#MFA

6 reports tagged "MFA".

Threat Actors, Geopolitics & Intelligence

2024 Year in Review

2024 saw a surge in identity-based attacks and exploitation of outdated vulnerabilities. Threat actors focused on unpatched systems, misconfigured infrastructure, and MFA weaknesses, leading to significant breaches. AI's role in cyber threats was limited, but its potential for future attacks is noted.

Mar 2025Read →

Six Degrees

AI Security & AI Governance

Ransomware & Extortion

Mapping the UK SME Cyber Security Landscape in 2025

A Six Degrees whitepaper surveying UK SME IT and cyber security professionals on their 2024 frustrations, 2025 worries, evolving threat landscape, in-house resource gaps and growing reliance on managed security services. Key findings: cost is the top 2024 frustration, AI-generated attacks the top 2025 worry, 87.5% report an improved posture, 73% credit cloud with stronger defences, and 66% expect to lean more on managed security services in the next 12 months.

Jan 2025Read →

CyberArk

AI Security & AI Governance

Threat Actors, Geopolitics & Intelligence

2025 Identity Security Landscape

CyberArk's 2025 Identity Security Landscape (a Security Matters research report) maps how AI adoption and the explosion of machine identities are reshaping identity risk. Nine in ten organizations reported a successful identity-centric breach, over half (51%) fell victim to phishing/vishing multiple times, and machine identities now outnumber human identities by more than 80 to 1 — yet only 12% treat machine identities as privileged. 72% of employees use AI tools at work while 68% of organizations still lack identity security controls for them, fuelling shadow-AI risk. The report frames AI as a "triple threat" (weapon, defender, and system to secure), warns that traditional IAM cannot govern autonomous AI agents, and recommends privileged access management, least privilege, session monitoring, tool consolidation, and governance aligned with tightening regulation (e.g., Australia's Cyber Security Act 2024).

Jan 2025Read →

Arctic Wolf

SOC, Detection & Response

Identity, Phishing & Access Security

Arctic Wolf Security Operations 2024 Report

Arctic Wolf's annual security operations report distils 253 trillion observations from May 2023 through April 2024 across a global customer base of more than 6,500 organisations, plus 57,000 Security Posture In-Depth Reviews. It highlights why 24/7 monitoring matters (45% of alerts fall outside working hours), how identity telemetry now dominates the top 10 IOCs, and how phishing surges track high-stakes political and world events (up 500% in April 2023 and 150% in April 2024). It also covers the CrowdStrike outage response, the CVE-2024-3400 zero-day (171 investigations), and Arctic Wolf's ransomware resilience data: fewer than 2% of MDR customers were impacted versus a 45% industry average.

Oct 2024Read →

Cyberint

Threat Actors, Geopolitics & Intelligence

Ransomware & Extortion

Initial Access Brokers Report

Cyberint's 2024 analysis of Initial Access Brokers (IABs) — the intermediaries who breach networks and sell access to ransomware operators and other threat actors. Covers most-targeted countries and industries, a ~1000% jump in average revenue of targeted organizations to ~$1.96B, VPN overtaking RDP as the top access type, a ~60% drop in average listing price to ~$1,295, and the fact that over 60% of compromised machines are protected only by Windows Defender.

Aug 2024Read →

Create a free account to see all 6 reports with this tag.