Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

The number of data breaches reported in the first 6 months of 2022 has put this year on track to be the lowest year of reports in the last 5 years for large US corporations. By looking at the rate at which data breach events have been reported so far this year, we predict that the number of events reported is expected to be 15-20% of the number of breaches reported in 2021

The 2022 Verizon Data Breach Investigations Report (DBIR), the fifteenth such report in as many years, leads off with a startling statistic: Credentials are the number one overall attack vector hackers use in data breaches. Use of stolen credentials accounts for nearly half the breaches studied by Verizon, far ahead of phishing and exploit vulnerabilities, which account for 19% and 8% of attacks, respectively. Botnets, the fourth most common entry path for hackers, represent a mere 1% of attacks.

Open source provides a shortcut to functionality developed by others. But with exponential growth in the use of open source there is a very real risk of businesses failing to keep track of components, their dependencies and licenses. It's more important than ever to stay in control of the code your applications depend on and with typically hundreds of dependencies, this is not a small task. Avoid being the weakest link - understand the risks associated with your software supply chain and how to control them!

Bytesafe research found that 78% of public web sites for members of the Swedish Bankers' Association used open source packages with known vulnerabilities. The report indicates that many of the financial institutions have challenges keeping components up to date to avoid vulnerabilities. Download the full report to find out the state of Javascript security for the Nordic Financial Institutions in 2021.

Financial services companies are naturally prime targets for cybercriminals. Not only do they have money and assets under their control, but equally hold highly sensitive and valuable data that can be exfiltrated to either pressure organisations themselves to ransom or defraud the end customer. Unfortunately, cybercrime has become an existential issue for financial institutions that are disproportionately attacked by threat actors.

Across the world, cyberattacks were seen by CEOs as the second biggest risk of doing business overall, only beaten by fiscal crises as potential disruptors. Unfortunately, SME's are the largest group of businesses at risk, and as the risks associated with poor security only increases, so does the need to identify quick areas of improvement.

Taking an offensive approach to cyber security is now essential in today's digital landscape. With large-scale cyberattacks regularly making mainstream headlines, it is outdated and frankly unwise to assume that your business is safe. Ensuring that you have robust threat detection and incident response capabilities has become a must for organisations of all sizes and industries - leading to many digital-savvy businesses implementing a Security Operations Centre (SOC).

Creating a continuous security process within your organization can be complex, especially if you lack time and budget. There are strategies to avoid overspending - both time and money.