New research from IT penetration test specialist Coalfire has revealed that midsized businesses are outperforming their larger competitors as a result of a security 'sweet spot'. Its first annual Coalfire Penetration Risk Report reveals that although larger enterprises have bigger budgets and resources, they are not the best prepared to protect against cybercrime.
While large organisations are still the best at protecting themselves against phishing and other social engineering attacks, the report found a cybersecurity sweet spot among midsized businesses which performed best at protecting their assets and mitigating their security risks in tests.
To compile its report, Coalfire performed 300 penetration tests on 148 companies worldwide to discover that despite having the largest cybersecurity budgets, large enterprises are not the most secure overall.
Across both large and small enterprises though, employees remain companies' biggest weakness either through human error or in creating opportunities for social engineering hacks.
Coalfire discovered that out-of-date software, insecure protocols, misconfiguration and password flaws were the greatest threats to external networks while insecure protocols, password flaws and patching flaws were the top vulnerabilities in internal networks.
The full report is available here.
Half Of Global Organisations Not Prepared For Cyberattacks
It is believed that more than 4,000 cyberattacks occur daily worldwide, but half of organisations across the globe admit they are not prepared for such events.read more
Secure Your Physical Business Against Data Theft
Data theft does not just happen in cyberspace, but in the physical business environment, too. Lax physical security can allow criminals to access your computers, filing cabinets, documents left on desktops, etc. Here are some tips for you to ensure your everyday working environment is safe and secure.read more
UK Launches Third NCSC Annual Review
Paymaster General and Minister for the Cabinet Office Oliver Dowden MP has launched the UK's National Cyber Security Centre's third Annual Review. In his presentation speech, he said: "Thank you, everyone, for joining us this morning. Cybersecurity is genuinely a massive priority for the government and it gives me great pleasure to launch the National Cyber Security Centre’s third Annual Review.read more
Kaspersky Releases Information Security Report
To budget for information security, companies need to consider factors such as average potential losses, preferably by incident type, as well as other businesses’ average, outlays on security. Precise data on such questions do not get published, which is why Kaspersky conducts an annual survey of employees who make business decisions related to IT security for a variety of companies. The results of its 2019 survey have just been published.read more