Weekly cyberattacks jumped by 50% in 2021, with a peak in December due largely to the Log4J exploit

Cybercriminals loved a banner yr in 2021; excellent news for them however unhealthy information for his or her victims. For 2021 as a complete, the variety of cyberattacks towards company networks soared by 50% from the earlier yr, cyber risk intelligence supplier Examine Level Analysis stated in a report launched on Monday.

SEE: Incident response coverage (TechRepublic Premium)

The yr ended with an particularly tough fourth quarter that noticed an all-time peak in weekly cyberattacks at 925 per group. This capper was due largely to the Log4J vulnerability, in response to Examine Level. Since changing into public data in December, the flaw in Apache’s Log4j utility has prompted hackers to scan for unpatched programs on which they’ll remotely run malicious code and take management of affected computer systems.

For 2021, the training/analysis sector was hit by the best variety of cyberattacks, averaging 1,605 per group every week, a 75% improve from 2020. The federal government/navy sector was subsequent, with 1,136 assaults per week, a achieve of 57% from the earlier yr. In third was the communications trade with 1,079 assaults per group every week, a 51% improve.

Internationally, Africa bore the brunt of the best variety of assaults final yr, with a mean of 1,582 per week per group. APAC (Asia-Pacific) was second, averaging 1,353 weekly assaults per group, adopted by Latin America with 1,118 assaults weekly, Europe with 670 assaults weekly, and North America with a mean of 503 weekly assaults per group.

“Hackers hold innovating,” stated Examine Level Software program information analysis supervisor Omer Dembinsky. “New penetration strategies and evasion strategies have made it a lot simpler for hackers to execute malicious intentions. What’s most alarming is that we’re seeing some pivotal societal industries surge into the most-attacked listing. Training, authorities and healthcare industries made it into the highest 5 most attacked industries listing, worldwide. I anticipate these numbers to extend going into 2022, as hackers will proceed to innovate and discover new strategies to execute cyberattacks, particularly ransomware.”

To guard your group from cyberattack, Examine Level provides the next suggestions:

1. Patch. Attackers typically penetrate networks by exploiting identified safety vulnerabilities for which a patch is obtainable however has not been utilized. Be certain that the newest vital safety patches are put in on all programs and software program.
2. Phase. Phase your networks and apply sturdy firewall and intrusion prevention safeguards between these segments to forestall malware from navigating throughout your complete community.
3. Educate staff. Consciousness by customers might help stop an assault earlier than it hits. Educate your customers in order that they know the best way to report one thing suspicious and probably malicious to your assist desk or IT folks.
4. Implement superior safety safety. Nobody expertise can defend your group from each kind of risk. As an alternative, take into account a variety of key applied sciences, resembling machine studying, sandboxing, anomaly detection and content material disarmament. Two key elements that may show efficient are risk extraction (file sanitization) and risk emulation (superior sandboxing). Individually, these provide sturdy safety. Collectively, they supply a complete technique to fight unknown malware each on the community stage and on endpoint gadgets.

“We’re in a cyber pandemic, if you’ll,” Dembinsky stated. “I strongly urge the general public, particularly these within the training, authorities and healthcare sectors, to study the fundamentals on the best way to defend themselves. Easy measures resembling patching, segmenting your networks and educating staff can go a great distance in making the world safer.”

Cybersecurity Insider E-newsletter

Strengthen your group’s IT safety defenses by maintaining abreast of the newest cybersecurity information, options, and greatest practices.
Delivered Tuesdays and Thursdays

Enroll at present

Additionally see