44% of cyber attacks go unlogged by organizations, exposing major gaps

TLDR:

Key points from the article:

• Organizations fail to log 44% of cyber attacks
• 40% of tested environments allowed attack paths to domain admin access

In a worldwide analysis of more than 136 million cyber attacks, the Picus Security Validation Platform found that organizations are not adequately logging cyber attacks, with 56% going unlogged and only 12% triggering an alert. These gaps in threat exposure management leave organizations vulnerable to major cyber incidents. The report emphasizes the importance of adopting an “assume breach” mindset and enhancing alert mechanisms to quickly identify and respond to potential threats.

One concerning finding is that 40% of environments have weaknesses that allow attackers to achieve domain admin privileges, leading to potential data exfiltration, malware deployment, and business disruption. macOS endpoints are highlighted as being more vulnerable, with only 23% of attacks prevented compared to 62% and 65% for Windows and Linux systems, respectively.

It is crucial for organizations to proactively address endpoint security gaps, improve detection engineering, and regularly evaluate logging and alerting systems to strengthen their security posture. By prioritizing threat exposure management and assuming a breach may occur, organizations can better protect their networks from cyber attacks.