![The Edge Logo The Edge Logo](https://eu-images.contentstack.com/v3/assets/blt6d90778a997de1cd/blt530eb1f4e672eb44/653a71690e92cc040a3e9d6d/Dark_Reading_Logo_TheEdge_0.png?width=700&auto=webp&quality=80&disable=upscale)
Cybersecurity In-Depth: Digging into data about the latest attacks, threats, and trends using charts and tables.
Suppliers, Cloud Providers Are Threats to Enterprise Data, Survey Says
Other threats to enterprise data include cybercriminals, authorized users, foreign governments, and application vulnerabilities, according to Dark Reading's recent Strategic Security Report.
![Bar chart showing top 6 security threats to enterprise data Bar chart showing top 6 security threats to enterprise data](https://eu-images.contentstack.com/v3/assets/blt6d90778a997de1cd/blt7fba31f36d5294ff/64f15249c850caa48019ca97/tm-nov16.jpg?width=1280&auto=webp&quality=95&format=jpg&disable=upscale)
Security threats come in many shapes and forms – and enterprise security teams have their hands full dealing with data breaches, ransomware infections, and supply chain attacks. Data from Dark Reading’s latest Strategic Security Survey shows that the majority of IT security leaders are concerned about the broad array of threats against enterprise data, despite feeling confident in their ability to detect and respond to incidents. As the figure shows, 58% of security leaders say cybercriminals pose the biggest threat to enterprise data, followed by 40% concerned about authorized users and internal employees. Tellingly, a small but significant number of respondents cited cloud and network service providers, and suppliers and contractors, two groups that didn’t really come up in the 2020 survey, as significant threats.
In the survey, 23% of the respondents say they are concerned about the risks suppliers and contractors pose to enterprise data, followed by 18% who named cloud and network service providers. Application vulnerabilities and foreign governments, at 36% and 25%, were also in the top 6.
The list of threats data map very closely to types of security incidents defenders are most worried about. Cybercriminals are continually refining their techniques to make it possible to steal corporate data and personal information, whether that is through ransomware or otherwise compromising applications and systems. Phishing attacks and business email compromise trick authorized users into giving up information or performing tasks they shouldn’t be. There have been a number of attacks targeting application vulnerabilities, such as the PrintNightmare vulnerability in Microsoft’s Windows Print Spooler service that allowed attackers to view, change, or delete data. Attacks by foreign government don’t sound as far-fetched anymore, especially after reports that Chinese-sponsored attackers targeted Microsoft Exchange swept up emails, calendars entries, and contacts information. The Kaseya attack highlighted anew how compromising suppliers and contractors can impact downstream customers. Researchers also uncovered a vulnerability in Azure Cosmos DB which, if exploited, could have impacted thousands of Azure customers. And finally, attacks by malicious insiders remain an important area of concern.
About the Author
You May Also Like
Catch the Threat Before it Catches you: Proactive Ransomware Defense
September 5, 2024How to Evaluate Hybrid-Cloud Network Policies and Enhance Security
September 18, 2024DORA and PCI DSS 4.0: Scale Your Mainframe Security Strategy Among Evolving Regulations
September 26, 2024Harnessing the Power of Automation to Boost Enterprise Cybersecurity
October 3, 2024
[Virtual Event] The Essential Guide to Cloud Management
October 17, 2024Black Hat Europe - December 9-12 - Learn More
December 10, 2024SecTor - Canada's IT Security Conference Oct 22-24 - Learn More
October 22, 2024