Cisco Talos 2024 Year in Review
Summary: Cisco Talos' 2024 Year in Review reports that identity-based attacks accounted for 60% of all Talos Incident Response cases, and that ransomware actors successfully disabled security solutions in 48% of their attacks last year. The report also covers top targeted vulnerabilities, network-based attacks, email threats, adversary toolsets, MFA abuse and AI-based threats, and notes that new group RansomHub climbed the ranks by targeting large operations for hefty payouts.
Key Takeaway: Ransomware crews got their security tools switched off in nearly half of the attacks Talos responded to, and identity was the pivot point in 60% of cases - the controls you count on most were the ones attackers went through or turned off.
Read the original at Cisco Talos ↗
- Topics
- Phishing & Social Engineering
- Related
- US disrupts North Korean campaign behind $400 million crypto theft Cyber Risks · Nov 14, 2026North Korea ‘s Crypto Theft Operations: DOJ Seizes $1.2 Billion and Disrupts Hacker Infrastructure Cyber Risks · Nov 13, 2026FBI Says North Korean Hackers Stole Over $400 Million in Crypto Using Deepfake Video Calls Cyber Risks · Nov 13, 2026