Attacks on web applications spike in third quarter, new Talos IR data shows
Summary: Cisco Talos Incident Response reported that web application threats accounted for 30 percent of its third-quarter 2023 engagements, up from 8 percent the previous quarter, with exploitation of public-facing applications also at 30 percent as the top initial access method. Ransomware accounted for 10 percent of engagements, including the first observed BlackByte NT variant and continued LockBit activity, while telecommunications and education were the most targeted verticals at 20 percent each.
Bottom line: Unpatched or misconfigured applications and missing multi-factor authentication each appeared in 40 percent of engagements, meaning a large share of the incidents Talos responded to hinged on controls that were absent or unenforced.
Read the original at Cisco Talos ↗
- Topics
- Threat Actors & Nation-State
- Related
- University of Texas at Arlington warns personal information stolen during cyberattack Cyber Risks · Nov 13, 2026Hackers Exploit PHP2Shell Flaws in Check Point Gateways to Deploy TSGA Backdoor and Wipe ESXi Files Cyber Risks · Nov 13, 2026Hackers compromise 4,800 GitHub accounts to steal cloud credentials Cyber Risks · Nov 12, 2026