Intelligent CISO Issue 15 | Page 19

cyber trends credentials. In addition, publishing errors in the cloud are increasing year-over-year. Misconfiguration (‘Miscellaneous Errors’) led to a number of massive, cloud- based file storage breaches, exposing at least 60 million records analysed in the DBIR dataset. This accounts for 21% of breaches caused by errors. Bryan Sartin, Executive Director of Security Professional Services at Verizon, said: “As businesses embrace new digital ways of working, many are unaware of the new security risks to which they may be exposed. They really need access to cyberdetection tools to gain access to a daily view of their security posture, supported with Senior executives are 12 times more likely to be the target of social incidents and nine times more likely to be the target of social breaches than in previous years. statistics on the latest cyberthreats. Security needs to be seen as a flexible and smart strategic asset that constantly delivers to the businesses and impacts the bottom line.” Major findings in summary – approval authority and privileged access into critical systems. Typically, time-starved and under pressure to deliver, senior executives quickly review and click on emails prior to moving on to the next (or have assistants managing email on their behalf), making suspicious emails more likely to get through. The increasing success of social attacks such as business email compromises (BECs – which represent 370 incidents or 248 confirmed breaches of those analysed), can be www.intelligentciso.com | Issue 15 linked to the unhealthy combination of a stressful business environment combined with a lack of focused education on the risks of cybercrime. This year’s findings also highlight how the growing trend to share and store information within cost-effective cloud- based solutions is exposing companies to additional security risks. Analysis found that there was a substantial shift towards compromise of cloud-based email accounts via the use of stolen The DBIR continues to deliver comprehensive data-driven analysis of the cyberthreat landscape. Major findings of the 2019 report include: • New analysis from FBI Internet Crime Complaint Center (IC3): Provides insightful analysis of the impact of Business Email Compromises (BECs) and Computer Data Breaches (CDBs). The findings highlight how BECs can be 19