Cybersecurity trends to watch in 2022

Summary

This blog post, "Cybersecurity trends to watch in 2022", is a blueAPACHE article from 2022 covering security. There are many lessons we can learn from the cybersecurity statistics, data, and trends we saw in 2021. In this blog, we’ll take a look at the current state of play with cybersecurity as we move forward into 2022. It is written for readers evaluating emPOWER Security, Managed Detection and Response. The underlying security practice it describes, reducing attack surface and improving detection and response, is not tied to a specific product version and remains relevant to any organisation managing cyber risk today.

Key facts

Article

There are many lessons we can learn from the cybersecurity statistics, data, and trends we saw in 2021. In this blog, we’ll take a look at the current state of play with cybersecurity as we move forward into 2022. The key trends we observed were the increasing cost of cybercrime, the most common exploits and loopholes, a growing awareness about cybersecurity, and some exciting advancements in cybersecurity tech.

Trend 1: The total cost of cybercrime is climbing faster than predicted

Cybercrime is getting expensive. In 2021, it was estimated to cost the world economy around 1 trillion (or over 1% of the global GDP), which is 50% higher than experts predicted in 2018. The Australian Institute of Criminology estimates that the total economic impact of Cybercrime to Australia was $3.5 billion. In a 2021 survey by Cisco, 65% of Australian small and mid-sized businesses had suffered a cyber incident in the previous 12 months, and the average cost of the attack was over $645,000 for two-thirds of impacted businesses. Although the average cost of a data breach has climbed, the data is not consistent across countries, industries or even organisations. One thing that is clear, the organisations that were prepared, having cybersecurity plans and trained incident response teams, were better positioned to mitigate financial loss and recover more quickly.

Trend 2: The most common loopholes and vulnerabilities in 2021

Some of the most notorious and large-scale data breaches from past years were also among the most common kinds of attacks. Through 2021, they tended to fall into the following three categories: Malware
Any kind of malicious software designed to damage computer systems is considered malware. Malware is an umbrella term that includes trojans, viruses, worms, ransomware, spyware, botnets, and adware. Malware drove the greatest damage and costs for organisations. Ransomware
A specialised form of malware, ransomware encrypts data in infected systems and often displays a message that instructs the recipient to pay a specific amount to restore the files. Ransomware can be downloaded when a user opens a malicious email attachment or file. Some highly sophisticated ransomware are self-propagating or even target dedicated data backups making it even more tricky to contain and remediate. A report from IDC found that Australian organisations were more likely to pay out in the event of a ransomware attack, making Australia an attractive target. Ransomware attacks increased by 60% in 2021 compared to the previous year, and the average ransom paid was $1.85 million. Phishing
More than a third of cyber attacks on companies involve phishing. To complicate this further, around 38% of end-users will fail phishing tests if they receive no cybersecurity awareness training.

Trend 3: Increased awareness and preparedness

While so many statistics and trends around cybersecurity can seem alarming, such as the increasing numbers of attacks and higher costs we’ve touched on already, there are some very encouraging trends taking shape. Despite the abysmal stats regarding security vulnerabilities, cyberattack preparedness — or the lack thereof — and the questionable effectiveness of implemented strategies, there are some positive trends on the horizon. In a recent survey from Cisco, 89% of company executives place cybersecurity as a high priority. This is a positive trend because organisations that are well prepared for a cybersecurity incident are proven to recover better, faster, and with less financial loss.

Trend 4: Advances in security technology

Also in the good news category, advances in security technology, like artificial intelligence, improvements in Security Information and Event Management (SIEM), and network traffic analysis tools are helping organisations better protect themselves while they reduce administrative burdens. By 2023, Gartner predicts 40% of privacy compliance technology will rely on artificial intelligence to boost data privacy and security and reduce administrative burdens.
With the rise in cybercrime and the high cost of a data breach, many organisations choose a cybersecurity partner to help them ensure they have a solid cybersecurity plan and security processes in place. If your organisation could use support with cybersecurity, blueAPACHE can help you assess where you are now and help you reach your security goals. To find out more, please contact us here

Related

• emPOWER Security
• emPOWER Security (pillar hub)
• Managed Detection and Response
• Human Risk Management
• blueAPACHE Cloud (case study)

Frequently asked questions

What did the Australian Institute of Criminology estimate the total economic impact of cybercrime to Australia to be?

$3.5 billion, according to the Australian Institute of Criminology figure cited in the article, sourced from apo.org.au.

What percentage of Australian small and mid-sized businesses suffered a cyber incident in the 2021 Cisco survey cited?

65% of Australian small and mid-sized businesses had suffered a cyber incident in the previous 12 months, with the average cost of the attack over $645,000 for two-thirds of impacted businesses, per the 2021 Cisco survey.

How much did ransomware attacks increase in 2021 according to the IDC report cited?

Ransomware attacks increased by 60% in 2021 compared to the previous year, and the average ransom paid was $1.85 million, according to the IDC report and HPE figure the article cites.

What proportion of cyber attacks on companies involve phishing, per this article?

More than a third of cyber attacks on companies involve phishing, and around 38% of end-users will fail phishing tests if they receive no cybersecurity awareness training.

What percentage of company executives place cybersecurity as a high priority, according to the Cisco survey cited?

89% of company executives, per a recent Cisco survey referenced in the article as a positive trend linked to better incident recovery.

What does Gartner predict about privacy compliance technology by 2023, according to this article?

Gartner predicts 40% of privacy compliance technology will rely on artificial intelligence by 2023 to boost data privacy and security while reducing administrative burdens.

What were the four cybersecurity trends this 2022 article identified from 2021 data?

The increasing cost of cybercrime, the most common exploits and loopholes (malware, ransomware, phishing), growing awareness and preparedness among executives, and advances in security technology such as AI and SIEM.

Is this post still current?

Published in 2022 and covering 2021 data, the specific dollar and percentage figures (the $3.5 billion Australian cybercrime estimate, the 65% incident rate, the $1.85 million average ransom) are that year's reported numbers. A reader wanting current cybercrime cost figures should check the cited sources' latest editions or blueAPACHE's current security service pages rather than relying on this post.

Source

• origin post (2022)

Knowledge Base