/
← Voltar ao feed
low education agriculture construction healthcare telecommunications

Trend Micro 2024 Cyber Risk Report: average CRI falls to 38.4 as LockBit, RansomHub and Play lead ransomware breaches

1 fonte(s) · 1 atualização(ões) · publicado 25/03/2025 09:00 · coletado há 1 dia

Trend Micro published its 2024 Cyber Risk Report, based on telemetry from the Trend Vision One Cyber Risk Exposure Management platform. The average Cyber Risk Index (CRI) was 38.4 for the year, down 6.2 points from 2023, and stayed in the Medium Risk zone (31-69). Trend attributes the decline to organizations adopting proactive, risk-based security. The report names LockBit, RansomHub and Play as the ransomware groups behind the most reported breaches in 2024. It also says organizations with an above-average CRI are about 12 times more likely to suffer a ransomware breach. This is vendor-authored industry reporting with no new incident or vulnerability.

Technical Details

  • Top risky events were risky cloud app access and stale Microsoft Entra ID accounts. The rest of the top 10 were email, user account and credential-related risks, many caused by misconfiguration. The report also flags Entra ID accounts with MFA disabled.
  • The most commonly detected unpatched CVEs of 2024 were high-severity Elevation of Privilege (EoP) flaws published in the first half of the year. No CVE IDs are given.
  • Mean Time to Patch: Europe was fastest at 23.5 days and Japan at 27.5 days. By vertical, non-profits (19 days) and technology (22 days) were fastest, while healthcare (41.5 days) and telecoms (38 days) were slowest.
  • Education, agriculture and construction had the highest CRI and are the most exposed sectors. Europe improved most, with a seven-point reduction that Trend links possibly to NIS2 and DORA. Japan had the lowest average at 34.3.
  • Emerging AI threats cited are AI-assisted deepfake phishing, virtual kidnapping scams and automated reconnaissance.

Remediation

  • Optimize security settings, alert on misconfigurations and vulnerabilities, and build a comprehensive attack surface view from native and third-party sensors.
  • Verify and investigate risky events with the device or account owner, for example through the Vision One Workbench search.
  • Inventory and delete stale accounts, disable risky ones, reset weak passwords and enforce MFA.
  • Apply patches and upgrade application and OS versions regularly.

Linha do tempo

  1. newsroom.trendmicro.com ↗ · pub. 25/03/2025 09:00 · coletado 19/10 18:02 primeiro registro

    Trend Micro 2024 Cyber Risk Report: average CRI falls to 38.4 as LockBit, RansomHub and Play lead ransomware breaches

    ler a análise desta fonte

    Trend Micro published its 2024 Cyber Risk Report, based on telemetry from the Trend Vision One Cyber Risk Exposure Management platform. The average Cyber Risk Index (CRI) was 38.4 for the year, down 6.2 points from 2023, and stayed in the Medium Risk zone (31-69). Trend attributes the decline to organizations adopting proactive, risk-based security. The report names LockBit, RansomHub and Play as the ransomware groups behind the most reported breaches in 2024. It also says organizations with an above-average CRI are about 12 times more likely to suffer a ransomware breach. This is vendor-authored industry reporting with no new incident or vulnerability.

    Technical Details

    • Top risky events were risky cloud app access and stale Microsoft Entra ID accounts. The rest of the top 10 were email, user account and credential-related risks, many caused by misconfiguration. The report also flags Entra ID accounts with MFA disabled.
    • The most commonly detected unpatched CVEs of 2024 were high-severity Elevation of Privilege (EoP) flaws published in the first half of the year. No CVE IDs are given.
    • Mean Time to Patch: Europe was fastest at 23.5 days and Japan at 27.5 days. By vertical, non-profits (19 days) and technology (22 days) were fastest, while healthcare (41.5 days) and telecoms (38 days) were slowest.
    • Education, agriculture and construction had the highest CRI and are the most exposed sectors. Europe improved most, with a seven-point reduction that Trend links possibly to NIS2 and DORA. Japan had the lowest average at 34.3.
    • Emerging AI threats cited are AI-assisted deepfake phishing, virtual kidnapping scams and automated reconnaissance.

    Remediation

    • Optimize security settings, alert on misconfigurations and vulnerabilities, and build a comprehensive attack surface view from native and third-party sensors.
    • Verify and investigate risky events with the device or account owner, for example through the Vision One Workbench search.
    • Inventory and delete stale accounts, disable risky ones, reset weak passwords and enforce MFA.
    • Apply patches and upgrade application and OS versions regularly.