fadia    9/13/2022

Israel is not only one of the most active venture capital investment countries in the world and home to many of the most successful tech start-ups in …

Read More

TECH: BIG DATA IN THE FASHION INDUSTRY

By: Contributing Writer    9/12/2022

The recipe for success in fashion retail? The right product, at the right price, at the right time. Simple. It is therefore quite remarkable that pred…

Read More

How To Find The Best Business VPN For Your Company

By: Contributing Writer    8/29/2022

A VPN, or Virtual Private Network, is a tool that helps to improve your online privacy and security by creating a private network from a public intern…

Read More