2024 Verizon DBIR: Key Thoughts
Enzoic, Thursday, May 16th, 2024
It's DBIR season once again, and, as usual, the Verizon team has produced a detailed and comprehensive (and humorous) exemplar of statistical cybersecurity analysis and reporting.
Last year, we noted that the data breach landscape was largely static from 2022 to 2023: threat actors were doing what worked and did not seem to find any reason to change that, especially in terms of phishing and credential stuffing. Unfortunately, this largely seems to be the case yet again. The MOVEit vulnerability and subsequent fallout plays a prominent role in the numbers and discussion this year, but the use of stolen credentials hasn't gone anywhere.