Dark Reading is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

Attacks/Breaches

6/25/2013
07:07 PM
Dark Reading
Dark Reading
Products and Releases
50%
50%

Survey: Cyberattacks Greater Threat Than Physical Attacks

Cyber-Ark's 7th annual Global Advanced Threat Landscape survey found 80 percent of respondents believe cyberattacks pose a greater threat to their nation than physical attacks

NEWTON, Mass. – June 25, 2013 – Eighty percent of C-level executives and IT security professionals believe that cyber-attacks pose a greater risk to their nation than physical attacks, while 51% believe a cyber-attacker is currently in their corporate network, or has been in the past year. The findings are part of Cyber-Ark's 7th annual Global Advanced Threat Landscape survey – developed through interviews with 989 IT and C-level executives across North America, Europe, and Asia Pacific. The full survey can be downloaded for free here.

Analysis of this year's survey shows that continued reports of nation-based attacks on global critical infrastructure and businesses, combined with high-profile data breaches such as the NSA leak, have made the industry acutely aware of the threat that today's cyber-attackers pose. Despite this awareness, businesses still have a lot of work to do to secure the enterprise from advanced attacks. Cyber-attackers are continuing to breach perimeter security at an accelerated rate. As a result, businesses need to assume the attackers are already inside their network and focus on securing the access points to the critical data and assets that the attackers covet.

Key findings of the 2013 survey include:

· Advanced Attacks Represent Grave Threats to National Security, Business and the Economy

· 80% of respondents believe that cyber-attacks pose a greater threat to their nation than physical attacks.

§ In last year's survey, 71% of respondents indicated they were more fearful of insider attacks than outside cyber-attacks, but almost two thirds of respondents indicated that external cyber-attack threats would become a greater security risk in 1 to 3 years[1]. This year's survey validates that notion.

· 61% of respondents believe that government and legislative action can help protect critical infrastructure against advanced threats. This number was the lowest in the U.S., where only 57% believe legislation will be an effective tool, as opposed to 64% of respondents in Europe and 61% in APAC.

· The Perceived Failure of Perimeter Security – Attackers Already Inside

· Advanced attacks are almost always precipitated by perimeter-oriented tactical aggressions, such as phishing attempts. The increasing ease with which attackers are breaching the enterprise perimeter is eroding confidence in perimeter security.

· 57% of respondents believe their company puts too much faith in perimeter security.

· 51% of respondents believe a cyber-attacker is currently on their network – or has been in the past year.

· Privileged Accounts as an Advanced Threat Vulnerability

· It's been firmly established through multiple industry reports that privileged accounts have emerged as the primary target for advanced enterprise attacks[2][3][4]. Privileged accounts consist of privileged and administrative accounts, default and hardcoded passwords, application backdoors, and more.

· 64% of respondents indicate they are now managing privileged accounts as an advanced threat security vulnerability.

· Despite this growing awareness, 39% of respondents either don't know how to identify where privileged accounts exist or are doing so manually.

§ In a recent survey, Cyber-Ark discovered that 86% of large enterprises either don't know or had grossly underestimated the magnitude of their privileged account security problem[5].

· Companies Lose Control of Privileges in the Cloud

· 56% of respondents do not know what their cloud service providers are doing to protect and monitor privileged accounts.

· 25% of respondents felt they were better equipped to protect their confidential information than their cloud provider – and yet they still entrust the third party with their data.

Supporting Quote

"People around the world are acutely aware of the global threat cyber-attacks represent. Cyber-attackers have repeatedly demonstrated the ability to disrupt national financial systems, cause harm to critical infrastructure and severely damage businesses and economies," said John Worrall, CMO of Cyber-Ark. "To achieve their goals, outside attackers must steal the privileged credentials of an authorized user to gain the access necessary to meet their objectives. This level of threat requires a proactive approach to security that protects and monitors the access points to the critical data and assets that attackers are targeting."

Comment  | 
Print  | 
More Insights
Comments
Newest First  |  Oldest First  |  Threaded View
Why Cyber-Risk Is a C-Suite Issue
Marc Wilczek, Digital Strategist & CIO Advisor,  11/12/2019
DevSecOps: The Answer to the Cloud Security Skills Gap
Lamont Orange, Chief Information Security Officer at Netskope,  11/15/2019
Unreasonable Security Best Practices vs. Good Risk Management
Jack Freund, Director, Risk Science at RiskLens,  11/13/2019
Register for Dark Reading Newsletters
White Papers
Video
Cartoon Contest
Current Issue
Navigating the Deluge of Security Data
In this Tech Digest, Dark Reading shares the experiences of some top security practitioners as they navigate volumes of security data. We examine some examples of how enterprises can cull this data to find the clues they need.
Flash Poll
Rethinking Enterprise Data Defense
Rethinking Enterprise Data Defense
Frustrated with recurring intrusions and breaches, cybersecurity professionals are questioning some of the industrys conventional wisdom. Heres a look at what theyre thinking about.
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2019-19012
PUBLISHED: 2019-11-17
An integer overflow in the search_in_range function in regexec.c in Oniguruma 6.x before 6.9.4_rc2 leads to an out-of-bounds read, in which the offset of this read is under the control of an attacker. (This only affects the 32-bit compiled version). Remote attackers can cause a denial-of-service or ...
CVE-2019-19022
PUBLISHED: 2019-11-17
iTerm2 through 3.3.6 has potentially insufficient documentation about the presence of search history in com.googlecode.iterm2.plist, which might allow remote attackers to obtain sensitive information, as demonstrated by searching for the NoSyncSearchHistory string in .plist files within public Git r...
CVE-2019-19035
PUBLISHED: 2019-11-17
jhead 3.03 is affected by: heap-based buffer over-read. The impact is: Denial of service. The component is: ReadJpegSections and process_SOFn in jpgfile.c. The attack vector is: Open a specially crafted JPEG file.
CVE-2019-19011
PUBLISHED: 2019-11-17
MiniUPnP ngiflib 0.4 has a NULL pointer dereference in GifIndexToTrueColor in ngiflib.c via a file that lacks a palette.
CVE-2019-19010
PUBLISHED: 2019-11-16
Eval injection in the Math plugin of Limnoria (before 2019.11.09) and Supybot (through 2018-05-09) allows remote unprivileged attackers to disclose information or possibly have unspecified other impact via the calc and icalc IRC commands.