Dark Reading is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

Application Security

How Threats Increase in Internet Time

Cybercrime incidents and costs increase with each passing minute on the Internet.

A famous song from the musical Rent pointed out that there are 525,600 minutes in a year. A new report looks at just how much Internet evil can fit into each minute of the year, and it's definitely not all about love.

It's about the numbers inside the $1,138,888 dollars of cybercrime cost each minute that add up to $600 billion in damage each year, according to a February, 2018 McAfee report on the impact of cybercrime. And the details of those numbers tell a story of growing risk due to a growing computer footprint, detailed in The Evil Internet Minute, a new infographic generated by researchers at RiskIQ.

"Some of it [the data] is based on reports from companies like McAfee and Gartner, but the research comes from our own systems," says Yonathan Klijnsma, threat researcher at RiskIQ. He explains that RiskIQ builds large databases from information found in global data crawling and used portions of that data to draw conclusions on individuals threats and trends.

Those conclusions involve numbers that become almost mesmerizing as the time scales and dollar amounts change: For example, RiskIQ reports that four potential vulnerable Web components are discovered each minute. That works out to more than two million such discoveries every year.

Klijnsma worries more, however, about active criminal activities like the .07 incidents of Magecart (36,792 per year) that RiskIQ found. "People thought the Ticketmaster breach was a one-off based on Magecart, but it's a credit-card skimming group," Klijnsma says, referring to the June incident. Instead, he says, the group has taken the "classic" credit card skimmer attack and moved it from the gas pump and ATM to e-commerce sites.

The lesson for organizations from reports such as this? "You want it to be more expensive for the bad guys," he says. "You need to keep your stuff updated. People tend to install things and forget about them," Klijnsma says.

"Whatever's online immediately starts to go out of date. If you leave it on the Internet, it will be out of date in a few months," he says. 

Beyond up-to-date software, he says, "One golden rule is limiting exposure. Nothing goes accessible online until it really has to."

Related Content:

Learn from the industry's most knowledgeable CISOs and IT security experts in a setting that is conducive to interaction and conversation. Early bird rate ends August 31. Click for more info

Curtis Franklin Jr. is Senior Editor at Dark Reading. In this role he focuses on product and technology coverage for the publication. In addition he works on audio and video programming for Dark Reading and contributes to activities at Interop ITX, Black Hat, INsecurity, and ... View Full Bio

Comment  | 
Print  | 
More Insights
Comments
Newest First  |  Oldest First  |  Threaded View
The Mainframe Is Seeing a Resurgence. Is Security Keeping Pace?
Ray Overby, Co-Founder & President at Key Resources, Inc.,  8/15/2019
GitHub Named in Capital One Breach Lawsuit
Dark Reading Staff 8/14/2019
The Flaw in Vulnerability Management: It's Time to Get Real
Jim Souders, Chief Executive Officer at Adaptiva,  8/15/2019
Register for Dark Reading Newsletters
White Papers
Video
Cartoon Contest
Current Issue
7 Threats & Disruptive Forces Changing the Face of Cybersecurity
This Dark Reading Tech Digest gives an in-depth look at the biggest emerging threats and disruptive forces that are changing the face of cybersecurity today.
Flash Poll
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2019-15296
PUBLISHED: 2019-08-21
An issue was discovered in Freeware Advanced Audio Decoder 2 (FAAD2) 2.8.8. The faad_resetbits function in libfaad/bits.c is affected by a buffer overflow vulnerability. The number of bits to be read is determined by ld->buffer_size - words*4, cast to uint32. If ld->buffer_size - words*4 is ne...
CVE-2019-15292
PUBLISHED: 2019-08-21
An issue was discovered in the Linux kernel before 5.0.9. There is a use-after-free in atalk_proc_exit, related to net/appletalk/atalk_proc.c, net/appletalk/ddp.c, and net/appletalk/sysctl_net_atalk.c.
CVE-2019-15293
PUBLISHED: 2019-08-21
An issue was discovered in ACDSee Photo Studio Standard 22.1 Build 1159. There is a User Mode Write AV starting at IDE_ACDStd!IEP_ShowPlugInDialog+0x000000000023d060.
CVE-2019-5034
PUBLISHED: 2019-08-20
An exploitable information disclosure vulnerability exists in the Weave Legacy Pairing functionality of Nest Cam IQ Indoor version 4620002. A set of specially crafted weave packets can cause an out of bounds read, resulting in information disclosure. An attacker can send packets to trigger this vuln...
CVE-2019-5035
PUBLISHED: 2019-08-20
An exploitable information disclosure vulnerability exists in the Weave PASE pairing functionality of the Nest Cam IQ Indoor, version 4620002. A set of specially crafted weave packets can brute force a pairing code, resulting in greater Weave access and potentially full device control. An attacker c...