Belief that “malicious actors today are using cutting edge techniques for the majority of attacks”
Belief that “majority of compromises are via zero-day vulnerabilities”
Organizations continue to leave systems unpatched with years old vulnerabilities
Belief that “my organization doesn’t have anything a malicious actor would be interested in…I’m not a target”
My organization has cyber insurance and that’s enough.
“I don’t have budget to buy all the products/hire the staff needed to protect my network.”

https://www.techrepublic.com/article/initial-access-brokers-how-are-iabs-related-to-the-rise-in-ransomware-attacks/

https://www.pandasecurity.com/en/mediacenter/security/ransomware-statistics/

As new approaches to ransomware like double extortion continue to pay off, attackers are demanding higher ransom payouts than ever before. The average ransom demand in the first half of 2021 amounted to $5.3 million — a 518% increase compared to 2020. The average ransom payment has also increased by 82% since 2020, reaching a whopping $570,000 in the first half of 2021 alone.

The FBI’s Internet Crime Complaint Center (IC3) received 2,084 ransomware complaints in the first half of 2021. (FBI and CISA)

At least one employee downloaded a malicious mobile application in 46% of organizations in 2021. (Check Point)

https://www.marsh.com/us/services/cyber-risk/insights/ransomware-paying-cyber-extortion-demands-in-cryptocurrency.html

@infosystir

@boettcherpwned

@bryanbrake (on Mastodon & Twitter)

@brakeSec

Discord Invite! "please click OK to accept the Code of Conduct in the 'Rules-and-info' channel" https://discord.gg/brakesec

#AmazonMusic: https://brakesec.com/amazonmusic

#Spotify: https://brakesec.com/spotifyBDS #Pandora: https://brakesec.com/pandora

#RSS: https://brakesec.com/BrakesecRSS

#Youtube Channel: http://www.youtube.com/c/BDSPodcast