A recently published report sheds light on some significant cybersecurity errors made by businesses and provides guidance on how to address these threats. The research, conducted by Mandiant for Google Cloud, reveals that weak passwords or the absence of passwords accounted for over half (54.8%) of all cloud compromise incidents in the first quarter of 2023. Misconfiguration followed closely behind at 19%, with API exposure at 11.9%.
The report emphasizes the importance of addressing compromised credentials, as leaked passwords represented an additional 7.1% of the compromise factors. Google Cloud encourages businesses to prioritize implementing robust identity management protocols at the organizational level.
Continued Mistakes in Cybersecurity by Businesses
Additionally, the report highlights the threat posed by malicious Android apps targeting employees’ credentials. If businesses fail to implement protective measures, employees using business phones may unknowingly download these apps. Google points out the deceptive technique where threat actors create seemingly legitimate apps that pass Play Store approval before incorporating malicious payloads.
Companies can take a simple approach to prevent this by creating application allowlists for their fleet of smartphones and tablets.
Although fewer in number, domain and IP compromises were prevalent during the first quarter of 2023. Remedies for these incidents include implementing adequate endpoint protection and conducting regular scanning and examination.
The report also notes a specific threat to the telecommunications industry, with T-Mobile, AT&T, and Dish all experiencing breaches in the United States alone during the first half of 2023. Google Cloud attributes these breaches to threats from both nation-states and other cybercriminals, including cyber attacks, DDoS attacks, and ransomware incidents.
As businesses increasingly transition to the cloud, it becomes evident that a heightened focus on cybersecurity is essential to safeguard sensitive information in the face of rising threats.
Denial of responsibility! SamacharCentrl is an automatic aggregator of Global media. In each content, the hyperlink to the primary source is specified. All trademarks belong to their rightful owners, and all materials to their authors. For any complaint, please reach us at – [email protected]. We will take necessary action within 24 hours.
Deepak Sen is a tech enthusiast who covers the latest technological innovations, from AI to consumer gadgets. His articles provide readers with a glimpse into the ever-evolving world of technology.
