Three-Quarters of CISOs Predict Another SolarWinds-Style Attack

Some 84% of worldwide businesses have endured a severe security incident about the earlier two several years and a greater part are expecting one more SolarWinds-model provide chain attack, according to a new Splunk report.

The IT details platform supplier interviewed 535 security leaders in nine major economies across various industries, to compile its latest report, The Condition of Security 2021.

✔ Approved From Our Partners

Protect and backup your data using AOMEI Backupper. AOMEI Backupper takes secure and encrypted backups from your Windows, hard drives or partitions. With AOMEI Backupper you will never be worried about loosing your data anymore.

Get AOMEI Backupper with 72% discount from an authorized distrinutor of AOMEI: SerialCart® (Limited Offer).

➤ Activate Your Coupon Code

Of all those that have been correctly attacked, email compromise (42%) was the most widespread incident, adopted by details breaches (39%), mobile malware (37%) and DDoS (36%).

Nevertheless, about a few-quarters (78%) expressed concern about extra complex supply chain attacks coming in the long term.

Cloud complexity is emerging as a significant threat to worldwide organizations, with three-quarters (75%) of respondents previously employing many companies. Above 50 % (53%) claimed attacks experienced elevated in this location in the course of the pandemic and 76% that remote personnel are more challenging to safe.

Approximately 90% presently run a substantial range of their enterprise-critical purposes in the public cloud.

Two of the key difficulties of securing cloud environments highlighted by respondents had been: sustaining and implementing dependable insurance policies (50%) and the complexity of making use of various security controls (42%).

Splunk urged businesses to modernize their Security Functions Centers (SOCs) with new SIEM platforms and far more automation, these types of as in consumer and entity habits analytics (UEBA) and security orchestration, automation and reaction (SOAR) tools.

It also advocated a zero rely on method, enhanced team coaching and improved perception into network behavior to place lateral motion a lot more efficiently.

“That modernized SOC will consist of an arsenal of the ideal equipment and customization out there. But that can make its own complications, in phrases of coaching and the capacity to recognize an incident with info from multiple sources,” the report concluded.

“In a elaborate, multi-cloud, multi-services setting, it is important to be ready to see throughout all that data, not just common security knowledge. This maximum-stage, conclusion-to-close point of view is essential not only to security and compliance endeavours, but to successful growth and functions as properly. A consolidated look at of the knowledge results in a single source of truth for security and IT groups.”