cyber trends
credentials. In addition, publishing errors
in the cloud are increasing year-over-year.
Misconfiguration (‘Miscellaneous Errors’)
led to a number of massive, cloud-
based file storage breaches, exposing at
least 60 million records analysed in the
DBIR dataset. This accounts for 21% of
breaches caused by errors.
Bryan Sartin, Executive Director of
Security Professional Services at
Verizon, said: “As businesses embrace
new digital ways of working, many
are unaware of the new security risks
to which they may be exposed. They
really need access to cyberdetection
tools to gain access to a daily view of
their security posture, supported with
Senior executives are
12 times more likely
to be the target of
social incidents and
nine times more likely
to be the target of
social breaches than
in previous years.
statistics on the latest cyberthreats.
Security needs to be seen as a flexible
and smart strategic asset that constantly
delivers to the businesses and impacts
the bottom line.”
Major findings in summary
– approval authority and privileged
access into critical systems. Typically,
time-starved and under pressure to
deliver, senior executives quickly review
and click on emails prior to moving
on to the next (or have assistants
managing email on their behalf), making
suspicious emails more likely to get
through. The increasing success of
social attacks such as business email
compromises (BECs – which represent
370 incidents or 248 confirmed
breaches of those analysed), can be
www.intelligentciso.com
|
Issue 15
linked to the unhealthy combination
of a stressful business environment
combined with a lack of focused
education on the risks of cybercrime.
This year’s findings also highlight how
the growing trend to share and store
information within cost-effective cloud-
based solutions is exposing companies
to additional security risks. Analysis
found that there was a substantial shift
towards compromise of cloud-based
email accounts via the use of stolen
The DBIR continues to deliver
comprehensive data-driven analysis
of the cyberthreat landscape. Major
findings of the 2019 report include:
• New analysis from FBI Internet
Crime Complaint Center (IC3):
Provides insightful analysis of
the impact of Business Email
Compromises (BECs) and Computer
Data Breaches (CDBs). The
findings highlight how BECs can be
19