Facebook Twitter LinkedIn RSS
    Trending
    • Anambra expands free solution WiFi access
    • Access group staff donates blood across Africa in life-saving initiative 
    • Access Bank Tanzania Honours President Samia Suluhu Hassan for Exceptional Leadership
    • Study shows investors believe AI market is on the brink of a seismic shift
    • NITRA-ALTON CNII & Sustainability Conference Rescheduled for August 7, 2025
    • Nigerians to earn 18% annual income with Luno’s Crypto Staking
    • USSD wahala reloaded: Are telcos quietly dipping into your airtime? By Elvis Eromosele
    • Gartner recognizes Sophos as 2025 leader for endpoint protection platforms
    Facebook Twitter LinkedIn
    ITPulse.com.ngITPulse.com.ng
    • News
    • Interviews
    • Blogs
    • Analysis
    • Opinion
    • Videos
    • Press Releases
    • Pictures
    • Advertise
    ITPulse.com.ngITPulse.com.ng
    Home»News»Four recommendations to protect your organisation from advanced attacks
    News 3 Mins Read

    Four recommendations to protect your organisation from advanced attacks

    mmBy ITPulseMay 31, 2022
    Facebook Twitter WhatsApp Pinterest LinkedIn Reddit Tumblr Email
    Share
    Facebook Twitter LinkedIn Pinterest Email

    In the present and increasingly complex infrastructure, shortage of skilled professionals and the growing sophistication of attacks, Kaspersky, a cybersecurity and digital privacy company has decided to recommend four key points that can protect organisation from advanced attacks.

    The four key points are:

    • Deploy a solution that combines detection and response capabilities and managed threat hunting to help identify both known and unknown threats without involving additional in-house resources. An alert-driven approach is no longer effective for reacting to modern threats.
    • Provide your SOC team with access to the latest threat intelligence, to ensure in-depth visibility into cyber threats targeting your organisation.
    • Implement expert incident response training to improve the expertise of your in-house digital forensics and incident response team. That will help verify and handle threats quicker and minimise the incident impact.
    • To reduce the likelihood of targeted attacks, provide your staff with essential cybersecurity knowledge. Social engineering is still very popular and applies even in high severity incidents.

    Meanwhile, research based on the analysis of incidents reported to customers of Kaspersky Managed Detection and Response (MDR) has revealed that the share of critical incidents experienced by organisations increased from one in ten (9%) in 2020, to one in seven (14%) in 2021.

    The research revealed that lack of skill and increased attacks can all affect the efficiency of cybersecurity teams and their ability to identify adversarial activity before incidents happen.

    According to the resulting report, organisations across all industries experienced high severity incidents during this period, with most verticals facing multiple types. The most frequent causes of critical incidents remained the same as the previous year, with the biggest share (40.7%) belonging to targeted attacks. Malware with critical impact was identified in 14% of cases, and a little less than 13% of high severity incidents were classified as exploitation of publicly exposed critical vulnerabilities. Social engineering also remained a relevant threat, accounting for almost 5.5% of incidents caused.

    Targeted attacks in 2021 were detected in each vertical represented in the research, except for education and mass media, even though there were reported incidents related to targeted attacks within media organisations. The largest number of human-driven attacks were detected in government, industrial, IT and financial verticals. In particular, targeted attacks accounted for two-thirds (66%) of all critical incidents in the government sector, more than half (55%) in healthcare and 40% in the construction industry.

    High severity incidents are distinguished by wide use of living-off-the-land (LotL) binaries, of a non-malicious nature, that are already available in a targeted system. These tools allow cybercriminals to hide their activity and minimise the chances of being detected during the first stages of an attack. In addition to widely used rundll32.exe, powershell.exe and cmd.exe, tools such as reg.exe, te.exe and certutil.exe are often used in critical incidents.

    To better prepare themselves against targeted attacks, organisations can employ services that conduct ethical offensive exercises. This type of activity simulates complex adversarial attacks to examine a company’s cyber-resilience. According to Kaspersky’s MDR analysts, this was only applied in 16% of organisations.

    “The MDR report once again shows that sophisticated attacks are here to stay, and more and more organisations are facing critical incidents. One of the most pressing issues here is that high severity incidents require more time to investigate and provide recommendations on remediation steps. Last year, Kaspersky analysts managed to significantly reduce this indicator from 52.6 minutes in 2020 to 41.4 minutes. This was achieved by adding more incident card templates, and introducing of new telemetry enrichments that speed up triage,” comments Sergey Soldatov, Head of Security Operations Center, Kaspersky.

    Cyber advanced attacks
    Share. Facebook Twitter Pinterest LinkedIn Tumblr Telegram Email
    mm
    ITPulse
    • Website
    • Facebook
    • Twitter
    • LinkedIn

    ITPulse is a wholly information technology communication (ICT) news website, with a special focus on the African continent. The website provides up-to-date biz-tech news, analysis and comprehensive and thorough insight into the continent's ICT terrain

    Related Posts

    Anambra expands free solution WiFi access

    July 25, 2025

    Nigerians to earn 18% annual income with Luno’s Crypto Staking

    July 23, 2025

    Nigeria’s economy sees boost in Q1 2025, driven by surging ICT sector

    July 22, 2025

    Leave A Reply Cancel Reply

    Subscribe to Updates

    Get the latest creative news from FooBar about art, design and business.

    Latest Posts

    Anambra expands free solution WiFi access

    July 25, 2025

    Access group staff donates blood across Africa in life-saving initiative 

    July 25, 2025

    Access Bank Tanzania Honours President Samia Suluhu Hassan for Exceptional Leadership

    July 25, 2025
    About
    About

    Itpulse.com.ng is a wholly information technology communication (ICT) news website, with special focus on the African continent. The website provides up-to-date biz-tech news, analysis and a comprehensive and thorough insight info the continent's ICT terrain.

    Contact us: editorial@itpulse.com.ng

    Facebook Twitter LinkedIn RSS
    Latest Posts

    Anambra expands free solution WiFi access

    July 25, 2025

    Access group staff donates blood across Africa in life-saving initiative 

    July 25, 2025

    Access Bank Tanzania Honours President Samia Suluhu Hassan for Exceptional Leadership

    July 25, 2025
    Popular Posts

    Data is the new oil: Africa Data Centres Executive on digital transformation

    July 22, 2025

    Nigeria’s economy sees boost in Q1 2025, driven by surging ICT sector

    July 22, 2025

    Dr. Omoniyi Ibietan: A PR powerhouse redefining strategic communication in Africa

    July 21, 2025
    © 2017 - 2025 Itpulse. Designed by Max Excellence.
    • Terms & Conditions
    • Privacy Policy
    • Advertise
    • Contact Us

    Type above and press Enter to search. Press Esc to cancel.