TECHNOLOGY
58
EXTRA FACTS
2020 Threat Report : key takeaways and recommendations
• There is a need for focusing on external footprint .
• Attackers most commonly exploit a public-facing application or valid accounts . This can be countered by patching , network segmentation and UBA .
• Organisations should use multiple threat detection methodologies and augment detections and technology with skilled individuals .
• Close to 80 % of breaches detected by Rapid7 ’ s MDR service are malware-related , phishing-related or malicious documents
• Earlier focus on detecting threats in the initial access and execution tactics of the attack lifecycle can reduce the cost and impact of breaches
• Investing in collecting and reusing threat indicators improves security programme efficiency
• Proactively deploying mitigating controls based on trends in the threat landscape can reduce the risk of a breach
“Companies continue to build and deploy straight up vulnerable systems and then put them on the internet ”
— Tod Beardsley , Director of Research , Rapid7
JULY 2020