{"id":27227,"date":"2021-08-17T16:14:00","date_gmt":"2021-08-17T13:14:00","guid":{"rendered":"https:\/\/saudishopper.com.sa\/en\/?p=27227"},"modified":"2026-03-27T23:03:22","modified_gmt":"2026-03-27T20:03:22","slug":"one-in-10-cybersecurity-incidents-investigated-by-kaspersky-in-organizations-are-considered-severe","status":"publish","type":"post","link":"https:\/\/saudishopper.com.sa\/en\/one-in-10-cybersecurity-incidents-investigated-by-kaspersky-in-organizations-are-considered-severe\/","title":{"rendered":"One in 10 cybersecurity incidents investigated by Kaspersky in organizations are considered severe"},"content":{"rendered":"\n

According to anonymized metadata voluntarily provided by Kaspersky MDR customers, one-in-10 (9%) prevented cybersecurity incidents that could cause major disruption or unauthorized access to the customer\u2019s assets. The vast majority of incidents (72%) were of medium severity. This means that if these threats had not been detected by the service, they would have affected the performance of the assets or could lead to single data misuse cases.\u00a0<\/strong><\/p>\n\n\n\n

Cyberattacks are growing in complexity and employing evasive techniques to avoid detection by security solutions. Detection and prevention of such threats require seasoned threat hunters who can spot suspicious actions before they cause damage to a company. Kaspersky analyzed anonymized customers\u2019 cases identified via the Kaspersky MDR service in Q4 2020[1]<\/sup><\/a>\u00a0to see how widespread and severe resolved incidents were.\u00a0<\/p>\n\n\n\n

The research revealed that almost every industry, except mass media and transportation, saw high severity incidents during the analyzed period. Most often critical incidents affected organizations from the public sector (41% of all high severity incidents were detected in this industry), IT (15%), and financial (13%) verticals.\u00a0<\/p>\n\n\n\n

Almost a third (30%) of these critical incidents were human-driven targeted attacks. Almost one quarter (23%) of high severity incidents were classified as high impact malware outbreaks, including ransomware. In 9% of cases, cybercriminals gained access to a company’s IT infrastructure using social engineering techniques. <\/p>\n\n\n\n

Kaspersky experts also noted that current APTs were typically detected together with artifacts of previous advanced attacks, suggesting that if an organization responds to a sophisticated threat, it\u2019s often attacked again, likely by the same actor. Also, in organizations experiencing APTs experts often discovered signs of simulation of adversarial behavior, such as red teaming, or an assessment of a company\u2019s operational security capabilities through a sophisticated attack simulation. <\/p>\n\n\n\n

\u201cOur study found that targeted attacks are rather common \u2014 more than one quarter (27%) of organizations faced them. The good news is that organizations that are likely to experience such incidents know about this risk and are prepared for them. These organizations employ services that help them assess their defensive capabilities, such as red teaming, as well as seek help from experts who can stop criminals<\/em>, \u201c\u2013 comments Gleb Gritsai, Head of Security Services, Kaspersky.<\/p>\n\n\n\n

To protect your organization from APTs and other advanced attacks, Kaspersky recommends the following:<\/p>\n\n\n\n