Most ransomware attacks are opportunistic. Here’s how you can stop attackers

There is a glaring misconception at the heart of cybersecurity that cyber-attacks are targeted at specific organizations or sectors. But while certain sectors do receive more than their fair share of attacks, this isn’t due to deliberate targeting; like any business, it’s driven by money.

Threat groups are largely driven by financial gain, with actors looking to get the most ‘bang for their buck’. Targeting vulnerabilities that don’t just give them access to one organization, but multiple, to grow their potential revenue opportunities.

And at the moment, organizations are leaving far too many of these vulnerabilities open for exploitation.

The weak link

We’ve long known that attackers seek to do the most damage with the least effort. Take the now-infamous MOVEit breach as an example, where the identification and exploitation of a single vulnerability (in this case, a web-based SQL injection bug) impacted over 2,500 organizations globally.

Gaining access to...

Copyright of this story solely belongs to techradar.com. To see the full text click HERE