{"id":39245,"date":"2023-01-29T14:19:14","date_gmt":"2023-01-29T11:19:14","guid":{"rendered":"https:\/\/saudishopper.com.sa\/en\/?p=39245"},"modified":"2026-03-28T02:37:44","modified_gmt":"2026-03-27T23:37:44","slug":"socs-to-face-greater-challenges-from-cybercriminals-targeting-governments-and-media-despite-staff-shortages-in-2023","status":"publish","type":"post","link":"https:\/\/saudishopper.com.sa\/en\/socs-to-face-greater-challenges-from-cybercriminals-targeting-governments-and-media-despite-staff-shortages-in-2023\/","title":{"rendered":"SOCs to face greater challenges from cybercriminals targeting governments and media, despite staff shortages in 2023\u00a0<\/strong>"},"content":{"rendered":"\n

Kaspersky\u2019s experts\u00a0share their\u00a0<\/strong>predictions<\/strong><\/a>\u00a0for challenges in Security Operation Centers (SOCs).\u00a0<\/a>In 2022, the number of incidents in government and mass media segments will grow, and the trend will continue this year. SOCs from these and other industries will likely face more reoccurring targeted attacks, as will supply chain attacks via telecommunication providers. Another threat awaiting SOCs is more initial compromises through public-facing applications. Organizations that are threatened by ransomware attacks might also encounter data destruction. From an internal point of view, SOC teams face personnel shortages and increasing demand for efficiencies.<\/strong><\/p>\n\n\n\n

As the role of cybersecurity in large businesses increases remarkably year-on-year, Security Operations Centers (SOCs) are of paramount importance as effectively organized teams can secure their business from rapidly evolving malware and attack methods. This year\u2019s Kaspersky Security Bulletin ends with tailored predictions for SOCs. <\/p>\n\n\n\n

More reoccurring targeted attacks by state-sponsored actors   <\/strong><\/p>\n\n\n\n

In 2022, Kaspersky\u2019s experts saw the average number of incidents in the mass media sector double, growing from 263 in 2021 to 561 in 2022.\u00a0\u00a0During the last year, several high-profile cases occurred, including when Iranian state TV broadcasting was\u00a0interrupted\u00a0by hackers during protests in the country. Media outlets were also subject to DDoS attacks, such as those in the\u00a0Czech Republic<\/a>.\u00a0<\/p>\n\n\n\n

Alongside the government sector, where the average number of incidents increased by 36 percent in 2022, mass media became the prime target for cybercriminals among the 13 other analyzed segments, including industrial, food, development, financial, and others.\u00a0<\/p>\n\n\n\n

\"The<\/a><\/figure>\n\n\n\n

The average number of incidents in mass media and government companies per 10K systems in 2021 and 2022,\u00a0<\/em>Managed Detection and Response<\/em><\/a>\u00a0worldwide statistics<\/em><\/p>\n\n\n\n

The growth will continue in 2023, with reoccurring targeted attacks by state-sponsored actors likely to be often observed.\u00a0<\/strong>While this is usually relevant for government organizations, the mass media segment has been increasingly targeted during international conflicts traditionally accompanied by information warfare, where mass media inevitably play an important role.<\/p>\n\n\n\n

\u201cLarge businesses and government agencies have always been targets of cybercriminals and state-sponsored actors, but geopolitical turbulence increased attackers\u2019 motivations and enlivened hacktivism, which cybersecurity specialists have not regularly encountered until 2022. The new wave of politically-motivated attacks is especially relevant for the government and mass media sectors. To effectively protect a company, it\u2019s necessary to implement <\/em>comprehensive threat detection and remediation provided through Managed Detection and Response services,\u201d said Sergey Soldatov, Head of the Security Operation Center (SOC) at Kaspersky.<\/p>\n\n\n\n

Supply chain attacks via telecommunication providers <\/strong><\/p>\n\n\n\n

In 2023, perpetrators may strike supply chains by attacking telecommunication companies more. This is a further attempt to hit customers, so the growing threat looms larger this year. In 2021, the telecom industry saw – for the first time – a\u00a0prevalence\u00a0of high-severity incidents throughout the year. Although in 2022, the average share of high-severity incidents was lower \u2013 79 in 2021 per 10k systems monitored versus roughly 12 in 2022 \u2013 these companies remain attractive targets for cybercriminals.\u00a0<\/p>\n\n\n\n

Ransomware destroyers;<\/strong> initial compromises via p<\/strong>ublic<\/strong>-facing applications <\/strong><\/p>\n\n\n\n

Throughout 2022, Kaspersky observed a new ransomware trend that will continue in 2023 \u2013\u00a0ransomware actors will encrypt companies\u2019 data and destroy it. This is relevant for\u00a0organizations that are subject to\u00a0politically-driven attacks.\u00a0<\/p>\n\n\n\n

Another threat awaiting SOCs is more\u00a0initial compromises\u00a0through\u00a0public-facing applications. Penetration from the perimeter requires less preparation than phishing, and old vulnerabilities are still exposed.<\/p>\n\n\n\n

What will SOCs face internally? Processes and efficiency\u00a0<\/strong><\/p>\n\n\n\n

In 2023, the value every team member (even not skilled ones) brings to SOC is increasing. Developing the team’s skills is the proven way to counter the increasing threats. That means IR-related training and any form of SOC exercises, such as TTX, purple teaming, and advisory attack emulations, will be vital.\u00a0<\/p>\n\n\n\n

The growing threat landscape leads to increasing budgets and demand for more efficiencies. Increasing incidents and threats transform into a need to predict attacks and techniques, raising the\u00a0value of threat intelligence and hunting.\u00a0<\/p>\n\n\n\n

To read the full report on SOC challenges in 2023, please visit\u00a0Securelist.com<\/a>. This report is a part of Kaspersky Security Bulletin (KSB) \u2013 an annual series of predictions and analytical reports on key shifts within the cybersecurity world.\u00a0Click here<\/a>\u00a0to\u00a0look at other KSB pieces.<\/p>\n\n\n\n

To protect from the relevant threats, Kaspersky researchers recommend implementing the following measures:<\/p>\n\n\n\n