{"id":51741,"date":"2023-05-03T21:40:00","date_gmt":"2023-05-03T21:40:00","guid":{"rendered":"https:\/\/www.darkreading.com\/remote-workforce\/the-daily-number-of-human-driven-cyber-incidents-increased-by-1-5-times-in-2022"},"modified":"2023-05-03T21:40:00","modified_gmt":"2023-05-03T21:40:00","slug":"the-daily-number-of-human-driven-cyber-incidents-increased-by-1-5-times-in-2022","status":"publish","type":"post","link":"https:\/\/www.threatshub.org\/blog\/the-daily-number-of-human-driven-cyber-incidents-increased-by-1-5-times-in-2022\/","title":{"rendered":"The Daily Number of Human-Driven Cyber Incidents Increased by 1.5 Times in 2022"},"content":{"rendered":"
<\/div>\n

Woburn, MA \u2013 May 2, 2023 \u2014 <\/strong>Research<\/a> based on the analysis of incidents reported to customers of Kaspersky Managed Detection and Response (MDR) has revealed that Security Operations Center (SOC) analysts discovered more than three high-severity incidents with direct human involvement every day in 2022.<\/p>\n

The efficiency external specialists provided while dealing with cybersecurity solutions and requirements of special knowledge were<\/a> the main reasons for the companies to outsource external experts in 2022. To address the lack of gaps in expertise among IT Security professionals and provide them with insights on the current threat landscape, Kaspersky analyzed anonymized customer incidents detected by its MDR service.  <\/p>\n

Kaspersky\u2019s annual Managed Detection and Response Analyst Report showed the high-severity incidents required an average 43.8 minutes to be detected by Kaspersky MDR. Due to an increase in human-driven attacks this processing time grew by approximately 6% compared to previous year.<\/p>\n

Regarding the nature of such incidents, 30% were associated with APTs, 26% accounted for malware attacks, and just over 19% resulted from \u201cethical hacking\u201d (pentests, red teaming or any other types of cyber exercises conducted in customers\u2019 infrastructures either for the security assessment of IT systems or to test the operational readiness of the MDR service).<\/p>\n

The proportion of incidents involving publicly available critical vulnerabilities and the detection of traces of previous attacks involving humans was around 9%. The remaining incidents resulted from the successful use of social engineering techniques or were linked to insider threats.   <\/p>\n

\u201cThis MDR report shows that sophisticated attacks driven by humans continue to grow,\u201d said Sergey Soldatov, head of security operations center at Kaspersky. \u201cThey require more resources to be investigated and they take up more of SOC analyst time as this type of attack lends itself to automation to a lesser degree. To detect these attacks efficiently we recommend companies to implement comprehensive threat hunting practices combined with classic alert monitoring.\u201d<\/p>\n

For greater protection from advanced attacks, Kaspersky experts recommend the following:<\/p>\n