{"id":12431,"date":"2022-03-02T10:22:31","date_gmt":"2022-03-02T10:22:31","guid":{"rendered":"https:\/\/www.intelligentcio.com\/north-america\/?p=12431"},"modified":"2022-03-09T11:00:19","modified_gmt":"2022-03-09T11:00:19","slug":"deep-instinct-report-finds-125-increase-in-threat-types-and-novel-evasion-techniques","status":"publish","type":"post","link":"https:\/\/www.intelligentcio.com\/north-america\/2022\/03\/02\/deep-instinct-report-finds-125-increase-in-threat-types-and-novel-evasion-techniques\/","title":{"rendered":"Deep Instinct report finds 125% increase in threat types\u00a0and novel evasion techniques"},"content":{"rendered":"\n<p><strong><em><a href=\"https:\/\/urldefense.proofpoint.com\/v2\/url?u=http-3A__www.deepinstinct.com_&amp;d=DwMGaQ&amp;c=euGZstcaTDllvimEN8b7jXrwqOf-v5A_CdpgnVfiiMM&amp;r=EfMGYBONq4GOU40r5lw3FZlyx0SWRp3WzbtC2K29pjo&amp;m=JeUMSQZDdy4dFi1F2NngMNzhpuFauRaMwTYeMnRVrnY&amp;s=bdp9S08WuX4C4OKvFU80JJUWLfOH9X40EXNt5vrB8pk&amp;e=\" target=\"_blank\" rel=\"noreferrer noopener\">Deep Instinct<\/a>, the first company to apply end-to-end Deep Learning to cybersecurity, has unveiled findings from its bi-annual <a href=\"https:\/\/urldefense.proofpoint.com\/v2\/url?u=https-3A__info.deepinstinct.com_cyber-2Dthreat-2Dlandscape-2Dreport&amp;d=DwMGaQ&amp;c=euGZstcaTDllvimEN8b7jXrwqOf-v5A_CdpgnVfiiMM&amp;r=EfMGYBONq4GOU40r5lw3FZlyx0SWRp3WzbtC2K29pjo&amp;m=JeUMSQZDdy4dFi1F2NngMNzhpuFauRaMwTYeMnRVrnY&amp;s=BESGtjpuCvpzZZEbc8NvnSQ2GYE-ZXO7fKwnQK7DLfY&amp;e=\" target=\"_blank\" rel=\"noreferrer noopener\">Threat Landscape Report<\/a>.<\/em><\/strong><\/p>\n\n\n\n<p>The Deep Instinct Threat Research team extensively monitored attack volumes and types and then extrapolated its findings to predict where the future of cybersecurity is heading, determine what motivates attackers, and most importantly, lays out the steps organizations can take now in order to protect themselves in the future.<\/p>\n\n\n\n<p>One of the most pronounced takeaways from this research on 2021 threat trends is that bad actors are becoming more successful at evading AI\/Machine Learning technologies, prompting organizations to redouble efforts in the innovation race. &nbsp;<\/p>\n\n\n\n<p>Specific attack vectors have grown substantially, including a 170% rise in the use of Office droppers along with a 125% uptick in all threat types combined. The volume of all malware types is substantially higher versus pre-pandemic.\u202f<\/p>\n\n\n\n<p>In addition, threat actors have made a discernable shift away from older programming languages, such as C and C++, in favor of newer languages, such as Python and Go. Not only are these newer languages easier to learn and to program versus their predecessors, but they also have been less commonly used and are therefore less likely to be detected by cybersecurity tools or analyzed by security researchers.<\/p>\n\n\n\n<p>\u201cRecent major events, such as Log4j and Microsoft Exchange server attacks, have placed a heightened priority on security, but these threats have long deserved the attention they\u2019re just now getting on a global level,\u201d said Guy Caspi, CEO of Deep Instinct.<\/p>\n\n\n\n<p>\u201cThe results of this research shed light on the wide-ranging security challenges that organizations face on a daily basis. Deep Instinct was founded to bring a new approach based on Deep Learning to cybersecurity. We\u2019re on a mission to provide relief to cyber defenders facing advanced threats that continue to spike in volume and sophistication.\u201d<\/p>\n\n\n\n<p>Additional report findings include the following key takeaways:&nbsp;<\/p>\n\n\n\n<ul class=\"wp-block-list\"><li><strong>Supply chain attacks: <\/strong>Large service offering\u202fcompanies\u202fbecame targets of significant supply chain attacks this past year with threat actors looking to not only gain access to their environments, but\u202falso target the environments of their customers by proxy. The most notable supply chain attack, Kaseya, compromised more than 1,500 companies through one unpatched zero-day vulnerability.&nbsp;<\/li><li><strong>The shift to high-impact and high-profile attacks verses stealth and long dwell-time attacks: <\/strong>In 2021,\u202fDeep Instinct saw a transition to high-profile attacks with\u202fa massive impact. The most significant incident in 2021 was the Colonial Pipeline breach, which halted operations for six days, causing major disruptions across the US and demonstrated the significant and cascading impact of a well-executed malware attack.<\/li><li><strong>Public and private sector\u202fcollaborations\u202fbecome more\u202fcommon:<\/strong>\u202fAs Deep Instinct\u202fhad\u202fpredicted,\u202fthere was greater partnership among international task forces this past year to\u202fidentify\u202fand bring to justice\u202fkey threat actors around the world. In early 2021, an international taskforce co-ordinated by Europol and Eurojust seized Emotet infrastructure and arrested some of its operators. Other high-profile threat actors such as Glupteba became the target of private companies that joined forces to interrupt their activity as much as possible.&nbsp;<\/li><li><strong>The immediate impact of zero-day<\/strong>: In 2021, there were major vulnerabilities being\u202fexploited\u202fand used within a single day of\u202fdisclosing the vulnerability. One of the examples was the HAFNIUM Group.&nbsp;<\/li><li><strong>Cloud as a gateway for attackers:\u202f<\/strong>The transition to remote work\u202fhas\u202fprompted many organizations to enable most of their services in the cloud rather than on premises. For those that are not experienced working with cloud services, there is the risk that misconfigurations or vulnerable, out-of-date components with external API access could be exploited.&nbsp;<\/li><\/ul>\n","protected":false},"excerpt":{"rendered":"<p>Deep Instinct, the first company to apply end-to-end Deep Learning to cybersecurity, has unveiled findings from its bi-annual Threat Landscape Report. The Deep Instinct Threat Research team extensively monitored attack volumes and types and then extrapolated its findings to predict where the future of cybersecurity is heading, determine what motivates attackers, and most importantly, lays [&hellip;]<\/p>\n","protected":false},"author":18,"featured_media":12432,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[3,17,512,37,43,514],"tags":[226,121,2913,3016,158],"class_list":["post-12431","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-analysis","category-enterprise-security","category-main-story-newsletter","category-research","category-top-stories","category-used","tag-ai","tag-cybersecurity","tag-deep-instinct","tag-guy-caspi","tag-machine-learning"],"acf":[],"publishpress_future_workflow_manual_trigger":{"enabledWorkflows":[]},"_links":{"self":[{"href":"https:\/\/www.intelligentcio.com\/north-america\/wp-json\/wp\/v2\/posts\/12431","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.intelligentcio.com\/north-america\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.intelligentcio.com\/north-america\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.intelligentcio.com\/north-america\/wp-json\/wp\/v2\/users\/18"}],"replies":[{"embeddable":true,"href":"https:\/\/www.intelligentcio.com\/north-america\/wp-json\/wp\/v2\/comments?post=12431"}],"version-history":[{"count":8,"href":"https:\/\/www.intelligentcio.com\/north-america\/wp-json\/wp\/v2\/posts\/12431\/revisions"}],"predecessor-version":[{"id":12634,"href":"https:\/\/www.intelligentcio.com\/north-america\/wp-json\/wp\/v2\/posts\/12431\/revisions\/12634"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.intelligentcio.com\/north-america\/wp-json\/wp\/v2\/media\/12432"}],"wp:attachment":[{"href":"https:\/\/www.intelligentcio.com\/north-america\/wp-json\/wp\/v2\/media?parent=12431"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.intelligentcio.com\/north-america\/wp-json\/wp\/v2\/categories?post=12431"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.intelligentcio.com\/north-america\/wp-json\/wp\/v2\/tags?post=12431"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}