Mandiant's M-Trends Report Reveals New Insights from Frontline Cyber Investigations

StreetInsider04-24

Global median dwell time falls to its lowest point in over a decade; Financial Services is the most targeted sector by attackers Mandiant, part of Google Cloud, has released the findings of its M-...

Source Link

Disclaimer: Investing carries risk. This is not financial advice. The above content should not be regarded as an offer, recommendation, or solicitation on acquiring or disposing of any financial products, any associated discussions, comments, or posts by author or other users should not be considered as such either. It is solely for general information purpose only, which does not consider your own investment objectives, financial situations or needs. TTM assumes no responsibility or warranty for the accuracy and completeness of the information, investors should do their own research and may seek professional advice before investing.

Comments

We need your insight to fill this gap

Leave a comment

{"i18n":{"language":"en_US"},"isChannel":false,"data":{"share":"https://ttm.financial/m/news/2429127014?lang=en_US&edition=fundamental","thumbnail":"","is_english":true,"pubTime":"2024-04-24 08:32","share_image_url":"https://static.laohu8.com/e9f99090a1c2ed51c021029395664489","id":"2429127014","market":"us","top_or_hot":-1,"title":"Mandiant's M-Trends Report Reveals New Insights from Frontline Cyber Investigations","media":"StreetInsider","content":"<div>\n<p>Global median dwell time falls to its lowest point in over a decade; Financial Services is the most targeted sector by attackers\nMandiant, part of Google Cloud, has released the findings of its M-...</p>\n\n<a href=\"https://www.streetinsider.com/dr/news.php?id=23104961\">Source Link</a>\n\n</div>\n","source":"highlight_streetinsider","html":"<!DOCTYPE html>\n<html>\n<head>\n<meta http-equiv=\"Content-Type\" content=\"text/html; charset=utf-8\" />\n<meta name=\"viewport\" content=\"width=device-width,initial-scale=1.0,minimum-scale=1.0,maximum-scale=1.0,user-scalable=no\"/>\n<meta name=\"format-detection\" content=\"telephone=no,email=no,address=no\" />\n<title>Mandiant's M-Trends Report Reveals New Insights from Frontline Cyber Investigations</title>\n<style type=\"text/css\">\na,abbr,acronym,address,applet,article,aside,audio,b,big,blockquote,body,canvas,caption,center,cite,code,dd,del,details,dfn,div,dl,dt,\nem,embed,fieldset,figcaption,figure,footer,form,h1,h2,h3,h4,h5,h6,header,hgroup,html,i,iframe,img,ins,kbd,label,legend,li,mark,menu,nav,\nobject,ol,output,p,pre,q,ruby,s,samp,section,small,span,strike,strong,sub,summary,sup,table,tbody,td,tfoot,th,thead,time,tr,tt,u,ul,var,video{ font:inherit;margin:0;padding:0;vertical-align:baseline;border:0 }\nbody{ font-size:16px; line-height:1.5; color:#999; background:transparent; }\n.wrapper{ overflow:hidden;word-break:break-all;padding:10px; }\nh1,h2{ font-weight:normal; line-height:1.35; margin-bottom:.6em; }\nh3,h4,h5,h6{ line-height:1.35; margin-bottom:1em; }\nh1{ font-size:24px; }\nh2{ font-size:20px; }\nh3{ font-size:18px; }\nh4{ font-size:16px; }\nh5{ font-size:14px; }\nh6{ font-size:12px; }\np,ul,ol,blockquote,dl,table{ margin:1.2em 0; }\nul,ol{ margin-left:2em; }\nul{ list-style:disc; }\nol{ list-style:decimal; }\nli,li p{ margin:10px 0;}\nimg{ max-width:100%;display:block;margin:0 auto 1em; }\nblockquote{ color:#B5B2B1; border-left:3px solid #aaa; padding:1em; }\nstrong,b{font-weight:bold;}\nem,i{font-style:italic;}\ntable{ width:100%;border-collapse:collapse;border-spacing:1px;margin:1em 0;font-size:.9em; }\nth,td{ padding:5px;text-align:left;border:1px solid #aaa; }\nth{ font-weight:bold;background:#5d5d5d; }\n.symbol-link{font-weight:bold;}\n/* header{ border-bottom:1px solid #494756; } */\n.title{ margin:0 0 8px;line-height:1.3;color:#ddd; }\n.meta {color:#5e5c6d;font-size:13px;margin:0 0 .5em; }\na{text-decoration:none; color:#2a4b87;}\n.meta .head { display: inline-block; overflow: hidden}\n.head .h-thumb { width: 30px; height: 30px; margin: 0; padding: 0; border-radius: 50%; float: left;}\n.head .h-content { margin: 0; padding: 0 0 0 9px; float: left;}\n.head .h-name {font-size: 13px; color: #eee; margin: 0;}\n.head .h-time {font-size: 11px; color: #7E829C; margin: 0;line-height: 11px;}\n.small {font-size: 12.5px; display: inline-block; transform: scale(0.9); -webkit-transform: scale(0.9); transform-origin: left; -webkit-transform-origin: left;}\n.smaller {font-size: 12.5px; display: inline-block; transform: scale(0.8); -webkit-transform: scale(0.8); transform-origin: left; -webkit-transform-origin: left;}\n.bt-text {font-size: 12px;margin: 1.5em 0 0 0}\n.bt-text p {margin: 0}\n</style>\n</head>\n<body>\n<div class=\"wrapper\">\n<header>\n<h2 class=\"title\">\nMandiant's M-Trends Report Reveals New Insights from Frontline Cyber Investigations\n</h2>\n\n<h4 class=\"meta\">\n\n\n2024-04-24 08:32 GMT+8&nbsp;&nbsp;&nbsp;<a href=https://www.streetinsider.com/dr/news.php?id=23104961><strong>StreetInsider</strong></a>\n\n\n</h4>\n\n</header>\n<article>\n<div>\n<p>Global median dwell time falls to its lowest point in over a decade; Financial Services is the most targeted sector by attackers\nMandiant, part of Google Cloud, has released the findings of its M-...</p>\n\n<a href=\"https://www.streetinsider.com/dr/news.php?id=23104961\">Source Link</a>\n\n</div>\n\n\n</article>\n</div>\n</body>\n</html>\n","isBrief":false,"type":0,"news_type":1,"symbol":"IE00BWXC8680.SGD","symbol_name":"PINEBRIDGE US LARGE CAP RESEARCH ENHANCED \"A5\" (SGD) ACC","start_time":0,"source_url":"https://www.streetinsider.com/dr/news.php?id=23104961","article_id":"2429127014","we_media_id":null,"thumbnails":[],"rights":null,"url":"https://stock-news.laohu8.com/highlight/detail?id=2429127014","pubTimestamp":1713918720,"sourceInfo":{"source_id":"highlight_streetinsider","name":"StreetInsider"},"weMediaInfo":null,"summary":"Global median dwell time falls to its lowest point in over a decade; Financial Services is the most targeted sector by attackers. Mandiant, part of Google Cloud, has released the findings of its M-Trends 2024 report. Now in its 15th year, this annual report provides expert trend analysis based on Mandiant frontline cyber attack investigations and remediations conducted in 2023. The 2024 report reveals evidence that organisations globally have made meaningful improvements in their defensive capabilities, identifying malicious activity affecting their organisation more quickly than in previous years. The report also takes a look at notable threat actors and campaigns, providing a focused look at threat activity by region.\"Attackers regularly adjust their tactics, techniques, and procedures in order to achieve their objectives, which can be challenging for defenders. Despite this, our frontline investigators have learned that organisations have done a better job in 2023 at protecting syst","collect":0,"end_time":0,"defaultTopTitle":"streetinsider.com","property":[],"viewcount":null,"language":"en","relate_stocks":{"IE00BWXC8680.SGD":"PINEBRIDGE US LARGE CAP RESEARCH ENHANCED \"A5\" (SGD) ACC","LU0061474705.USD":"THREADNEEDLE (LUX) GLOBAL DYNAMIC REAL RETURN \"AU\" (USD) ACC","LU0466842654.USD":"HSBC ISLAMIC GLOBAL EQUITY INDEX \"A\" (USD) ACC","LU0097036916.USD":"贝莱德美国增长A2 USD","LU0320765059.SGD":"FTIF - Franklin US Opportunities A Acc SGD","MFA":"MFA Financial","LU0158827948.USD":"ALLIANZ GLOBAL SUSTAINABILITY \"A\" (USD) INC","LU0198837287.USD":"UBS (LUX) EQUITY SICAV - USA GROWTH \"P\" (USD) ACC","LU0276348264.USD":"THREADNEEDLE (LUX) GLOBAL DYNAMIC REAL RETURN\"AUP\" (USD) INC","LU0444971666.USD":"天利全球科技基金","BK4592":"伊斯兰概念","LU0251142724.SGD":"Fidelity America A-SGD","IE00BZ1G4Q59.USD":"LEGG MASON CLEARBRIDGE US EQUITY SUSTAINABILITY LEADER \"A\"(USD) INC (A)","BK4110":"抵押房地产投资信托","LU0149725797.USD":"汇丰美国股市经济规模基金","IE00BKVL7J92.USD":"Legg Mason ClearBridge - US Equity Sustainability Leaders A Acc USD","BK4585":"ETF&股票定投概念","LU0127658192.USD":"EASTSPRING INVESTMENTS GLOBAL TECHNOLOGY \"A\" (USD) ACC","BK4576":"AR","LU0211328371.USD":"TEMPLETON GLOBAL EQUITY INCOME \"A\" (MDIS) (USD)   INC","LU0029864427.USD":"TEMPLETON GLOBAL \"A\" (USD) INC","BK4566":"资本集团","LU0557290698.USD":"施罗德环球可持续增长基金","LU0234570918.USD":"高盛全球核心股票组合Acc Close","LU0170899867.USD":"EASTSPRING INVESTMENTS WORLD VALUE EQUITY  \"A\" (USD) ACC","LU0417517546.SGD":"Allianz US Equity Cl AT Acc SGD","BK4527":"明星科技股","BK4077":"互动媒体与服务","IE00BJTD4V19.USD":"NEUBERGER BERMAN US LONG SHORT EQUITY \"A1\" (USD) ACC","LU0052756011.USD":"TEMPLETON GLOBAL BALANCED \"A\" (USD) INC","LU0048573561.USD":"FIDELITY AMERICA \"A\" (USD) INC","BK4550":"红杉资本持仓","BK4579":"人工智能","LU0312595415.SGD":"Schroder ISF Global Climate Change Equity A Acc SGD","BK4588":"碎股","MNDT":"Mandiant","LU0056508442.USD":"贝莱德世界科技基金A2","LU0080751232.USD":"富达环球多元动力基金A","BK4503":"景林资产持仓","GOOGL":"谷歌A","LU0310800379.SGD":"FTIF - Templeton Global A Acc SGD","BK4574":"无人驾驶","BK4561":"索罗斯持仓","IE00BSNM7G36.USD":"NEUBERGER BERMAN SYSTEMATIC GLOBAL SUSTAINABLE VALUE \"A\" (USD) ACC","BK4573":"虚拟现实","BK4097":"系统软件","LU0234572021.USD":"高盛美国核心股票组合Acc","LU0128525689.USD":"TEMPLETON GLOBAL BALANCED \"A\"(USD) ACC","BK4581":"高盛持仓","LU0310800965.SGD":"FTIF - Templeton Global Balanced A Acc SGD"},"translate_title":"Mandiant的M-Trends报告揭示了来自前线网络调查的新见解","themeId":null,"isJumpTheme":false,"ttsUrl":null,"symbols_score_info":{"MNDT":1,"MFA":1,"GOOGL":0.65},"content_text":"Global median dwell time falls to its lowest point in over a decade; Financial Services is the most targeted sector by attackers\nMandiant, part of Google Cloud, has released the findings of its M-Trends 2024 report. Now in its 15th year, this annual report provides expert trend analysis based on Mandiant frontline cyber attack investigations and remediations conducted in 2023. The 2024 report reveals evidence that organisations globally have made meaningful improvements in their defensive capabilities, identifying malicious activity affecting their organisation more quickly than in previous years. The report also takes a look at notable threat actors and campaigns, providing a focused look at threat activity by region.\nView File Download File\nM-Trends Report\n\"Attackers regularly adjust their tactics, techniques, and procedures in order to achieve their objectives, which can be challenging for defenders. Despite this, our frontline investigators have learned that organisations have done a better job in 2023 at protecting systems and detecting compromises,\" said Jurgen Kutscher, Vice President, Mandiant Consulting at Google Cloud.\nKutscher continued, \"Defenders should be proud, but organisations must remain vigilant. A key theme throughout M-Trends 2024 is that attackers are taking steps to evade detection and remain on systems for longer, and one of the ways they accomplish this is through the use of zero-day vulnerabilities. This further highlights the importance of an effective threat hunt program, as well as the need for comprehensive investigations and remediation in the event of a breach.\"\nGlobal Median Dwell Time Hits Lowest Point Recorded\nWhile the use of zero-day exploits is on the rise, the M-Trends 2024 report reveals a significant improvement in global cybersecurity posture. The global median dwell time – the time attackers remain undetected within a target environment – has reached its lowest point in over a decade. In 2023, organisations detected intrusions within a median of 10 days, a notable decrease from 16 days in 2022.\nShorter dwell times are likely driven by a larger proportion of ransomware incidents in 2023 (23%) versus 2022 (18%). Mandiant also tracked an improvement in internal detection of compromise in 2023 (46%), compared to 37% in 2022. These two trends - shorter dwell times and more internally detected events - suggest that defenders globally have improved detection capabilities.\nDwell Time By Region\nA closer examination reveals that median dwell time varies by region. Organisations in the Asia-Pacific (JAPAC) region experienced the most dramatic decrease, reducing their median dwell time to 9 days, compared to 33 days in 2022. This variation could be driven by the quick moving ransomware used in the incidents in the region, as ransomware-related intrusions consumed the highest majority for the investigation type compared to any other region in 2023.\nConversely, the EMEA region (Europe, the Middle East and Africa) saw a slight rise in dwell time, increasing from 20 days to 22 days. This small variation could be the result of regional data normalising following the notable portion of Mandiant's work in Ukraine in 2022.\nTargeting By Industry Vertical\nThe M-Trends 2024 report highlights key trends in industry targeting by cyber attackers. Mandiant most frequently responded to intrusions at financial services organisations (17%) in 2023. Following this sector were business and professional services (13%), high technology (12%), retail and hospitality (9%), and healthcare (8%).\nA common thread across the top targeted industries is their possession of a wealth of sensitive information, including proprietary business data, personally identifiable information, protected health information, and financial records. This makes them particularly attractive targets for attackers seeking to exploit this type of sensitive data.\nAdditional report takeaways include:\nIncreased Focus on Evasion: In an effort to maintain persistence on networks for as long as possible, attackers are increasingly targeting edge devices, leveraging \"living off the land\" techniques and exploiting zero day vulnerabilities.\nHeightened Espionage Efforts by China-Nexus Actors: China-nexus espionage groups are continuing to prioritise acquiring zero-day exploits and platform-specific tools. They will likely target edge devices and platforms with minimal security solutions due to the ease of compromising them undetected and for a longer period of time.\nZero-Day Exploits on the Up-and-Up: Zero-day exploits are no longer limited to a few, select actors. The trend of increasing availability is expected to continue due to factors like ransomware and data extortion groups utilising them, continued state-sponsored exploitation, and the rise of commercially available \"turnkey\" exploit kits. For more on how threat actors are using zero days, check out Mandiant and Google Threat Analysis Group's first-ever joint report on the topic.\nCloud Targeting Aligns with Adoption: As cloud adoption grows, so does attacker targeting of these environments, including hybrid cloud/on-premise configurations. Organisations are advised to implement stricter controls to limit access to cloud resources by only authorised users.\nPotential for Red Teaming with Large Language Models (LLMs) and AI: Like other cybersecurity professionals, Red Teams can leverage LLMs and AI in their work. Use cases could involve Red Teams generating data for model training while AI developers find ways to secure access to trained models. This synergy could significantly enhance Red Team effectiveness and improve organisational preparedness against cyber threats.\nEvolving Tactics to Bypass MFA: As multi-factor authentication (MFA) becomes standard practice, attackers are developing methods to circumvent its protections. A concerning trend is the rise of web proxy and adversary-in-the-middle (AiTM) phishing pages that steal login session tokens, effectively bypassing MFA.","kind":null,"is_publish_news":true,"is_publish_highlight":false,"is_publish_live":false,"is_publish_wemedia":null,"editions":null,"column":"","sentiment":"0","news_tag":"","news_rank":0,"symbols":[],"gpt_button":1},"commentList":[],"isCommentEnd":true,"newsSizeData":{"likeSize":0,"commentSize":0,"repostSize":0,"favoriteSize":0,"likeStatus":false,"favoriteStatus":false},"APP":{"userAgent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","isDev":false,"isTTM":true,"deviceId":"web-server-community-laohu8-v3","version":"4.29.1","shortVersion":"4.29.1","platform":"web","vendor":"web","appName":"ttm","isIOS":false,"isAndroid":false,"isTiger":false,"isTHS":false,"isWeiXin":false,"isWeiXinMini":false,"isWeiBo":false,"isQQ":false,"isBaiduSwan":false,"isBaiduBox":false,"isDingTalk":false,"isToutiao":false,"isOnePlus":false,"isHuaWei":false,"isXiaomi":false,"isXiaomiWebView":false,"isOppo":false,"isVivo":false,"isSamsung":false,"isMobile":false},"href":"/m/news/2429127014"}