Trend Micro 2024 Cyber Risk Report: devices and accounts are the highest-risk assets across enterprise attack surfaces
Trend Micro published its Intercepting Impact: 2024 Trend Micro Cyber Risk Report, built on Trend Vision One Attack Surface Risk Management (ASRM) and XDR telemetry from December 25, 2023 to June 30, 2024. The report finds that devices carry the most high-risk assets (620,610 of 18 million), followed by accounts, cloud assets, internet-facing assets and applications. The Americas have the highest average risk index (43.4), Europe is the quickest region to patch, mining is the highest-risk vertical and pharmaceuticals patch fastest. The release is vendor-authored and promotes the Trend Vision One platform, so it is useful as risk-benchmarking context rather than as a specific threat.
Technical Details
- High-risk counts: devices 620,610 of 18M; accounts 17,065 of 44M; cloud assets 8,088 of 14.8M; internet-facing assets 1,141 of 1M; applications 565 of 8M.
- Risk score methodology: an asset's attack, exposure and security configuration are multiplied by impact.
- Top detected risk event: access to cloud applications with a high risk level.
- Other frequent risk events: old and inactive accounts, accounts with disabled security controls, and sensitive data sent outside the network.
- The report also found many weak configurations, especially around security control settings, and unpatched actively exploited vulnerabilities.
Remediation
- Optimize product security settings to get alerts on misconfigurations.
- Verify risky events with the device or account owner and investigate them (e.g. with Vision One Workbench).
- Disable risky accounts, or reset them with strong passwords and enable MFA.
- Apply the latest patches and upgrade applications and operating systems regularly.
Linha do tempo
-
Trend Micro 2024 Cyber Risk Report: devices and accounts are the highest-risk assets across enterprise attack surfaces
ler a análise desta fonte ocultar
Trend Micro published its Intercepting Impact: 2024 Trend Micro Cyber Risk Report, built on Trend Vision One Attack Surface Risk Management (ASRM) and XDR telemetry from December 25, 2023 to June 30, 2024. The report finds that devices carry the most high-risk assets (620,610 of 18 million), followed by accounts, cloud assets, internet-facing assets and applications. The Americas have the highest average risk index (43.4), Europe is the quickest region to patch, mining is the highest-risk vertical and pharmaceuticals patch fastest. The release is vendor-authored and promotes the Trend Vision One platform, so it is useful as risk-benchmarking context rather than as a specific threat.
Technical Details
- High-risk counts: devices 620,610 of 18M; accounts 17,065 of 44M; cloud assets 8,088 of 14.8M; internet-facing assets 1,141 of 1M; applications 565 of 8M.
- Risk score methodology: an asset's attack, exposure and security configuration are multiplied by impact.
- Top detected risk event: access to cloud applications with a high risk level.
- Other frequent risk events: old and inactive accounts, accounts with disabled security controls, and sensitive data sent outside the network.
- The report also found many weak configurations, especially around security control settings, and unpatched actively exploited vulnerabilities.
Remediation
- Optimize product security settings to get alerts on misconfigurations.
- Verify risky events with the device or account owner and investigate them (e.g. with Vision One Workbench).
- Disable risky accounts, or reset them with strong passwords and enable MFA.
- Apply the latest patches and upgrade applications and operating systems regularly.