• Search for:
    8Dec, 2023
    Five Cybersecurity Predictions for 2024

    The year 2023 saw heightened cybersecurity activity, with both security professionals and adversaries engaged in a constant cat-and-mouse game. The dynamic landscape of cyber threats and the ever-expanding digital attack surface have compelled organizations to refine and fortify their security architectures. Despite the collective hope for a reprieve from the onslaught of daily phishing, ransomware, and credential stuffing attacks, cybercriminals are poised to leverage successful tactics from this year to orchestrate more sophisticated campaigns in the coming year. To stay ahead, it is crucial to anticipate the key themes likely to dominate the cybersecurity space in 2024.

    The following predictions serve as strategic insights for IT and security professionals, guiding them in prioritizing efforts to navigate the ever-changing threat landscape:

    A Never-Ending Story: Compromised Credentials

    The perpetual use of usernames and passwords for access control and authentication has made compromised credentials a recurring vulnerability. Post-mortem analysis of data breaches consistently identifies compromised credentials as the primary point of attack. In fact, a study by the Identity Defined Security Alliance (IDSA) reveals that credential-based data breaches are both ubiquitous (94% of survey respondents experienced an identity-related attack) and highly preventable (99%). 

    Despite this, many organizations lack essential identity-related security controls. Those that have implemented proper access controls often focus on human users, neglecting the multitude of non-human identities arising from digital transformation initiatives (e.g., DevOps, cloud transformation, Internet of Things). As a result, compromised identities, both human and non-human, are expected to fuel cyberattacks in 2024. Organizations are urged to intensify efforts in implementing Zero Trust principles to reduce dependency on passwords.

    Ransomware Attacks Continue to Wreak Havoc

    The ransomware business thrives as cybercriminals exploit vulnerabilities in organizations, as witnessed in attacks on entities such as the Kansas Court System, Yamaha Motors, and Western Digital. In fact, the Ransomware-as-a-Service model has made launching attacks that much easier. Over the past year, ransomware attacks have evolved into multifaceted extortion schemes where data is exfiltrated and threatened to be publicly released if a ransom is not paid. The recent SEC complaint filed by the Alphv/BlackCat ransomware group against MeridianLink adds a new dimension to this tactic. With the new SEC disclosure ruling coming into effect on December 15, 2023, requiring companies to report “material” cybersecurity incidents within four days, this tactic is expected to become commonplace in ransomware attacks. Enterprises need to focus on ransomware preparedness, particularly in recovering endpoints and critical infrastructure such as Active Directory.

    Global Conflicts and Elections Lead to a Rise in Hacktivism

    The intersection of global conflicts and the 2024 Presidential elections in the US provides fertile ground for the emergence of hacktivism. Hacktivists, viewing themselves as champions of free expression, may counteract tightened control over information flow during times of conflict or elections by exposing information or launching attacks. Governments may covertly support hacktivist groups, blurring the lines between state-sponsored hacking and hacktivism. As elections are not only about ballots but also narratives, hacktivists can play a role in shaping public opinion through various cyber operations. The ease of using underlying tools may lead to material attacks involving deepfake voice and/or video content in 2024.

    White House Cybersecurity Strategy Triggers Revival of Vulnerability Management

    With cyber adversaries exploiting zero-day vulnerabilities, the White House’s National Cybersecurity Strategy, released in March 2023, shifts liability to organizations that fail to take reasonable precautions to secure their software. This strategy emphasizes the need for robust vulnerability management, involving the identification, assessment, prioritization, and mitigation of security vulnerabilities. The potential increase in liability for independent software vendors is expected to drive technological advancements in vulnerability management tools, leading to a revival of this otherwise dormant security category.

    The Emergence of Next-Gen Security Awareness Programs

    Security awareness training, a cornerstone of cybersecurity, is set for a transformation in 2024. The widespread adoption of generative artificial intelligence within the realm of cyber threats will render traditional training obsolete. Next-gen programs will embrace continuous breach and attack simulation (BAS) to validate user-focused controls’ efficacy and provide real-time guidance to prevent falling victim to contemporary social engineering attacks. Specialized tools will also focus on helping software developers learn secure coding practices to prevent vulnerabilities before they occur.

    Conclusion In summary, 2024 emphasizes the critical need to strike a balance between cybersecurity and cyber resilience. As IT and security professionals gear up for the year ahead, prioritizing the ability to see, protect, and manage the entire attack surface continually is paramount. Safeguarding mission-critical assets and developing the capacity to anticipate, withstand, recover from, and adapt to cyberattacks remain central to organizational cybersecurity strategies.

    Resource : https://www.securityweek.com/five-cybersecurity-predictions-for-2024/

    7Jan, 2023
    Cybersecurity Trends: IBM’s Predictions for 2023

    As with many other aspects of life and business, 2022 held fewer overall surprises in cybersecurity than in recent years — thank goodness. Instead, many trends brewing over the past few years began to take clearer form. Some were unexpected, and many were predictable, but all are important to consider when making plans for security in 2023.

    What Overall Trends Did We See in 2022?

    Ransomware continued to stay in the headlines in 2022. The share of breaches caused by ransomware grew 41% in the last year and took 49 days longer than the average breach to identify and contain. Ransomware gangs continued reemerging as new groups with the same key players after an arrest or major attack. And ransomware gangs are growing even more lucrative and powerful by selling ransomware as a service.

    On a positive note, zero trust evolved from being a new concept to a best practice. As hybrid work became a way of life, more organizations have started adopting zero trust frameworks– meaning all users, apps and devices that request access are assumed to be unauthorized until proven otherwise. Organizations with a zero trust approach deployed saved nearly $1 million in average breach costs compared to organizations without zero trust deployed.

    To get more insight into how 2022 trends are impacting the future of the industry, we talked to leading experts. Here’s what they have to say.

    Ransomware Attacks are Rebounding — But Not for All

    Cyber criminals look for organizations or industries teetering at the edge and then make their move to tip them over. Last year, we saw that with manufacturing — a strained industry viewed as the backbone of supply chains. With the distinct possibility of a global recession on the horizon, we expect to see ransomware attacks spike in 2023. However, larger organizations in regions heavily impacted during the ransomware boom are the most prepared for this wave after investing time and money in fighting back.

    Opportunities for Hackers-for-Hire Skyrocket Amid a Global Recession

    As operators offer new tools that dramatically lower the barrier of entry for less experienced and less technical cyber criminals, the cyber crime-as-a-service ecosystem may balloon in the year ahead. If the global economy faces a downturn, hackers-for-hire may emerge in search of quick and easy pay. We expect the biggest rise to be across Europe, considering geopolitical tensions and a challenging winter ahead.

    Zero Trust Got 99 (Implementation) Problems

    Now that it’s finally more than just a buzzword, security teams will accelerate zero trust adoption plans in 2023 — and make several missteps along the way. Without a deep understanding of trust relationships, implementations will fail. We already see security teams building “less trust” rather than “no trust” architectures, which opens the door to security gaps that adversaries may take advantage of in 2023.

    Social Engineers are Setting Their Sights on ICS Systems

    ICS/SCADA systems are essential to the daily operations of industrial manufacturers. Due to their importance, these systems are a top target for attackers. Yet while the tactics and techniques required to social engineer ICS systems differ from IT, the impact can be even more detrimental — going so far as the possible loss of life. Social engineers are already beginning to advance their techniques and tactics to more successfully gain access to these vulnerable systems. We anticipate social engineering to accelerate — with even more success — in the year ahead.

    Adversaries Sidestep New Security Technologies

    Almost as fast as the cybersecurity industry releases new security tools, adversaries evolve their techniques to circumvent them. This year will be no different. We expect to see cyber criminals set their sights more specifically on MFA and EDR technologies. With some attackers having succeeded at circumventing non-phishing-resistant MFA this past year — and more organizations relying on it than ever before — this technology will grow as a top target next year. Similarly, adversaries have been honing EDR evasion techniques. We expect to see a massive spike in the number of EDR evasion tools for sale on the dark web.

    Specialists Will Double-Back to Generalists to Secure the Cloud in 2023

    Hiring the talent required to secure the cloud will be a challenge for security leaders in 2023. One of the greatest hurdles stems from the large number of people needed in very niche, specialized roles. With so many companies increasingly going all-in on the cloud — and a skills crisis that’s worsening year by year — the solution to the skills gap lies in cybersecurity generalists. Organizations will recruit more generalists with successful track records, and build internal teams by reskilling specialists back to generalists.

    Automation Will Help Defenders Protect the “Moat”

    With data being more dispersed than ever the concept of protecting the “moat” is no longer a successful strategy — we now have too much surface area to cover. We’ll see more automated protection of the “moat”, so defenders can focus more time on detecting adversaries earlier and responding more effectively.

    Credential-Stealing Will Continue to Rise

    Cyber criminals will continue to leverage large caches of leaked/stolen credentials to devastating effect. Many consumers and businesses are gradually migrating to password managers, passwordless and hardware identity tokens. However, the vast majority of the population continues to reuse credentials or variations of credentials between environments, systems or sites. Next year, we’ll see attacks against legacy second-factor authentication, such as SMS, continue, as will attacks against push-based multi-factor authentication solutions. Phishing and other attacks designed to capture authentication tokens will also rise.

    What Else Will 2023 Bring?

    Though the 2023 cyber forecast has become clearer, the current wild card is a potential looming recession and how the uncertain economy will affect cybersecurity spending – and attackers’ motivations. The early months of 2023 should provide insight into the direction the economy is likely to take. But no matter what the economy does, organizations that continue to prioritize cybersecurity will continue to reduce their risk of business disruption and reputational loss from major breaches.

    Resource : https://securityintelligence.com/articles/cybersecurity-trends-ibm-predictions-2023/

    5Jan, 2023
    Cybersecurity Statistics and Predictions for 2023

    The past few years have witnessed a surge in cyber threats, including data breaches, ransomware attacks, and DDoS attacks. As CIOs navigate the challenges of remote work, the pandemic, and geopolitical issues, it’s more important than ever to stay vigilant against these threats. By examining the current threat landscape and considering recent statistics and predictions, we can get a clear understanding of where the majority of attacks are occurring and take steps to protect the enterprises. In this blog, we’ll discuss the top highlights of 2022 and what we can expect in 2023, along with relevant cybersecurity statistics.

    2022 At a Glance

    Cybersecurity remains a top priority for CIOs across the globe as threat actors find new ways to infiltrate a network and exploit sensitive information. Here are some of the top highlights from 2022:

    Investment fraud was the most expensive form of cybercrime, with an average of ​​$70,811 lost per victim. Top attack vectors, according to IBM, were compromised credentials (19% of all breaches), phishing (16%), and cloud misconfiguration (15%).

    Statista predicts cybercrime costs to skyrocket from $8.44 trillion in 2022 to $23.84 trillion by 2027.

    The average data breach cost is rising, the average cost of a data breach has increased from $4.24 million in 2021 to $4.35 million in 2022. This represents a 12.7% increase from the 2020 average cost of $3.86 million.

    Kaspersky’s DDoS Intelligence system noticed 57,116 DDoS attacks in Q3, 2022.

    This is only the tip of the iceberg. 2022 has seen a massive surge in cybercrimes, which are expected to grow in the coming years. So let’s see what the future of cybersecurity holds.

    Cybercrimes Are Increasing at an Alarming Rate Globally

    Cybercrimes have been at an all-time high. According to Cybersecurity Ventures: “Cybercrime costs include damage and destruction of data, stolen money, lost productivity, theft of intellectual property, theft of personal and financial data, embezzlement, fraud, post-attack disruption to the normal course of business, forensic investigation, restoration and deletion of hacked data and systems, and reputational harm.”

    Global cybercrime cost is expected to rise by 15% YoY over the next five years, reaching USD 10.5 trillion annually by 2025, up from USD 3 trillion in 2015.

    Data breaches are at an all-time high, with roughly 15 million data being exposed during the third quarter of 2022.

    Education/research, government/military, and healthcare sectors are the top 3 sectors hurt by the increasing attacks of cybercriminals, as noted by CPR with 2,148, 1,564, and 1,426 average weekly attacks, respectively.

    Ransomware Continues to Escalate

    Ransomware has repeatedly broken the news headlines, yet it remains one of the biggest threats to organizations.

    Not only is the number of ransomware crimes increasing, but it is also becoming more complex. Earlier hackers encrypted the data and demanded ransom to release it, but now they’re threatening companies to pay the ransom, or the hackers will sell their data.

    Cybereason surveyed 1,400 global cybersecurity professionals and noted that:

    73% of organizations suffered at least one ransomware attack in 2022.

    Supply chains are being exploited for infiltrating target networks, as 64% of companies believe ransomware gang made their way into their network via one of their business partners or suppliers.

    35% of companies had to face C-level resignations following a ransomware attack.

    According to FortiGuard Labs, ransomware incidents have increased by nearly 1100% over the last year.

    Crypto Hacking Is Becoming an Increasing Threat

    DeFi (decentralized finance), the primary protocol used in cryptocurrency for investors to lend, borrow, and trade without a central mediator, is being largely exploited by hackers.

    Rug pull is one of the major crimes conducted by hackers to exploit DeFi. It is a malicious act where hackers lure investors to invest their money, then either run off with it or sell off their pre-mined holdings. According to The Chainalysis 2022 Crypto Crime Report:

    The overall revenue from crypto scams rose 82% in 2021 to $7.8 billion, of which $2.8 billion came from rug pulls.

    Over $3 billion were stolen in 2021 due to increased Defi (decentralized finance) thefts.

    Nearly $3.2 billion in cryptocurrency was stolen in 2021.

    Zero Trust Is Getting Embraced

    The zero-trust security model has gained significant traction in recent years, especially after the onset of remote working. This mode prioritizes verifying users and devices before granting access to network resources.

    Gartner predicts that by 2025, 60% of organizations will have implemented Zero Trust as their primary security model.

    IBM says that the share of organizations embracing zero-trust grew from 35% in 2021 to 41% in 2022. And organizations not deploying zero-trust will incur an average of USD 1 million greater breach cost compared to those with the technology deployed.

    80% of respondents in a Statista survey plan to adopt zero trust in the future or have already adopted it.

    Healthcare is starting to embrace zero-trust, with 37% of companies implementing it in 2021 and 58% in 2022.

    Operational Technology Will Need to Be Secured

    With the increased adoption of technology comes the responsibility of safeguarding it. The threats to OT infrastructure not only cause damage to the organization but also hurt human beings and the environment.

    Sectrio’s The IoT and OT CISO Peer Survey 2022 notes that nearly 90% of CIOs reported one major incident in the past year. Most respondents say their operations were halted for over four days, incurring a loss of over $2.5 million.

    3% of organizations find technical integration of legacy and aging OT with modern systems the most challenging, according to The State of ICS/OT Cybersecurity in 2022 and Beyond.

    Conclusion: How to Prepare for the Future

    Cybercrimes are at an all-time high. With threat actors constantly finding new methods to infiltrate and exploit organizations, CIOs globally have to take preventive measures to safeguard their organizations.

    Some of the most common, yet overseen methods, are using complex passwords, regularly updating patches and upgrading software, giving cybersecurity training, using anti-ransomware solutions, and more go a long way in keeping organizations safe.

    Not only this but employing security solutions that fit best for your enterprise is essential.

    To know how Array can help you protect your enterprise from malicious threat actors, reach out to our sales team today.

    Resource : https://www.cxotoday.com/specials/cybersecurity-statistics-and-predictions-for-2023/

    28Dec, 2022
    Cybercrime (and Security) Predictions for 2023

    Threat actors continue to adapt to the latest technologies, practices, and even data privacy laws—and it’s up to organizations to stay one step ahead by implementing strong cybersecurity measures and programs.

    Here’s a look at how cybercrime will evolve in 2023 and what you can do to secure and protect your organization in the year ahead.

    Increase in digital supply chain attacks #

    With the rapid modernization and digitization of supply chains come new security risks. Gartner predicts that by 2025, 45% of organizations worldwide will have experienced attacks on their software supply chains—this is a three-fold increase from 2021. Previously, these types of attacks weren’t even likely to happen because supply chains weren’t connected to the internet. But now that they are, supply chains need to be secured properly.

    The introduction of new technology around software supply chains means there are likely security holes that have yet to be identified, but are essential to uncover in order to protect your organization in 2023.

    If you’ve introduced new software supply chains to your technology stack, or plan to do so sometime in the next year, then you must integrate updated cybersecurity configurations. Employ people and processes that have experience with digital supply chains to ensure that security measures are implemented correctly.

    Mobile-specific cyber threats are on-the-rise#

    It should come as no surprise that with the increased use of smartphones in the workplace, mobile devices are becoming a greater target for cyber-attack. In fact, cyber-crimes involving mobile devices have increased by 22% in the last year, according to the Verizon Mobile Security Index (MSI) 2022 with no signs of slowing down in advance of the new year.

    As hackers hone in on mobile devices, SMS-based authentication has inevitably become less secure. Even the seemingly most secure companies can be vulnerable to mobile device hacks. Case in point, several major companies, including Uber and Okta were impacted by security breaches involving one-time passcodes in the past year alone.

    This calls for the need to move away from relying on SMS-based authentication, and instead to multifactor authentication (MFA) that is more secure. This could include an authenticator app that uses time-sensitive tokens, or more direct authenticators that are hardware or device-based.

    Organizations need to take extra precautions to prevent attacks that begin with the frontline by implementing software that helps verify user identity. According to the World Economic Forum’s 2022 Global Risks Report, 95% of cybersecurity incidents are due to human error. This fact alone emphasizes the need for a software procedure that decreases the chance of human error when it comes to verification. Implementing a tool like Specops’ Secure Service Desk helps reduce vulnerabilities from socially engineered attacks that are targeting the help desk, enabling a secure user verification at the service desk without the risk of human error.

    Double down on cloud security #

    As more companies opt for cloud-based activities, cloud security—any technology, policy, or service that protects information stored in the cloud—should be a top priority in 2023 and beyond. Cyber criminals become more sophisticated and evolve their tactics as technologies evolve, which means cloud security is essential as you rely on it more frequently in your organization.

    The most reliable safeguard against cloud-based cybercrime is a zero trust philosophy. The main principle behind zero trust is to automatically verify everything—and essentially not trust anyone without some type of authorization or inspection. This security measure is critical when it comes to protecting data and infrastructure stored in the cloud from threats.

    Ransomware-as-a-Service is here to stay #

    Ransomware attacks continue to increase at an alarming rate. Data from Verizon discovered a 13% increase in ransomware breaches year-over-year. Ransomware attacks have also become increasingly targeted — sectors such as healthcare and food and agriculture are just the latest industries to be victims, according to the FBI.

    With the rise in ransomware threats comes the increased use of Ransomware-as-a-Service (RaaS). This growing phenomenon is when ransomware criminals lease out their infrastructure to other cybercriminals or groups. RaaS kits make it even easier for threat actors to deploy their attacks quickly and affordably, which is a dangerous combination to combat for anyone leading the cybersecurity protocols and procedures. To increase protection against threat actors who use RaaS, enlist the help of your end-users.

    End-users are your organization’s frontline against ransomware attacks, but they need the proper training to ensure they’re protected. Make sure your cybersecurity procedures are clearly documented and regularly practiced so users can stay aware and vigilant against security breaches. Employing backup measures like password policy software, MFA whenever possible, and email-security tools in your organization can also mitigate the onus on end-user cybersecurity.

    Data privacy laws are getting stricter—get ready #

    We can’t talk about cybersecurity in 2023 without mentioning data privacy laws. With new data privacy laws set to go into effect in several states over the next year, now is the time to assess your current procedures and systems to make sure they comply. These new state-specific laws are just the beginning; companies would be wise to review their compliance as more states are likely to develop new privacy laws in the years to come.

    Data privacy laws often require changes to how companies store and processing data, and implementing these new changes might open you up to additional risk if they are not implemented carefully. Ensure your organization is in adherence to proper cyber security protocols, including zero trust, as mentioned above.

    Resource: https://thehackernews.com/2022/12/cybercrime-and-security-predictions-for.html

    30Nov, 2022
    5 cybersecurity predictions for 2023

    The cyber game is now an entire underground economy wrapped around cyberattacks. Thanks to increased international friction and the activity of groups such as Lapsus$, cybercriminals have upped the ante on cybercrime in order to turn a profit. Atakama outlines its top cybersecurity predictions for 2023.

    IoT blends with shadow IT to make a security headache

    With 43 billion devices connected to the internet in 2023, attackers have no shortage of targets. Although IoT devices can provide productive capabilities in commercial environments, risks abound. Manufacturers prioritize convenience and consumer-like appeal over security fundamentals. Unsurprisingly, devices are often deployed with weak or default credentials.

    To make matters worse, IoT has proliferated within shadow IT systems, leaving already-weakly-protected cameras, microphones and sensors well outside the control of organized security platforms. Even within a strong perimeter, a poorly configured IoT device is bad news. Susceptibility increases many fold when the same poorly configured IoT device is within a shadow IT system.

    Rise in sophisticated ransomware attacks put data exfiltration in the spotlight

    The rising prevalence and sophistication of attacks targeting sensitive data will continue to plague organizations into 2023 and beyond. Double extortion attacks, pack an even greater punch by encrypting sensitive and proprietary data, hold it for ransom, and worse, publish the data on the dark web unless organizations cough up the cash. As the Verizon 2022 Data Breach Investigations Report says: “There are now more ways for attackers to monetize data.”

    These attacks will increase as cyber criminals find it relatively easy to breach organizations’ defenses, and cash out.

    In response, organizations will need to look beyond conventional data protection practices toward technologies that protect data at the source, such as multifactor encryption to render files useless to threat-actors who will not be able to access the data, whether it is still inside the security perimeter or successfully exfiltrated.

    DevSecOps goes up a notch

    Securing developer environments will become one of the most critical components to achieving optimal security for organizations in 2023. Count on highly elaborate cyberthreats targeting these complex infrastructures, as seen with the success of the SolarWinds attack, which continues to inspire malicious actors because application development is such a rich target. Inserting a few lines of malicious code can potentially open up thousands of entities in the supply chain of partners and customers.

    Heightened DevSecOps practices in line with zero trust architectures and advanced encryption solutions will become more common as organizations realize these approaches are a critical business necessity.

    People will continue to be the weakest link in cyber teams’ security chain

    Sad to say, people will remain the main source of cybersecurity risk in any organization. Despite all the training, employees are still likely to provide threat actors with an entry point through social engineering, phishing or lapses that include sharing of passwords and log-in credentials. The Verizon 2022 report found the “human element” was a “key driver” in 82 percent of data breaches.

    Insider threats from corrupt employees or individuals bearing a grudge will continue to be a serious concern. Threats from employees at partner organizations and third-party suppliers will require continued vigilance and increased implementation of zero trust strategies.

    More awareness of CISO liabilities

    This year’s Uber data breach conviction will focus many minds on the C-suite that the CISO role is one that carries significant ethical responsibilities.

    Cybersecurity, like many other professions, has a code of ethics that’s expected of its practitioners. Individuals entrusted with the security and privacy of data, must behave ethically.

    We know that the cybersecurity landscape is not always a level playing field and even the most ethical and highly technical cybersecurity teams cannot prevent the most determined attackers.

    2023 may prove to be a more volatile year for CISO’s as they deal with the pressures of maintaining a ridged security posture, while also dodging the bullet of blame when attacks are successful.

    They are likely to rely on degrees in information security disciplines and a wide range of professional certifications such as CISSP. What’s important is for CISOs constantly to update their knowledge because it is not just the threats that will develop, solutions will too, and they need to keep up-to-date.

    Daniel H. Gallancy, CEO of Atakama adds: “Cyberthreats will continue to proliferate in number and grow in sophistication throughout 2023. While basic security practices will prevent many breaches, organizations are going to need more advanced solutions to protect themselves from the devastating consequences of a successful attack.”

    Resource : https://www.helpnetsecurity.com/2022/11/25/top-cybersecurity-predictions-2023/

    22Nov, 2022
    Top Five Cybersecurity Predictions for 2023

    KnowBe4 today announced its 2023 cybersecurity predictions from its team of industry experts.  

    The top five predicted cybersecurity trends for 2023 include:  

    • A shift in focus to creating a security culture within organisations across the globe 
      The need for security awareness training is now clear to most organisations and they are starting to evolve from just training to additional emphasis on behaviour and culture. There has been a positive momentum toward building a strong security culture globally that involves support from executives and the employee base as a whole.  
    • A new social engineering battleground purported by an increase in social media scams
      Social media scams will blossom, putting friends, family, organisations and colleagues at risk. With the ever-growing industry of social media commerce and marketplaces, people will be relying even more on indicators of trust, such as how many connections an account has and how long the account has been active, making them susceptible to scams that use stolen social media accounts to trick individuals and organisations. Also, with official verification now for sale for a small fee on various platforms, scammers are sure to take advantage.  
    • A rise in catastrophic attacks on critical infrastructure
      It is also likely that a major outage will occur due to critical infrastructure being compromised, especially given the ongoingwar in the Ukraine with Russia. This could have the potential to have societal and economic impacts for a large number of people or even an entire nation. With a global recession and rising cost of living, we may also see digital civil disobedience occurring in the form of people attacking their own government sites or national infrastructure as a form of protest. 
    • Dangerous deepfake attacks will become more convincing and damage reputations 
      Deepfakes are a dangerous tool used to build a level of trust, convincing unsuspecting people to accept the words and actions of someone at face value. Organisations do not have a deep level of understanding about the dangers this can present regarding reputation and thus do not yet train their employees enough on the topic.  
    • Larger attack surface introduces new threats with the Metaverse  
      There is an increasing number of threat vectors that are subsequently creating a larger attack surface, making it more difficult to adequately protect organisations worldwide. With the proliferation of the Metaverse, there are more opportunities for cybercriminals to perpetrate attacks.  

    “This list of predictions in cybersecurity trends has been gathered from our global group of experts who have decades of experience in the cybersecurity field,” said Stu Sjouwerman, CEO, KnowBe4.

    “They are at the forefront of what is happening in the industry, constantly following trends and staying up to date on the latest threats, tools and techniques. Many of them noted a fundamental shift in focus for organisations beyond security awareness training alone to striving for a strong security culture that is driven by measurable behavioural change. Also, social engineering will continue to dominate as an overwhelmingly successful method for cybercriminals to execute attacks.” said Sjouwerman.

    Resource : https://australiancybersecuritymagazine.com.au/top-five-cybersecurity-predictions-for-2023/