Cisco Talos 2023 Year in Review
Summary: Cisco Talos' second annual Year in Review analyzes 2023 threat data, with actor trends focused on China, Russia and Middle East-based APTs. It reports that LockBit accounts for more than a quarter of victim posts on data leak sites, nearly a third of the top 20 MITRE ATT&CK techniques fall under defense evasion, and exploits in public-facing applications plus compromised credentials make up just over half of initial access vectors observed by Talos IR.
Why it matters: Just over half of the initial access Talos IR observed came from two things you can close: unpatched public-facing applications and stolen credentials. LockBit alone generated more than a quarter of leak-site victim posts, and nearly a third of the most common techniques were about evading your defenses rather than breaking them.
Read the original at Cisco Talos ↗
- Topics
- Detection & Response
- Related
- YARA-X 1.23.0 Release, (Sun, Nov 15th) Cyber Risks · Nov 15, 2026Inside Falcon AI Gateway: One Control Point for AI Traffic Cyber Risks · Nov 13, 2026Macfinger Click Fix campaign sends Down TheDRAIN infostealer for macOS, (Fri, Nov 13th) Cyber Risks · Nov 13, 2026