{"id":45451,"date":"2022-02-25T14:41:00","date_gmt":"2022-02-25T14:41:00","guid":{"rendered":"https:\/\/www.threatshub.org\/blog\/cisco-ids-top-2022-security-threats-and-what-to-do-about-them\/"},"modified":"2022-02-25T14:41:00","modified_gmt":"2022-02-25T14:41:00","slug":"cisco-ids-top-2022-security-threats-and-what-to-do-about-them","status":"publish","type":"post","link":"https:\/\/www.threatshub.org\/blog\/cisco-ids-top-2022-security-threats-and-what-to-do-about-them\/","title":{"rendered":"Cisco IDs top 2022 security threats and what to do about them"},"content":{"rendered":"
<\/div>\n

2022 will be another busy year for enterprise incident responders as ransomware, supply chain and myriad zero-day attacks will continue to rise, according to Cisco’s Talos security experts.<\/p>\n

To help address the threats, the Cisco Talos team used a blog and online presentation to detail steps enterprises can take to defend themselves against the growing field of bad actors and also to point out lessons learned from recent damaging exploits such as the Log4j vulnerability and Microsoft Exchange server zero-day threats<\/a>.<\/p>\n

Once, zero-day attacks were typically launched by state actors against service providers, but those days are gone, wrote Nick Biasini head of outreach at Cisco Talos in a blog<\/a> about the security landscape in 2022. Now new, less experienced combatants seek out a broader range of targets, using less surgical attacks. \u201cThis has led to more risky behavior than we\u2019ve seen historically, without as much regard for collateral damage,\u201d he wrote.<\/p>\n

These state actors have changed their strategies, as well. Rather than focusing on espionage against other nations, now they also target dissidents and activists with attacks designed to destroy and disrupt.  At the same time criminal enterprises have become a larger threat thanks to the billions of dollars they are able to collect readily through cryptocurrencies. \u201cWe\u2019ve never faced more challenges as defenders\u2026\u201d Biasini stated.<\/p>\n

Some of the biggest challenges for 2022 include ongoing problems such as Log4j<\/a> and ransomware.<\/p>\n

Unpatched Log4j remains a threat<\/h2>\n

Log4j software is widely used in enterprise and consumer services, websites, and applications as an easy-to-use utility to support client\/server application development.  But it has weakneses <\/a>that, if exploited, could let unauthenticated remote actors take control of affected server systems and gain access to company information or unleash denial of service attacks.<\/p>\n