Cyberattacks are becoming so normal that a new record-breaking 40% of companies have experienced more than six attacks. Meanwhile, 85% of companies experienced at least one successful attack. This is according to new CyberEdge Group research surveying 1,200 security professionals across 17 countries.


Cyber threats are increasingly popping out of nooks and crannies because companies today have more blind spots, costing $4 million per data breach and even $5+ million when a remote worker is the root cause. Today, illuminating security obscurities is no longer optional. Here are three common blind spots and simple ways to flip on the light switch. 


Three Common Security Blind spots

Cybersecurity attacks can blindside business owners for many reasons, but we find the three most common are:


1. Invisibility 

 In short, IT complexities cause blind spots. Corporate networks are not single entities but patchworked systems that are complex to see and monitor. Remote work and the cloud have only made things worse. Research from analyst firm Nemertes shows that ¾ of traffic starts and/or stops outside the boundaries of the corporate network. Plus, multi-cloud environments make it difficult to control what’s happening. Additionally, supply chain vulnerabilities expand the surface of the network. The way data has become unleashed, there may never be a way to make all blind spots visible. 


2. Awareness

 Business leaders simply aren’t aware of how sophisticated, efficient, and easy it has become for modern-day attackers to infiltrate an environment, remain unnoticed, and wreak havoc from the inside out.  


The most widely adopted business applications and cloud-based services have become favorite targets for bad actors. It is easy for them to hide their presence and attack files, making detection nearly impossible. In some instances, detection evasion can be simply a matter of one click — to downgrade a license from a high level of security protection to an older one where hiding is easy. These cloud environments are accessible from anywhere in the world, and IT professionals are failing to secure the authentication mechanisms governing them.


3. Mindset 

Most business leaders don’t think their business is a target — particularly for those in “tame” industries like museums and schools, for example. Yet the education/research sector sustained the most attacks in 2021. Every organization has critical information they value and needs to protect, which explains why ransomware rates are up 62% year-over-year. And the cost of recovering from an attack often goes beyond paying the ransom since the operational costs required to “get back to normal” are typically the highest cost component of the breach price tag.


Security and ransomware protection isn’t just for healthcare and financial services companies. In fact, we need to dispel the myth that cyberattacks are targeted. Nothing could be further from the truth. You don’t need to become a target to become a victim. The attitude shift has begun, but we still have a long way to go.  


Flipping on the Lightswitch

When these are the trends, it’s no surprise that impact, believing a successful attack is likely. So how can we uncover, manage, and better protect the security vulnerabilities that lie beneath the growing hybrid surface?


Tackle Cloud Security 

Companies across every industry use cloud solutions, so every company needs to be concerned about cloud security. Cloud solutions raise security concerns because they fundamentally shift the roles and responsibilities of security between the client and the cloud provider. Solutions create a new shared security model, which becomes a gray area causing misunderstandings. If the client and provider don’t each do their part, the whole security model fails. That’s a vulnerability no company can afford — no matter what industry. 


Here are my best tips:

  • Seek out Shadow IT discovery solutions that help you prioritize the list of your unauthorized applications in terms of security risk. 
  • Only CASB technology has the power to simplify security for the hundreds and thousands of cloud applications your business has in use.
  • Back these technologies and programs with a security response team empowered to take swift action.


Sharpen Security at the Edge — Each Endpoint

End users and vulnerable endpoints are the root cause behind ransomware. When ransomware is up 150%, the countermeasure is endpoint detection and response systems. Endpoint Detection and Response (EDR) solutions can solve common everyday security vulnerabilities for companies of all sizes and across all industries. That helps explain why EDR is being recognized as the single most effective security spend available on the market today. Yet only 55% of companies currently have EDR in use.

  • Antivirus is not enough. Standard signature-based antivirus technologies have little to no chance of helping you fight against sophisticated ransomware threats. Ensure your EPP does not rely on attack signatures or unique indicators of compromise, all of which can change quickly or be previously unseen.
  • Leverage advanced analytics to identify potential threats quickly. Endpoint protection without machine learning and behavioral analytics is essentially useless.
  • Thinking about cyber insurance? Endpoint security is often a prerequisite — it will be required before you can be insured.  


Assume Bad Actors Are Already Inside

In 2021, exploited zero-day attacks more than doubled when compared to 2020. Zero-day vulnerabilities are those that are unknown and unpatched. When discovered, it often means that hackers have already exploited the opportunity — they’re already inside your systems. 

  • Proactive 24/7 security threat monitoring is the best protection, and the network is the key. All threats generate observable events inside the network. If you keep your eyes on the network, you’ll find their signature evidence like a trail of breadcrumbs.
  • Zero trust isn’t a cure-all. Yes, zero trust security architectures are today’s best strategies, but sometimes zero trust is not always possible for mobile phones and hardware built with uncontrolled components. Supply chain or hardware-based attacks will still prevail. So, never let up on your proactive security monitoring and rapid response. 
  • Don’t go at it alone. Security isn’t a do-it-yourself exercise, particularly when security talent is scarce. Lean on trusted partners to help you get the strategy, process, talent and technology right.


This article originally ran in Today’s Cybersecurity Leader, a monthly cybersecurity-focused eNewsletter for security end users, brought to you by Security magazine. Subscribe here.