🏅 Top Information Security Risks 2023

Bee Aware: A Year in Review and 2024 Top Risks - Yale Cybersecurity
 · 2023 Risk Review. Two major risks in 2023 included social engineering and accountability. Social Engineering. Social engineering manipulates people into sharing personal or confidential information. It’s a favorite tactic of cybercriminals that accounts for 98% of cyberattacks. Here at Yale, we mostly see these attacks in the form of phishing ...
Apr 6, 2025
Cyber security breaches survey 2025 - GOV.UK
 · The increase since 2023 was largely driven by higher inclusion of cyber security cover as part of a wider insurance policy amongst micro businesses (up from 29% in 2023 to 36% in 2025) and small ...
3 days ago
Preparing for the Next Big Cyber Threat: Expert Recommendations
 · Staying ahead of the game is a top concern for security teams as the cyber threat landscape continues to evolve rapidly. Every year seems to bring new technological advances, which also introduce new cybersecurity trends and significant risks. ... AI risk: Security concerns and legal battles. ... A recent example of a major third-party cyber ...
4 days ago
Global Risks Report 2023 - Mercer
 · The development of new technologies like quantum computing have shifted cyber risk exposures for businesses. Despite significant progress in cybersecurity protocols, businesses will need to remain vigilant and resilient against emergent threats. Guy Carpenter’s Erica Davis explores the cyber risk landscape for 2023.
6 days ago
2023 Global Future of Cyber Survey - Deloitte
 · Deloitte designed its 2023 Global Future of Cyber Survey based on the complexity of today’s business and technology landscape, focusing on the needs of enterprise leaders who may recognize the importance of cyber yet struggle to harness its value.
2023
2 days ago
Top 5 Security Misconfigurations Causing Data Breaches
 · The 2023 Thales Dara Threat Report found that 28% of respondents found IAM to be the most effective data security control preventing personal data compromise. 5. Keep All Software Patched and Updated ... Learn the top three security flaws increasing the risk of data breaches in the higher education sector. Edward Kost. January 8, 2025. Data ...
5
6 days ago
Cybersecurity Threats - CIS
 · CIS RAM Information security risk assessment method. ... In Q3 2024, the Top 10 Malware observed via the MS-ISAC’s monitoring services changed moderately from the previous quarter. The downloader, SocGholish, continued to lead as the top malware, making up 42% of the list. Following SocGholish were the downloaders LandUpdate808 and ClearFake.
5 days ago
Understanding the OWASP API Top Ten for 2023 (and How to Protect Your ...
 · The OWASP API Security Top 10 (2023) identifies the most critical risks that enterprises must mitigate. Key API Security Risks. Broken Object-Level Authorization – Unauthorized access to data due to improper access control. Broken Authentication – Weak authentication mechanisms allow attackers to steal credentials.
2 days ago

Top It Risks 2024

Over 40% of UK Businesses Faced Cybersecurity Breaches in 2024
 · It risks criminalizing the very professionals we rely on to detect, defend against and prevent these attacks.” Although the survey shows a stable level of organizations seeking external cybersecurity guidance – 42% of businesses and 37% of charities – large businesses reported a noticeable drop to 51%, down from 67% in 2024.
3 days ago
Top risks forecast - KPMG
 · Top risks forecast Bottom lines for business in 2024 and beyond. Share. In our latest CEO Outlook survey, most global CEOs named geopolitics and political uncertainty the top threats to organizational growth. For several decades, businesses reacted to geopolitical changes instead of actively anticipating them. As geopolitical turbulence grows ...
2 days ago
Global Risks Report 2024 - Mercer
 · The Global Risks Report is a comprehensive analysis of the most significant risks facing the world today. It provides insights into potential challenges and opportunities for leaders in various sectors. It is designed to help you understand the top risks for 2024 and beyond.
Apr 6, 2025
Trend Micro Cyber Risk Index 2024: CRI Decline, Proactive
 · Average Mean Time to Patch (MTTP): The top detected and unpatched CVEs from 2024 were “high severity” Elevation of Privilege (EoP) vulnerabilities published in the first half of the year. Europe (23.5 days) and Japan (27.5 days) recorded the fastest MTTP of any region, while non-profits (19 days) and the technology sector (22 days) were the fastest verticals.
6 days ago
In 2024, a significant number of UK businesses experienced ...
 · While breach statistics mark a slight decline from 2024, they continue to reflect the significant cybersecurity challenges facing UK organizations. Phishing remains the top threat, with 85% of affected businesses and 86% of charities identifying it as the cause of attacks. Email remains the primary entry point for these scams, often involving ...
3 days ago
Gartner Identifies Top 12 Early-Stage Technology Disruptions that Will ...
 · Gartner predicts that by 2030, at least half of enterprises will have adopted products or services to address disinformation security, up from less than 5% in 2024. “Disinformation attacks use external infrastructure like social media and originate from areas with limited legal oversight,” said Alfredo Ramirez IV , Senior Director Analyst at Gartner.
6 days ago
Red Hat Product Security Risk Report 2024
 · Review Red Hat's 2024 security achievements in this Product Security Risk Report. See how Red Hat addresses security vulnerabilities and wins.
2 days ago
The Top 10 SaaS Security Risks For Businesses In 2024
 · The Top 10 SaaS Security Risks Facing Organizations. Now that you understand the SaaS terrain, let’s dig into the top risks on the horizon through 2024 so you can prepare your defenses. 1. Sophisticated Emerging Threats. As cloud computing evolves, so do the tactics of cybercriminals and hackers. Emerging threats are a consequence of rapid ...
5 days ago

Top 10 It Risks 2023

Understanding the OWASP API Top Ten for 2023 (and How to Protect Your ...
 · The OWASP API Security Top 10 (2023) identifies the most critical risks that enterprises must mitigate. Key API Security Risks. Broken Object-Level Authorization – Unauthorized access to data due to improper access control. Broken Authentication – Weak authentication mechanisms allow attackers to steal credentials.
2 days ago
Global Risks Report 2023 - Mercer
 · The development of new technologies like quantum computing have shifted cyber risk exposures for businesses. Despite significant progress in cybersecurity protocols, businesses will need to remain vigilant and resilient against emergent threats. Guy Carpenter’s Erica Davis explores the cyber risk landscape for 2023.
6 days ago
2023 Global Future of Cyber Survey - Deloitte
 · Deloitte designed its 2023 Global Future of Cyber Survey based on the complexity of today’s business and technology landscape, focusing on the needs of enterprise leaders who may recognize the importance of cyber yet struggle to harness its value. ... US Cyber & Strategic Risk Offering Portfolio Leader [email protected] +1 713 982 4825. Let ...
2023
2 days ago
Cyber security breaches survey 2025 - GOV.UK
 · As outlined in Figure 3.3, there was an increase among large businesses saying they reviewed the risks posed by their immediate suppliers (55%) and wider supply chain (34%) in 2023, this fell back ...
3 days ago
Vulnerable and Outdated Components: An OWASP Top 10 Risk
 · Using vulnerable or outdated software components remains one of the most widespread cybersecurity risks in modern web application development. It’s a key category in the OWASP Top 10 (A06:2021), highlighting the dangers of relying on third-party components that contain known security vulnerabilities or are no longer supported. Without clear ...
3 days ago
Bee Aware: A Year in Review and 2024 Top Risks - Yale Cybersecurity
 · 2023 Risk Review. Two major risks in 2023 included social engineering and accountability. Social Engineering. Social engineering manipulates people into sharing personal or confidential information. It’s a favorite tactic of cybercriminals that accounts for 98% of cyberattacks. Here at Yale, we mostly see these attacks in the form of phishing ...
Apr 6, 2025
Top risks forecast - KPMG
 · Top risks forecast Bottom lines for business in 2024 and beyond. Share. In our latest CEO Outlook survey, most global CEOs named geopolitics and political uncertainty the top threats to organizational growth. For several decades, businesses reacted to geopolitical changes instead of actively anticipating them. As geopolitical turbulence grows ...
2 days ago
Forescout’s 2025 report reveals surge in device vulnerabilities across ...
 · In 2023, endpoints posed a greater risk than network infrastructure. However, this trend reversed in 2024—and continues in 2025—with network infrastructure now representing the greater threat. ... In 2024, the average risk for the top 10 countries was 6.53, whereas in 2025 it has risen to 9.1 – a 33% increase, highlighting a sharp ...
3 days ago

Top Security Threats 2023

Preparing for the Next Big Cyber Threat: Expert Recommendations
 · A recent example of a major third-party cyber incident is the 2023 MOVEit data breach. ... many businesses are still using outdated methods to manage vendor risk—inadvertently creating security gaps that threat actors could exploit. ... Phil’s top piece of advice for security leaders is simple but powerful: invest in your people. ...
4 days ago
Cybersecurity Threats - CIS
 · Cybersecurity professionals at CIS and the MS-ISAC analyze risks and alert members of current online security threats in a timely manner. ... In Q3 2024, the Top 10 Malware observed via the MS-ISAC’s monitoring services changed moderately from the previous quarter. The downloader, SocGholish, continued to lead as the top malware, making up 42 ...
5 days ago
2023 Global Future of Cyber Survey - Deloitte
 · Cyber has become foundational to business. Just as cyber threats shifted from an IT problem to a business problem, we also now see a shift in cyber strategies from IT to the business—ultimately to support strategic business objectives and growth. And the connection between cyber and value—impact—is coming into sharper focus.
2023
2 days ago
Top 5 Security Misconfigurations Causing Data Breaches
 · Top Security Misconfigurations Causing Data Breaches . ... The 2023 Thales Dara Threat Report found that 28% of respondents found IAM to be the most effective data security control preventing personal data ... One of the main ways that companies can protect themselves from cloud-related security threats is by implementing a Zero Trust security ...
5
6 days ago
Cyber Threats are Moving Fast. Is Your Organization Prepared?
 · What are the top threats right now? Here are the top five techniques attackers are using. 1. Phishing. It is still the most common way attackers get in. AI-powered phishing campaigns are now more targeted and harder to detect. What it leads to: Malware, ransomware, and stolen data. What helps: Email security, anti-phishing training, and strong ...
3 days ago
Threat Intelligence News and Articles - Infosecurity Magazine
 · Subscribe to our weekly newsletter for the latest in industry news, expert insights, dedicated information security content and online events. ... CISO Insights on 2023-2024 External Threats. 15 Feb 2024 Webinar. Countering Today’s Top Email Threats: A Team Effort. 29 Jun 2023 Webinar.
6 days ago
Threats News - Cybersecurity Dive
 · The latest threats news and analysis for leaders in cybersecurity. ... Check Point Software confirms security incident but pushes back on threat actor claims ... The company filed for bankruptcy after financial challenges over the past few years and a massive data breach in 2023.
5 days ago
Alerts and advisories - Cyber.gov.au
 · Fast Flux: A national security threat. This advisory is for network defenders and explains how Bulletproof Hosting Providers are using ‘fast flux’ to cycle quickly through bots and DNS records to bypass detection. It highlights the importance of using a reputable Protective DNS (PDNS) provider that detects and blocks fast flux.
4 days ago

Top Security Threats 2024

Identity-based attacks emerged as a leading cyber threat in 2024, says ...
 · By adopting these practices, organizations can build a more resilient security posture. Top threats observed in 2024 include: Identity-based attacks: These attacks accounted for 60% of all Cisco Talos Incident Response (IR) cases, with Active Directory identified as a prime target, representing 44% of such incidents. Additionally, 20% of ...
5 days ago
Top 10 Ransomware Groups of 2024: The Year’s Most Active Cyber Threats
 · Regardless of the exact peak month, the overall trend points to a persistent and evolving ransomware threat. Top 10 Ransomware Gangs of 2024: A Detailed Look. Below, we delve into the Top 10 most active ransomware groups of 2024, providing crucial details on their operations and impact. 1. RansomHub: The Speed Demons of Ransomware. Other names: N/A
10
5 days ago
Cybersecurity Threats - CIS
 · Cybersecurity professionals at CIS and the MS-ISAC analyze risks and alert members of current online security threats in a timely manner. ... In Q3 2024, the Top 10 Malware observed via the MS-ISAC’s monitoring services changed moderately from the previous quarter. The downloader, SocGholish, continued to lead as the top malware, making up 42 ...
5 days ago
Year in Review: Key vulnerabilities, tools, and shifts in attacker ...
 · From Talos' 2024 Year in Review, here are some findings from the top targeted network device vulnerabilities. We also explore how threat actors are moving away from time sensitive lures in their emails. And finally we reveal the tools that adversaries most heavily utilized last year.
5 days ago
11 Top Cybersecurity Trends For 2024 And Beyond Constellation
 · 11 Top Cybersecurity Trends For 2024 And Beyond Constellation Against a backdrop of escalating cyberattacks, discussions surrounding business continuity and resilience have gained prominence in boardrooms worldwide. the imperative to defend against sophisticated threats has prompted organizations to reassess their cybersecurity strategies and readiness.
11
4 days ago
Threat Intelligence News and Articles - Infosecurity Magazine
 · Keep up-to-date with the latest Threat Intelligence trends through news, opinion and educational content from Infosecurity Magazine. ... Subscribe to our weekly newsletter for the latest in industry news, expert insights, dedicated information security content and online events. ... Top 10 Cyber-Attacks of 2024. News Feature 2 Dec 2024. 5 ...
6 days ago
10 Critical Cybersecurity Challenges Businesses Face in 2024
 · This comprehensive guide will explore the 10 most pressing cybersecurity threats facing businesses in 2024 and provide actionable insights to strengthen your security posture. Let’s dive in and ensure your business stays ahead of cybercriminals! ... can make it challenging to maintain consistent security controls. Best Practices for Cloud ...
10
5 days ago
Cybersecurity Alerts & Advisories - CISA
 · Cybersecurity Advisory: In-depth reports covering a specific cybersecurity issue, often including threat actor tactics, techniques, and procedures; indicators of compromise; and mitigations. Alert: Concise summaries covering cybersecurity topics, such as mitigations that vendors have published for vulnerabilities in their products. ICS Advisory: Concise summaries covering industrial control ...
3 days ago

Top Cybersecurity Risks 2024

Over 40% of UK Businesses Faced Cybersecurity Breaches in 2024
 · It risks criminalizing the very professionals we rely on to detect, defend against and prevent these attacks.” Although the survey shows a stable level of organizations seeking external cybersecurity guidance – 42% of businesses and 37% of charities – large businesses reported a noticeable drop to 51%, down from 67% in 2024.
3 days ago
Cyber security breaches survey 2025 - GOV.UK
 · The Cyber Security Breaches Survey is a research study on UK cyber resilience. It is primarily used to inform government policy on cyber security, making the UK cyberspace a secure place to do ...
3 days ago
11 Top Cybersecurity Trends For 2024 And Beyond Constellation
 · 11 Top Cybersecurity Trends For 2024 And Beyond Constellation Here are the top cybersecurity frameworks to consider in 2024. each is designed to address different needs depending on your industry, risk level, and security requirements. the nist cybersecurity framework (csf) is one of the most widely adopted cybersecurity frameworks globally. Gartner, inc. today revealed its top eight ...
11
4 days ago
10 Critical Cybersecurity Challenges Businesses Face in 2024
 · Discover the top cybersecurity challenges threatening businesses. Learn how to safeguard your sensitive data and strengthen your security!
10
5 days ago
Top risks forecast - KPMG
 · In our latest CEO Outlook survey, most global CEOs named geopolitics and political uncertainty the top threats to organizational growth. For several decades, businesses reacted to geopolitical changes instead of actively anticipating them. As geopolitical turbulence grows and alliances shift, leaders need to anticipate and respond proactively, rather than reactively, to geopolitical events ...
3 days ago
Top 10 Ransomware Groups of 2024: The Year’s Most Active Cyber Threats
 · This in-depth analysis reveals the Top 10 Ransomware groups that dominated the cyberattack landscape in 2024, examining their methods, impact on businesses, and the implications for enterprise cybersecurity strategies.
10
5 days ago
In 2024, a significant number of UK businesses experienced ...
 · It risks criminalizing the very professionals we rely on to detect, defend against and prevent these attacks.” Although the survey shows a stable level of organizations seeking external cybersecurity guidance – 42% of businesses and 37% of charities – large businesses reported a noticeable drop to 51%, down from 67% in 2024.
3 days ago
Bee Aware: A Year in Review and 2024 Top Risks - Yale Cybersecurity
 · How does Yale stay ahead of cyber threats? Find out about the top risks we saw at Yale in 2023 and what the focus will be in 2024.
Apr 6, 2025

Top Cyber Security Risks 2023

Cybersecurity Threats - CIS
 · CIS RAM Information security risk assessment method. ... The CIS® and MS-ISAC® cybersecurity professionals analyze risks and alert members to current online security threats. ... continued to lead as the top malware, making up 42% of the list. Following SocGholish were the downloaders LandUpdate808 and ClearFake. This quarter marked the first ...
5 days ago
2023 Global Future of Cyber Survey - Deloitte
 · Cyber has become foundational to business. Just as cyber threats shifted from an IT problem to a business problem, we also now see a shift in cyber strategies from IT to the business—ultimately to support strategic business objectives and growth. And the connection between cyber and value—impact—is coming into sharper focus.
2023
2 days ago
Inside the UK Government's Cyber Security Breaches Survey
 · Aiming to equip government and industry leaders with the insight needed to build more cyber-resilient organisations across the UK, The Department for Science, Innovation and Technology has released The Cyber Security Breaches Survey 2025. The report offers a detailed overview of the cybersecurity landscape for UK businesses, detailing approaches to risk management, trends in cybersecurity ...
2 days ago
Preparing for the Next Big Cyber Threat: Expert Recommendations
 · Staying ahead of the game is a top concern for security teams as the cyber threat landscape continues to evolve rapidly. Every year seems to bring new technological advances, which also introduce new cybersecurity trends and significant risks. As organizations face these challenges, it’s essential to build proactive defenses, not reactive ...
4 days ago
Cybersecurity Alerts & Advisories - CISA
 · Cybersecurity Advisory: In-depth reports covering a specific cybersecurity issue, often including threat actor tactics, techniques, and procedures; indicators of compromise; and mitigations. Alert: Concise summaries covering cybersecurity topics, such as mitigations that vendors have published for vulnerabilities in their products. ICS Advisory: Concise summaries covering industrial control ...
3 days ago
NSA Cybersecurity Advisories & Guidance - National Security Agency ...
 · Browse or search our repository of advisories, info sheets, tech reports, and operational risk notices listed below. Some resources have access requirements. For a subset of cybersecurity products focused on telework and general network security for end users, view our Telework and Mobile Security Guidance page.
4 days ago
Bee Aware: A Year in Review and 2024 Top Risks - Yale Cybersecurity
 · How does Yale stay ahead of cyber threats? Find out about the top risks we saw at Yale in 2023 and what the focus will be in 2024. ... 2023 Risk Review. ... We also see that incentives are not always well aligned with properly prioritizing cybersecurity risk management work. A new security dashboard will allow leaders to understand their ...
Apr 6, 2025
What are the key proposed changes expected in the Cyber Security and ...
 · Proposals for tighter cybersecurity law have been confirmed by the UK Government in a policy statement.The Cyber Security and Resilience Bill (the Bill) is expected later this year, bringing modernised and strengthened UK cyber defences to improve the resilience of UK critical infrastructure, supply chains, public sector services and the wider economy.
2 days ago

Top Cyber Security Threats In 2023

2023 Global Future of Cyber Survey - Deloitte
 · Cyber reality Cyber has become foundational to business How are organizations navigating the future and building trust in a world of doubt? The answer is cyber. The future of cyber is coming into sharper focus as organizations look beyond the tech-centric and threat focus toward positive outcomes that result from integrating cyber across the business. Deloitte designed its 2023 Global Future ...
2023
2 days ago
Cyber security breaches survey 2025 - GOV.UK
 · For businesses, the prioritisation of cyber security in 2025 remained in line with the previous two years (2024 and 2023).
3 days ago
Preparing for the Next Big Cyber Threat: Expert Recommendations
 · Staying ahead of the game is a top concern for security teams as the cyber threat landscape continues to evolve rapidly. Every year seems to bring new technological advances, which also introduce new cybersecurity trends and significant risks. As organizations face these challenges, it’s essential to build proactive defenses, not reactive responses. The next big cyber threat is already here ...
4 days ago
Cybersecurity Alerts & Advisories - CISA
 · Cybersecurity Advisory: In-depth reports covering a specific cybersecurity issue, often including threat actor tactics, techniques, and procedures; indicators of compromise; and mitigations. Alert: Concise summaries covering cybersecurity topics, such as mitigations that vendors have published for vulnerabilities in their products.
3 days ago
Cybersecurity Threats - CIS
 · Cybersecurity professionals at CIS and the MS-ISAC analyze risks and alert members of current online security threats in a timely manner.
5 days ago
Bee Aware: A Year in Review and 2024 Top Risks - Yale Cybersecurity
 · How does Yale stay ahead of cyber threats? Find out about the top risks we saw at Yale in 2023 and what the focus will be in 2024.
Apr 6, 2025
UK cyber breach survey reveals boards deprioritising security
 · The 2023 reworking of the National Cyber Security Centre’s (NCSC) Cyber Essentials scheme, which aims to boost best practice among UK organisations in cybersecurity, may have helped. Uptake in the scheme since then has increased by a fifth, notes Joe Fielding, the managing director for the EMEA region at encrypted hardware manufacturer, Apricorn.
2 days ago
Infosecurity Magazine - Information Security & IT Security News and ...
 · AI is revolutionizing cybersecurity by both enabling hackers and empowering defenders. It enhances password protection through adaptive authentication, real-time threat detection, and behavioral biometrics, while also being exploited for sophisticated attacks like phishing, credential stuffing, and MFA bypass.
2 days ago

Top Information Security Risk 2023

Bee Aware: A Year in Review and 2024 Top Risks - Yale Cybersecurity
 · 2023 Risk Review. Two major risks in 2023 included social engineering and accountability. Social Engineering. Social engineering manipulates people into sharing personal or confidential information. It’s a favorite tactic of cybercriminals that accounts for 98% of cyberattacks. Here at Yale, we mostly see these attacks in the form of phishing ...
Apr 6, 2025
2023 Global Future of Cyber Survey - Deloitte
 · Deloitte designed its 2023 Global Future of Cyber Survey based on the complexity of today’s business and technology landscape, focusing on the needs of enterprise leaders who may recognize the importance of cyber yet struggle to harness its value.
2023
2 days ago
Infosecurity Magazine - Information Security & IT Security News and ...
 · Infosecurity Magazine is the award winning online magazine dedicated to the strategy, insight and technology of information security
5 days ago
Top 5 Security Misconfigurations Causing Data Breaches
 · The 2023 Thales Dara Threat Report found that 28% of respondents found IAM to be the most effective data security control preventing personal data compromise. 5. Keep All Software Patched and Updated ... Learn the top three security flaws increasing the risk of data breaches in the higher education sector. Edward Kost. January 8, 2025. Data ...
5
6 days ago
Security Megatrends: The 2023 Vision for the Security Industry
 · Leveraging insights from independent research, surveys, focus groups and top sessions at the Securing New Ground (SNG) conference, Security Megatrends™, an annual publication of the Security Industry Association (SIA), provides analysis on 10 top trends affecting security industry businesses and practitioners. Released in December 2022, the 2023 Security Megatrends report presents a forecast ...
5 days ago
Cybersecurity Threats - CIS
 · CIS RAM Information security risk assessment method. ... In Q3 2024, the Top 10 Malware observed via the MS-ISAC’s monitoring services changed moderately from the previous quarter. The downloader, SocGholish, continued to lead as the top malware, making up 42% of the list. Following SocGholish were the downloaders LandUpdate808 and ClearFake.
5 days ago
Global Risks Report 2023 - Mercer
 · The Global Risks Report 2023, published by the World Economic Forum in collaboration with Marsh McLennan, examines how widening geopolitical, economic, and societal fissures will trigger and exacerbate crises to come. ... Guy Carpenter’s Erica Davis explores the cyber risk landscape for 2023. Related insights and commentary Show more. Climate ...
6 days ago
Cyber security breaches survey 2025 - GOV.UK
 · The increase since 2023 was largely driven by higher inclusion of cyber security cover as part of a wider insurance policy amongst micro businesses (up from 29% in 2023 to 36% in 2025) and small ...
3 days ago