Implementing fundamental security practices such as enabling MFA, applying Zero Trust principles, using XDR and antimalware, keeping systems up to date, and protecting data can prevent most cyberattacks.

Ransomware attacks have tripled since September 2022, and are often carried out by human operators who exploit remote access vulnerabilities.

Password spray and brute force attacks have increased by 300% and 250% respectively in 2023, as attackers take advantage of remote work and cloud services. Password less authentication and identity protection are essential to stop these attacks.

BEC phishing targets specific people in an organization, often pretending to be executives or trusted partners, and tries to trick them into sending money or information. BEC attacks have increased by 250% in 2023, and the average loss per incident was over $75,000. BEC attacks have increased by 250% in 2023, and the average loss per incident was over $75,000.

Nation-state actors are not only attacking governments and critical infrastructure, but also healthcare, education, media, and NGOs. Microsoft tracked 16 nation-state groups in 2023 and saw over 35,000 attacks from these groups.

Some nation-state actors are using both cyberattacks and influence operations to achieve their goals, such as interfering with elections, spreading false information, or undermining trust in institutions. Microsoft detected and disrupted several such campaigns in 2023, and shared threat intelligence with customers and partners.

Internet of Things (IoT) and Operational Technology (OT) devices are becoming more prevalent and connected, but also more vulnerable to cyberattacks. Microsoft observed a 35% increase in IoT/OT attacks in 2023 and identified several new malware families targeting these devices.

AI is transforming cybersecurity, but also enabling advanced forms of cyberattacks. Microsoft found several examples of AI-powered attacks in 2023, such as deepfake audio and video, generative adversarial networks, and machine learning poisoning.

Supply chain attacks are those that compromise a trusted third-party vendor or service provider and use their access or products to target their customers or partners. Microsoft witnessed several high-profile supply chain attacks in 2023, such as SolarWinds, Kaseya, and Codecov, which affected thousands of organizations worldwide.

We hope you enjoyed reading the insights shared above! For more insights like this, be sure to subscribe to our Email Insights or LinkedIn Newsletter.

If you are looking for Microsoft’s cybersecurity assistance or consultancy, we would be more than happy to assist you! Feel free to reach out to us via email (info@penthara.com) or schedule a free 30 min call at your convenience.