CrowdStrike released its 2023 Threat Hunting Report, with a key takeaway being that the average time between attackers gaining an initial foothold on a victim’s network and compromising additional devices is 79 minutes, down from 84 minutes in 2022. Additionally, interactive intrusions, or attacks where the threat actor does not automate network exploitation, have continued to rise by 40 percent since 2022. 62 percent of these types of attacks utilized valid account information and 34 percent of successful breaches used domain or default accounts, signaling attackers’ growing preference for their network activity to appear legitimate. Cloud attacks have also become more popular, increasing by 95 percent since 2022, as attackers catch up with the mass shift to cloud technologies after the COVID pandemic. Read more at Security Week.
H2Oex: In Person 1 day event/exercise. Thurs Dec 5th. Washington DC. Join us!