[ad_1]
Within the limitless battle to safe endpoints, corporations are nonetheless emphasizing person coaching to keep away from phishing and different social engineering gambits. Nonetheless, speedy progress in instruments like endpoint detection and response (EDR) and person and entity habits analytics (UEBA) reveal the understanding that educating workers is not enough to guard in opposition to hacks — you want to discover superior options to counteract new assault methods.
The outcomes come from Darkish Studying’s “2022 Endpoint Safety Survey,” which polled 190 cybersecurity and IT professionals on how pandemic-related modifications have an effect on their endpoint safety methods.
Within the above graphic, the darker blue bars symbolize outcomes from the 2022 survey, whereas the lighter blue reveals 2021 numbers. At first look, person coaching is clearly the best choice for defending in opposition to assaults; not solely is it essentially the most universally adopted countermeasure, at 73% of respondents implementing it for 2022, nevertheless it’s grown from 2021’s 70%. However the humorous factor is, virtually each class has additionally grown.
EDR has displaced distant entry administration because the second-most carried out measure. Final 12 months, distant entry administration was used to safe endpoints by 52% of respondents, with solely 37% utilizing EDR to detect and reply to threats. This 12 months, distant entry administration was the one method to fall in reputation; it dropped to 46%, whereas EDR rose to 54% in 2022.
To guard in opposition to misuse of credentials, 43% of respondents apply privileged entry administration (PAM), up six factors from 2021’s 37%, and 41% phase their networks to forestall lateral motion following a breach (up 11% from 2021’s 30%). Over 1 / 4 of corporations (27%) at the moment are using UEBA to attempt to catch intruders by monitoring anticipated person habits and looking ahead to anomalies; UEBA stood at solely 19% in 2021.
Stolen entry credentials are a sizzling commodity on the black market, with privileged accounts significantly precious. Certainly, the Colonial Pipeline assault began with entry granted by way of a stolen VPN account. And a 2021 report confirmed that stolen credentials had been the most costly insider risk, costing a median of $805,000 to remediate.
For extra, learn the complete report.
[ad_2]
