The newly launched single largest evaluation of cyber assaults throughout all of 2023 present a powerful tie between using phishing and methods designed to realize credentialed entry.
I’ve stood on the “phishing is an issue” soapbox for a few years, trying to focus the eye of cybersecurity groups on the only largest drawback throughout the group: the workers that fall for social engineering techniques time and time once more.
Having simply taken a have a look at an enormous evaluation of tens of billions of 2023 cybersecurity occasions in The 2024 Comcast Enterprise Cybersecurity Menace Report, I really feel somewhat redeemed.
In keeping with the report, 2.6 billion phishing occasions have been detected by Comcast Enterprise final yr. To place that massive a quantity into perspective, that’s barely lower than 5000 phishing assaults detected each minute of final yr.
However phishing assaults on organizations are solely a way to an finish – and, normally, that finish is one among only a few outcomes: malware an infection, some sort of socially-engineered recipient response, or tried credential theft.
And Comcast makes it clear that credential entry is “intricately tied” to phishing assaults with over 400 million cases of credential entry methods detected (that’s over 1,000,000 every day) that embody OS credential dumping, compelled authentication, stolen or cast authentication certificates, and exploitation for credentialed entry.
In different phrases, organizations must be fearful about stopping phishing assaults and maintaining credentials safe – one thing that may be assisted by means of using new-school safety consciousness coaching designed to coach workers about each phishing and the necessity for vigilance in the case of their credentials.
KnowBe4 empowers your workforce to make smarter safety selections each day. Over 70,000 organizations worldwide belief the KnowBe4 platform to strengthen their safety tradition and scale back human danger.