article thumbnail

2024 State of Cybersecurity: Reports of More Threats & Prioritization Issues

eSecurity Planet

CrowdStrike: Observes the top attack vector in 2023 and predicts 2024’s targets: Unmanaged network appliances (edge gateway, firewall, virtual private network/VPN) remain the most observed initial access vector exploited in 2023. 20% of employee time is spent on company networks.

article thumbnail

APT trends report Q1 2021

SecureList

Our latest reports focus on the changes the threat actor made to the September and November versions of its backdoor. The attackers used vulnerabilities in an SSL-VPN product to deploy a multi-layered loader we dubbed Ecipekac (aka DESLoader, SigLoader and HEAVYHAND). We attribute this activity to APT10 with high confidence.

Malware 142