by Jesper Kråkhede, Sweden
Posted in Business, Security Architecture on Nov 22nd, 2023
The same report, read with management´s eyes. One theme stands out for me this year, and it fits what I have been writing about all year: resources. The report notes that a large share of organisations hit by human operated ransomware are small and medium sized, with only a few hundred employees. They are targeted […]
Posted in Security Architecture, Technology on Nov 11th, 2023
The Microsoft Digital Defense Report 2023 is out, and once again I have read it with an incident responder´s eyes. Some of the findings. Human operated ransomware attacks have tripled since September 2022. Password attacks have increased more than tenfold compared with the year before, to more than 4,000 per second. The large majority of […]
Posted in Business, Security Architecture, Security metrics on Aug 20th, 2023
The same report, but with management´s eyes. The most important organisational message in the Digital Defense Report 2022 is that the threats are no longer a technical issue alone. Ransomware is described as a threat on a national level. State actors use cyberattacks as part of war. Cybercrime works as a business, with services for […]
Posted in Security Architecture, Security metrics, Technology on Aug 14th, 2023
I have gone back to the Microsoft Digital Defense Report 2022 this summer, with a technical eye. A few numbers that stood out. The volume of password attacks rose to an estimated 921 attacks every second, a 74 % increase in one year. And 93 % of Microsoft´s ransomware incident response engagements found insufficient controls […]