New research from IT penetration test specialist Coalfire has revealed that midsized businesses are outperforming their larger competitors as a result of a security 'sweet spot'. Its first annual Coalfire Penetration Risk Report reveals that although larger enterprises have bigger budgets and resources, they are not the best prepared to protect against cybercrime.
While large organisations are still the best at protecting themselves against phishing and other social engineering attacks, the report found a cybersecurity sweet spot among midsized businesses which performed best at protecting their assets and mitigating their security risks in tests.
To compile its report, Coalfire performed 300 penetration tests on 148 companies worldwide to discover that despite having the largest cybersecurity budgets, large enterprises are not the most secure overall.
Across both large and small enterprises though, employees remain companies' biggest weakness either through human error or in creating opportunities for social engineering hacks.
Coalfire discovered that out-of-date software, insecure protocols, misconfiguration and password flaws were the greatest threats to external networks while insecure protocols, password flaws and patching flaws were the top vulnerabilities in internal networks.
The full report is available here.
Europol Releases Latest IOCTA Report
Each year, Europol’s European Cybercrime Centre (EC3) publishes the Internet Organised Crime Threat Assessment (IOCTA), its flagship strategic report on key findings and emerging threats and developments in cybercrime — threats that impact governments, businesses and citizens in the EU.read more
European Cybersecurity Month 2019 Is launched
October marks the kick-off of the European Cybersecurity Month (ECSM), coordinated by the European Union Agency for Cybersecurity (ENISA), the European Commission and supported by the Member States. This campaign will focus on expanding awareness about cybersecurity to citizens across Europe.read more
Remote Desktop Attacks Increasing
The Remote Desktop Protocol (RDP) is being used by cyberattackers to penetrate and extract data from a network before introducing their malicious software to perform internal reconnaissance, according to a new Vectra 2019 Spotlight Report on RDP.read more
LexisNexis Report On Cybercrime Has Shock Figures
LexisNexis Risk Solutions has released at the Digital Identity Summit its Cybercrime Report providing a comprehensive view into the shifting global fraud landscape from January 2019 through June 2019. During this period, the LexisNexis Digital Identity Network recorded 16.4 billion transactions, of which 277 million were human-initiated attacks, a 13 per cent increase over the second half of 2018.read more