Cyber Risks · GreyNoise Blog

2024 Verizon DBIR: Surviving the Year of the Vuln | Grey Noise Blog

Summary: The 2024 Verizon DBIR reports a 180% increase in attacks that use vulnerability exploitation as the critical path to initiate a breach, with exploitation also cutting into the share of breaches started through credential attacks and phishing. GreyNoise's sensor fleet recorded 4.4 million malicious IPv4 addresses in 2023 versus 4.2 million in 2022, and malicious tagged events rose from just over 10 million to more than 13 million.

Key Takeaway: The report states that 85% of CISA KEV entries remain unpatched after 30 days, so for most organizations the exposure window is not a gap to close but a period to defend through.

Read the original at GreyNoise Blog ↗

Topics
Data Breaches
Related