Reading the Mandiant M-Trends 2024
Security Boulevard, Wednesday, May 1st, 2024
This is my informal, unofficial, unapproved etc blog based on my reading of the just-released Mandiant M-Trends 2024 report (Happy 15th Birthday, M-Trends! May you live for many googley years.)
'Shorter dwell times are likely driven by a larger proportion of ransomware incidents globally in 2023 (23%) versus 2022 (18%). The median dwell time for these ransomware cases dropped to 5 days compared to 9 days in the previous report.' 'A.C. - so your 'detection' improved because .. the attacker helped a bit more'
'54% of organizations first learned of a compromise from an external source, while 46% first identified evidence of a compromise internally. ' 'A.C. - pretty close to 1/2 and 1/2, so half of the organizations detect, while the other half gets told by others'