Daily Number Of Cyber Incidents As A Result Of Humans Increases 1.5 Percent

JAKARTA - Research based on incident analysis reported to Kaspersky Managed Detection and Response (MDR) customers revealed that the Security Operations Center (SOC) analyst found more than three incidents with high severity caused by human direct involvement every day in 2022.

The efficiency given by external specialists when dealing with cybersecurity solutions and specific knowledge requirements is the main reason for companies to outsource external experts by 2022.

To address the lack of expertise among IT Security professionals and provide them with insight into the current threat landscape, Kaspersky analyzes the incident of anonymous customers detected by its MDR service.

Kaspersky's annual Managed Detection and Response Analyst Report shows that high severity incidents take an average of 43.8 minutes to be detected by Kaspersky MDR.

Due to the increase in attacks driven by human factors, this processing time increased by about 6 percent compared to the previous year, as it took SOC analysts more time.

Regarding these types of incidents, Kaspersky revealed 30 percent of them were linked to APT, 26 percent were malware attacks, and more than 19 percent more were produced from 'ethical hacking' (petests, red/red teaming, or other types of cyber exercises carried out in the scope of customers, both for IT system security assessments and testing operational readiness of MDR services).

In addition, the proportion of incidents caused by general critical vulnerabilities and the detection of traces of previous attacks involving humans is about 9 percent. The remaining incidents result from successful use of social engineering techniques or related to insider threats.