{"id":117655,"date":"2024-11-20T08:03:00","date_gmt":"2024-11-20T08:03:00","guid":{"rendered":"https:\/\/www.intelligentcio.com\/eu\/?p=117655"},"modified":"2024-11-25T10:30:32","modified_gmt":"2024-11-25T10:30:32","slug":"uk-businesses-leave-cyber-doors-wide-open-to-hackers-during-holidays-and-weekends","status":"publish","type":"post","link":"https:\/\/www.intelligentcio.com\/eu\/2024\/11\/20\/uk-businesses-leave-cyber-doors-wide-open-to-hackers-during-holidays-and-weekends\/","title":{"rendered":"UK businesses leave cyber doors wide open to hackers during holidays and weekends"},"content":{"rendered":"\n

Semperis research has warned a Monday-to-Friday mentality means security teams are notoriously understaffed outside of business hours, making holidays and weekends prime time for cybercriminals.<\/em><\/p>\n\n\n\n

Cyberattackers are targeting holidays and weekends to cause maximum disruption, yet many UK businesses remain underprepared outside of standard working hours.<\/p>\n\n\n\n

With over half of UK organisations leaving security teams understaffed during these critical times, there is a greater risk of attacks that are designed to disrupt day-to-day life. This is according to new research conducted by Semperis, a pioneer in identity-driven cyber-resilience.<\/p>\n\n\n\n

The research found that 72% of UK organisations reported experiencing ransomware incidents during holidays and weekends when security teams aren\u2019t working at full capacity. Similar trends were noted across other major countries, with 70% of US respondents and an astonishing 81% of respondents from France also reporting attacks. <\/p>\n\n\n\n

The study, which surveyed nearly 1,000 security professionals across various industries, highlights how businesses remain at considerable risk, especially when their SOC (Security Operations Centre) is under-resourced outside of business hours.<\/p>\n\n\n\n

Notably, the finance and manufacturing sectors are identified as highly susceptible, with 78% of global respondents from finance and 75% from manufacturing and utilities confirming ransomware incidents on holidays or weekends.<\/p>\n\n\n\n

\u2018Round the clock\u2019 security teams operate at only 25% capacity<\/strong><\/p>\n\n\n\n

Despite the on-going risk, over half (52%) of UK businesses admitted their SOC is only partially staffed on bank holidays and weekends. One-in-20 don\u2019t staff their SOC at all during those times. Two-fifths (42%) of UK respondents who claimed to maintain a 24\/7\/365 SOC said it only operates at 25% capacity. With fewer eyes on the network traffic and less attention to suspicious activity, hackers can slip in unnoticed \u2013 leaving organisations wide open to cyberattacks.<\/p>\n\n\n\n

The impact of this is clear in high-profile cyberattacks designed to hurt businesses and their customers as much as possible. In the US, the Colonial Pipeline ransomware attack caused widespread fuel shortages and hit on Mother\u2019s Day, while in the UK, the 2023 attack on payroll provide, Zellis, unfolded over a weekend affecting tens of thousands of British Airways, Boots and BBC staff. The recent Transport for London (TfL) hack, which highlighted the growing threat of cyberattacks on public infrastructure, started on a Sunday.<\/p>\n\n\n\n

\u201cCyberthreats don\u2019t take a holiday,\u201d said Dan Lattimer, Area Vice President, Semperis. \u201cIn fact, attackers are exploiting quieter times when they know they may be more successful \u2013 using periods of understaffed security operations to their advantage. Our research report is an urgent wake-up call that you can never take your eye off the ball; the threat to business, critical infrastructure and consumers is constant.\u201d<\/p>\n\n\n\n

Work-life balance more important than cyberdefence<\/strong><\/p>\n\n\n\n

Asked why their organisation scaled back IT and security staffing at weekends and during holidays, a third (34%) of UK respondents said they \u2018did not think full staffing was necessary considering most employees work only during weekdays\u2019. The same number said they \u2018did not think our business would be targeted by hackers\u2019 and a third felt it wasn\u2019t necessary because \u2018their business has never been targeted in the past\u2019.<\/p>\n\n\n\n

Other top reasons given were \u2018our business is open Monday-Friday only\u2019 (31%) and \u2018work\/life balance is important\u2019 (31%) \u2013 highlighting that security gaps could arise from a weak security culture.<\/p>\n\n\n\n

The problem doesn\u2019t stop there. Identity is now the core entry point for the vast majority of cyberattacks and when attackers take the identity system \u2013 usually Microsoft Active Directory \u2013 down, the entire business grinds to a halt. However, the Semperis research also found that a quarter (25%) of UK respondents don\u2019t feel their organisation has the necessary expertise to adequately protect it against identity-related attacks. Over one-in-five (22%) UK businesses don\u2019t have an identity recovery plan in place.<\/p>\n\n\n\n

\u201cIt\u2019s high time businesses realised that cyberthreats are present around the clock,\u201d said Simon Hodgkinson, Strategic Advisor, Semperis. \u201cThe stark reality is that they are much more vulnerable when their SOC isn\u2019t fully staffed. In addition, securing business-critical infrastructure such as core identity systems should be at the top of every organisation\u2019s priority list \u2013 not an afterthought. It is worrying to see that so many organisations don\u2019t allocate enough time, budget and resources to protecting their most vulnerable assets.<\/p>\n\n\n\n

\u201cYou really need to have someone on call all the time. Security teams could rotate responsibility with some employees taking weekdays off to ensure adequate staffing levels,\u201d Hodgkinson added. \u201cIn addition, organisations must have solid emergency procedures in place, with a tried and tested incident response plan that allows them to contain threats and restore operations quickly should an attack happen \u2013 regardless of whether the attacker strikes on a Sunday or a Tuesday.\u201d<\/p>\n","protected":false},"excerpt":{"rendered":"

Semperis research has warned a Monday-to-Friday mentality means security teams are notoriously understaffed outside of business hours, making holidays and weekends prime time for cybercriminals. Cyberattackers are targeting holidays and weekends to cause maximum disruption, yet many UK businesses remain underprepared outside of standard working hours. With over half of UK organisations leaving security teams […]<\/p>\n","protected":false},"author":50,"featured_media":117656,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[17482,18793,62,6617,93,23,24],"tags":[10030,183,564,21437,18250,6852,21436,5006],"class_list":["post-117655","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-cybersecurity","category-europe","category-regional-news-newsletter","category-research","category-top-stories","category-united-kingdom","category-used","tag-christmas","tag-cyberattacks","tag-cybersecurity","tag-holidays","tag-identity","tag-research","tag-semperis","tag-uk"],"acf":[],"publishpress_future_workflow_manual_trigger":{"enabledWorkflows":[]},"_links":{"self":[{"href":"https:\/\/www.intelligentcio.com\/eu\/wp-json\/wp\/v2\/posts\/117655","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.intelligentcio.com\/eu\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.intelligentcio.com\/eu\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.intelligentcio.com\/eu\/wp-json\/wp\/v2\/users\/50"}],"replies":[{"embeddable":true,"href":"https:\/\/www.intelligentcio.com\/eu\/wp-json\/wp\/v2\/comments?post=117655"}],"version-history":[{"count":3,"href":"https:\/\/www.intelligentcio.com\/eu\/wp-json\/wp\/v2\/posts\/117655\/revisions"}],"predecessor-version":[{"id":118735,"href":"https:\/\/www.intelligentcio.com\/eu\/wp-json\/wp\/v2\/posts\/117655\/revisions\/118735"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.intelligentcio.com\/eu\/wp-json\/wp\/v2\/media\/117656"}],"wp:attachment":[{"href":"https:\/\/www.intelligentcio.com\/eu\/wp-json\/wp\/v2\/media?parent=117655"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.intelligentcio.com\/eu\/wp-json\/wp\/v2\/categories?post=117655"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.intelligentcio.com\/eu\/wp-json\/wp\/v2\/tags?post=117655"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}