The impact on daily life from cyber threats by nation-state and organized cybercrime syndicates behind these threats increased significantly in 2022, NTT Security Holdings said in its recently released Global Threat Intelligence report.
Commenting on the report, Gregory Garten, NTT Security Holdings chief technology officer, said 2022 saw “continued attacks” against organizations in the critical infrastructure and supply chain sectors:
“The continued success of phishing and exploitation of older vulnerabilities highlight the skills shortage in cybersecurity and lack of proper attack surface management, underscoring the need for a mature and cohesive cyber defense solution."
Cloud, Saas Targets Increase
Key findings from the report include:
- The integration of technology into infrastructure and supply chains made sectors like technology, manufacturing, and transport/distribution particularly vulnerable.
- Attacks targeting cloud and Software-as-a-Service (SaaS) platforms continued to increase. Web-based and desktop application threats accounted for a staggering 70% of attacks.
- WordPress emerged as the most attacked content management system (CMS) software worldwide.
- Banking trojans experienced a slight decline from the previous year, but crypto miners saw a resurgence despite the fluctuating value of many cryptocurrencies.
- Attackers focused on high-impact vulnerabilities, with nearly 75% of them having critical- or high-severity CVSSv3 scores.
Cyber Threats Evolving
Despite significant efforts to disrupt and dismantle attacks, cyber threats continue to evolve at a rapid pace. As Garten explained:
"Organizations around the globe must ensure that their cybersecurity measures keep pace to protect their digital assets and infrastructure."