Logo

High-severity threats are increasing and peak during holidays

A detailed analysis of the most prevalent Barracuda XDR detections in 2023 reveals a steady rise in high-severity attack attempts during the year.

The data also shows a significant spike in such threats around November, and a lower peak in June, prime times for holidays and for online shopping. The findings are summarized in a new Threat Spotlight. They underscore both the growing severity of cyberthreats targeting organizations, and adversarial behavior that Barracuda first reported on in 2022, namely how attackers seize the opportunity of people being away, busy, or distracted to launch more damaging and high-risk attacks.

Leading the list of attack detections are activities related to identity compromise, which enable attackers to breach an account and gain access to the corporate network, data, and more.

The detections that signpost identity abuse include suspicious logins, brute force attacks, and attackers disabling multifactor authentication. Suspicious login activity is spotted by Barracuda XDR’s features and AI-powered detection rules that identify pattern anomalies.

“Cybersecurity involves understanding attackers’ behavior as well as their tools and tactics. Our data for 2023 shows that attackers are launching more high-severity attacks overall, and especially during times when IT teams are away from the workplace or less attentive, such as during holidays, outside working hours, during the night, and at weekends,” said Merium Khalid, Director, SOC Offensive Security, Barracuda XDR. “Most attacks are trying to gain access to accounts by compromising identities. As attackers start to leverage AI tools to scale the volume, speed, and sophistication of attacks, these trends will escalate. Security teams need to ensure their security tools have the same power.”

Barracuda recommends that companies implement robust authentication and access controls (multifactor authentication at a minimum and ideally moving to Zero Trust-based measures), alongside a solid approach to patch management and data protection, with regular cybersecurity awareness training for employees.

This should ideally sit within an overall security framework of next-generation security technologies, backed by expert analysis and 24/7/365 SOC security monitoring to catch unknowns and anomalies that might otherwise slip through the net.

New AI security benchmark: Backbone breaker release

Posted 17 hours ago by Aaron Sandhu
Check Point and Lakera have launched the b3 benchmark to enhance LLM security in AI agents, promising improved security measures for developers.
Chainguard secures $280 million for trusted open source innovation, positioning itself at the forefront of modern infrastructure.
Air IT Group introduces a groundbreaking strategy to empower UK SMEs with advanced technology and improved customer experience.
Hammer Distribution teams up with iQuila to offer cutting-edge network solutions, enhancing connectivity and security for dynamic enterprises.
Discover the most ambitious MSP festival yet, focusing on growth through innovation and collaboration, with keynotes, panels, and experiences...
Node4's report reveals a severe shortage of IT professionals in mid-market firms, primarily affecting operational productivity.
A timely intervention by CRS Technology Consultants and N-able saved a regional CPA firm from a severe ransomware attack, ensuring rapid recovery and...
Starburst introduces groundbreaking features to its data platform, promoting synchronous collaboration between humans and AI while ensuring data...