Facebook Twitter LinkedIn RSS
    Trending
    • Unbeatable Discounts on L’Oréal’s Dermatological Beauty Brands
    • First Asset Management launches N100 billion infrastructure fund
    • From Lagos to Nairobi: How One African Crypto Community Transformed a Bitcoin Milestone into a Continental Movement
    • NITDA: 56% of IT projects fail due to tech obsession, poor planning
    • Sanwo-Olu, Sule, and Other Visionaries to Headline Lagos Future Conference 2025
    • Zoho Launches Ulaa Enterprise, a Secure and User-Friendly Browser for Modern Workplaces
    • Self-optimising AI: The New Frontier of Technological Innovation, By Louis Napoletani
    • Mart Networks Launches Invinsense-Powered Cybersecurity Solution Tailored for Fintechs
    Facebook Twitter LinkedIn
    ITPulse.com.ngITPulse.com.ng
    • News
    • Interviews
    • Blogs
    • Analysis
    • Opinion
    • Videos
    • Press Releases
    • Pictures
    • Advertise
    ITPulse.com.ngITPulse.com.ng
    Home»News»Phishing emails account for 53% of cyberattack, Sophos Global Survey reveals
    News 5 Mins Read

    Phishing emails account for 53% of cyberattack, Sophos Global Survey reveals

    mmBy ITPulseJuly 12, 2019
    Facebook Twitter WhatsApp Pinterest LinkedIn Reddit Tumblr Email
    Share
    Facebook Twitter LinkedIn Pinterest Email

    One of the leading network and endpoint security providers, Sophos has announced the findings of its global survey, titled ‘The Impossible Puzzle of Cybersecurity’.

    The survey revealed that IT managers are inundated with cyberattacks coming from all directions and are struggling to keep up due to a lack of security expertise, budget and up to date technology. The survey polled 3,100 IT decision makers from mid-sized businesses in the US, Canada, Mexico, Colombia, Brazil, UK, France, Germany, Australia, Japan, India, and South Africa.

    Cybercriminals Use Multiple Attack Methods and Payloads for Maximum Impact

     The Sophos survey shows how attack techniques are varied and often multi-staged, increasing the difficulty to defend networks. One in five IT managers surveyed didn’t know how they were breached, and the diversity of attack methods means no one defensive strategy is a silver bullet.

    “Cybercriminals are evolving their attack methods and often use multiple payloads to maximize profits. Software exploits were the initial point of entry in 23 percent of incidents, but they were also used in some fashion in 35 percent of all attacks, demonstrating how exploits are used at multiple stages of the attack chain,” said Chester Wisniewski, principal research scientist, Sophos. “Organizations that are only patching externally facing high-risk servers are left vulnerable internally and cybercriminals are taking advantage of this and other security lapses.”

    The wide range, multiple stages and scale of today’s attacks are proving effective. For example, 53 percent of those who fell victim to a cyberattack were hit by a phishing email, and 30 percent by ransomware. Forty-one percent said they suffered a data breach.

    Weak Links in Security Increasingly Lead to Supply Chain Compromises

    Based on the responses, it’s not surprising that 75 percent of IT managers consider software exploits, unpatched vulnerabilities and/or zero-day threats as a top security risk. Fifty percent consider phishing a top security risk. Alarmingly, only 16 percent of IT managers consider supply chain a top security risk, exposing an additional weak spot that cybercriminals will likely add to their repertoire of attack vectors.

    “Cybercriminals are always looking for a way into an organization, and supply chain attacks are ranking higher now on their list of methods. IT managers should prioritize supply chain as a security risk, but don’t because they consider these attacks perpetrated by nation states on high profile targets. While it is true that nation states may have created the blueprints for these attacks, once these techniques are publicized, other cybercriminals often adopt them for their ingenuity and high success rate,” said Wisniewski. “Supply chain attacks are also an effective way for cybercriminals to carry out automated, active attacks, where they select a victim from a larger pool of prospects and then actively hack into that specific organization using hand-to-keyboard techniques and lateral movements to evade detection and reach their destination.”

    Lack of Security Expertise, Budget and Up to Date Technology

    According to the Sophos survey, IT managers reported that 26 percent of their team’s time is spent managing security, on average. Yet, 86 percent agree security expertise could be improved and 80 percent want a stronger team in place to detect, investigate and respond to security incidents.  Recruiting talent is also an issue, with 79 percent saying that recruiting people with the cybersecurity skills they need is challenging.

    Regarding budget, 66 percent said their organization’s cybersecurity budget (including people and technology) is below what it needs to be. Having the current technology in place is another problem, with 75 percent agreeing that staying up to date with cybersecurity technology is a challenge for their organization. This lack of security expertise, budget and up to date technology indicates IT managers are struggling to respond to cyberattacks instead of proactively planning and handling what’s coming next.

    “Staying on top of where threats are coming from takes dedicated expertise, but IT managers often have a hard time finding the right talent or don’t have a proper security system in place that allows them to respond quickly and efficiently to attack,” said Wisniewski. “If organizations can adopt a security system with products that work together to share intelligence and automatically react to threats, then IT security teams can avoid the trap of perpetually catching up after yesterday’s attack and better defend against what’s going to happen tomorrow. Having a security ‘system’ in place helps alleviate the security skills gap IT managers are facing. It’s much more time and cost effective for businesses to grow their security maturity with simple to use tools that coordinate with each other across an entire estate.”

    Synchronized Security Solves the Impossible Puzzle of Cybersecurity

    With cyberthreats coming from supply chain attacks, phishing emails, software exploits, vulnerabilities, insecure wireless networks, and much more, businesses need a security solution that helps them eliminate gaps and better identify previously unseen threats. Sophos Synchronized Security, a single integrated system, provides this much needed visibility to threats by integrating Sophos endpoint, network, mobile, Wi-Fi, and encryption products to share information in real-time and automatically respond to incidents. More information about Synchronized Security is available at Sophos.com.

    The Impossible Puzzle of Cybersecurity survey was conducted by Vanson Bourne, an independent specialist in market research, in December 2018 and January 2019. This survey interviewed 3,100 IT decision makers in 12 countries and across six continents in the US, Canada, Mexico, Colombia, Brazil, UK, France, Germany, Australia, Japan, India, and South Africa. All respondents were from organizations with between 100 and 5,000 employees.

    Share. Facebook Twitter Pinterest LinkedIn Tumblr Telegram Email
    mm
    ITPulse
    • Website
    • Facebook
    • Twitter
    • LinkedIn

    ITPulse is a wholly information technology communication (ICT) news website, with a special focus on the African continent. The website provides up-to-date biz-tech news, analysis and comprehensive and thorough insight into the continent's ICT terrain

    Related Posts

    Unbeatable Discounts on L’Oréal’s Dermatological Beauty Brands

    May 21, 2025

    First Asset Management launches N100 billion infrastructure fund

    May 21, 2025

    NITDA: 56% of IT projects fail due to tech obsession, poor planning

    May 20, 2025

    Leave A Reply Cancel Reply

    Subscribe to Updates

    Get the latest creative news from FooBar about art, design and business.

    Latest Posts

    Unbeatable Discounts on L’Oréal’s Dermatological Beauty Brands

    May 21, 2025

    First Asset Management launches N100 billion infrastructure fund

    May 21, 2025

    From Lagos to Nairobi: How One African Crypto Community Transformed a Bitcoin Milestone into a Continental Movement

    May 21, 2025
    About
    About

    Itpulse.com.ng is a wholly information technology communication (ICT) news website, with special focus on the African continent. The website provides up-to-date biz-tech news, analysis and a comprehensive and thorough insight info the continent's ICT terrain.

    Contact us: editorial@itpulse.com.ng

    Facebook Twitter LinkedIn RSS
    Latest Posts

    Unbeatable Discounts on L’Oréal’s Dermatological Beauty Brands

    May 21, 2025

    First Asset Management launches N100 billion infrastructure fund

    May 21, 2025

    From Lagos to Nairobi: How One African Crypto Community Transformed a Bitcoin Milestone into a Continental Movement

    May 21, 2025
    Popular Posts

    Beyond SIEM: Designing Adaptive Threat Response Systems Using Context-Aware Correlation Models

    September 22, 2023

    Writing Code for Future Strangers: Engineering for unknown teams, contexts, and missions

    March 5, 2023

    Sanwo-Olu, Sule, and Other Visionaries to Headline Lagos Future Conference 2025

    May 20, 2025
    © 2017 - 2025 Itpulse. Designed by Max Excellence.
    • Terms & Conditions
    • Privacy Policy
    • Advertise
    • Contact Us

    Type above and press Enter to search. Press Esc to cancel.