Mobile

5/10/2017
03:25 PM
50%
50%

'Systemic' Cyberattack Most Likely to Hit Financial, Energy Sectors

The financial services industry is among the top five industries that likely face a systemic cyberattack, according to a survey released today.

A systemic cyberattack attack that simultaneously affects multiple companies is likely to occur this year, with the financial services industry ranked at the top of the list of targeted sectors, according to a survey released today by American International Group (AIG).

AIG queried 70 cybersecurity, technology, and insurance professionals, in the study, and found that the industries most likely to face a systemic attack this year are:

  • financial services, with financial networks and transaction systems at greatest risk (19%)
  • power and energy, with the Internet infrastructure a likely target (15%)
  • telecommunications and utilities, with the power grid at risk (14%)
  • healthcare, with the healthcare system a likely target (13%) 
  • information technology, with software and hardware organizations getting hit, thus disabling the backbone of the digital economy (12%)

More than half of the survey respondents believe a simultaneous attack will occur involving five- to 10 companies, while one-third of those surveyed believe there is more than an even chance that as many as 50 companies will be attacked simultaneously. As for the remaining 20% of survey respondents, they think the number of companies that could be attacked at once could reach into as many as 100 businesses.

Read more about the survey here.

Dark Reading's Quick Hits delivers a brief synopsis and summary of the significance of breaking news events. For more information from the original source of the news item, please follow the link provided in this article. View Full Bio

Comment  | 
Print  | 
More Insights
Comments
Newest First  |  Oldest First  |  Threaded View
RahulB593
50%
50%
RahulB593,
User Rank: Apprentice
5/11/2017 | 2:58:30 AM
cyber attack
This articles are truly great. very informative post.
12 Free, Ready-to-Use Security Tools
Steve Zurier, Freelance Writer,  10/12/2018
Most IT Security Pros Want to Change Jobs
Dark Reading Staff 10/12/2018
6 Security Trends for 2018/2019
Curtis Franklin Jr., Senior Editor at Dark Reading,  10/15/2018
Register for Dark Reading Newsletters
White Papers
Video
Cartoon Contest
Current Issue
Flash Poll
The Risk Management Struggle
The Risk Management Struggle
The majority of organizations are struggling to implement a risk-based approach to security even though risk reduction has become the primary metric for measuring the effectiveness of enterprise security strategies. Read the report and get more details today!
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2018-10839
PUBLISHED: 2018-10-16
Qemu emulator <= 3.0.0 built with the NE2000 NIC emulation support is vulnerable to an integer overflow, which could lead to buffer overflow issue. It could occur when receiving packets over the network. A user inside guest could use this flaw to crash the Qemu process resulting in DoS.
CVE-2018-13399
PUBLISHED: 2018-10-16
The Microsoft Windows Installer for Atlassian Fisheye and Crucible before version 4.6.1 allows local attackers to escalate privileges because of weak permissions on the installation directory.
CVE-2018-18381
PUBLISHED: 2018-10-16
Z-BlogPHP 1.5.2.1935 (Zero) has a stored XSS Vulnerability in zb_system/function/c_system_admin.php via the Content-Type header during the uploading of image attachments.
CVE-2018-18382
PUBLISHED: 2018-10-16
Advanced HRM 1.6 allows Remote Code Execution via PHP code in a .php file to the user/update-user-avatar URI, which can be accessed through an "Update Profile" "Change Picture" (aka user/edit-profile) action.
CVE-2018-18374
PUBLISHED: 2018-10-16
XSS exists in the MetInfo 6.1.2 admin/index.php page via the anyid parameter.