Verizon Data Breach Report: Bad Actors Are Exploiting Vulnerabilities Way More Than They Did Last Year
telecompetitor, Wednesday, May 1st, 2024
The Verizon Business 17th annual Data Breach Investigations Report (DBIR), which analyzed more than 30,000 security incidents and more than 10,000 confirmed breaches globally, found that vulnerability exploitation escalated by nearly three times (180%) last year compared with the previous period.
Attacks targeting vulnerabilities on unpatched systems and devices (zero-day vulnerabilities) now account for 14% of all breaches, the report shows.
One of the most notable drivers of these attacks was the MOVEit software breach, a supply-chain attack that exploited a vulnerability in an organization's file transfer app.
According to the Cybersecurity Infrastructure and Security Agency (CISA), it takes organizations an average of 55 days to remediate half of critical vulnerabilities following the availability of patches, while the median time for detecting this type of mass attack is five days.