Rapid7 Has Good News for UK Security Posture

The UK’s biggest community organizations have reduced publicity to superior-risk ports and increased email security over the previous two years, despite the fact that some corporations are still inviting too much cyber risk, according to Swift7.

The security vendor appraised the FTSE 350 in 3 spots for its new report, to supply a snapshot of the UK’s attack floor as of March 2023.

The resulting findings, outlined in The FTSE 350 Cyber Attack Area report, display important improvements from Rapid7’s 2021 Market Cyber-Exposure Report – putting UK corporations on a par with their world friends investing on the ASX 200 and the Fortune 500.

For a single, a reasonably tiny quantity of UK organizations are exposing their group by way of significant-risk ports these types of as FTP, SSH, Telnet, RDP and SMB.

Just about two-thirds (37%) expose at most a single higher-risk port and around a fifth (21%) expose none at all. However, the monetary companies sector is a little something of an outlier, with an ordinary of just about 12 uncovered large-risk ports for every corporation.

“RDP and SSH are routinely exposed to the internet for distant administration, but the degree of publicity for an average enterprise listed here ought to motivate monetary services businesses to examine their external attack surface,” the report observed.

“Compared to 2021, nonetheless, the attack area of the FTSE 350 is tremendously enhanced. The trends specially in supplies, utilities, and wellbeing care are encouraging, where by each and every of individuals industries is exposing only SSH and RDP in very compact quantities.”

Go through a lot more on UK security risks: MI6 Manager: Digital Attack Floor Escalating “Exponentially”

Rapid7 also saw enhancements with deployment of DMARC to mitigate spoofing email attacks. The variety of FTSE 350 corporations with a legitimate plan has risen from 191 in 2021 to 247 these days, with the vast majority favoring a quarantine or reject plan.

Nonetheless, it warned that implementation of DNS Security extensions (DNSSEC) is still lousy, even though in line with worldwide peers. Just 4% of FTSE 350 companies are encouraging to lower their publicity to DNS attacks in this way.

Lastly, the report uncovered that the wide majority of IIS (80%) and Apache (89%) web servers have been running supported variations, while the figure fell to 30% for the fewer well-known Nginx servers.

When the success paint a beneficial picture of UK PLC’s attack surface, continued caution is needed, Speedy7 stated.

“Remember that security is a transferring goal – even though numerous of these corporations have their risk beneath handle currently, a new risk or even the initiation of a new information and facts technology approach tomorrow can entirely transform the landscape of a enterprise,” the report concluded.

“These issues will have to be tracked on an ongoing basis.”

Some parts of this write-up are sourced from:
www.infosecurity-journal.com