Web malware (47 percent) and ransomware (42 percent) now top the list of security threats that organizations are most concerned about. Yet despite the growing risks, less than a third (27 percent) have advanced threat protection in place on every endpoint device that can access corporate applications and resources. This is according to new research, ‘The state of threat prevention: evasive threats take center stage’, published by Menlo Security, exploring what steps organizations are taking to secure themselves in the wake of a new class of cyber threats – known as Highly Evasive Adaptive Threats (HEAT).
As employees spend more time working in the browser and accessing cloud-based applications, the risk of HEAT attacks increases. Almost two-thirds of organizations have had a device compromised by a browser-based attack in the last 12 months. The report suggests that organizations are not being proactive enough in mitigating the risk of these threats, with 45 percent failing to add strength to their network security stack over the past year. There are also conflicting views on the most effective place to deploy security to prevent advanced threats, with 43 percent citing the network, and 37 percent the cloud.
Competing security priorities
According to the research among 500+ IT decision makers in the UK and US, hybrid/remote working (28 percent) is the biggest challenge organizations expect to face this year when it comes to protecting their corporate network from advanced threats. This is followed by budget restrictions (15 percent), the presence of unmanaged devices (14 percent), and out-dated security solutions (13 percent).
There are also a number of competing priorities for IT professionals when it comes to improving their security posture in 2022. Training staff tops the list (61 percent), followed by technology investment to protect the corporate network (60 percent), adapting to new ways of working (50 percent), and investing in skilled security members at 45 percent.
Additional research findings:
Although 55 percent of respondents have invested in their security stack over the past year and 27 percent have advanced threat protection in place, it is not having the desired effect as attacks are still successfully penetrating their defence / defense lines.
Half of respondents believe that firewalls are an effective way of mitigating HEAT attacks, and 31 percent favour VPNs.
Organizations believe that the threat of a cyber attack is a case of ‘when’ not ‘if’, regardless of size. Consequently, IT decision makers are most concerned about the reputational damage (62 percent) and financial loss (57 percent) that a security breach could have on their business.
What are HEAT attacks?
The Menlo Labs research team has been analysing Highly Evasive Adaptive Threats (HEAT), which bypass traditional security defences, including firewalls, Secure Web Gateways, sandbox analysis, URL Reputation, and phishing detection. The team observed a 224 percent increase in HEAT attacks in the second half of 2021.
Used to deliver malware or to compromise credentials, which in many cases leads to ransomware payloads, HEAT attacks include at least one of four evasion techniques:
- Evades Both Static and Dynamic Content Inspection
- Evades Malicious Link Analysis
- Evades Offline Categorisation and Threat Detection
- Evades HTTP Traffic Inspection.
