Throughout 2024, the most common type of security incident faced by companies was related to network protection, according to the latest Kaspersky IT Security Economics report.
Eighty seven per cent of businesses in the Middle East, Turkiye and Africa (META) region encountered adversaries attempting to infiltrate their network, while 56 per cent of companies reported incidents where bad actors executed malicious code within their network or attempted to communicate with compromised systems and take control.
Large enterprises experienced the highest rate of network security incidents despite having the most comprehensive protection measures in place.
Small and medium-sized companies also faced challenges with network security, with a significant percentage of incidents attributed to the deliberate or inadvertent actions of their own employees.
Network security threats are still the most concerning for businesses. They aim to exploit system vulnerabilities by penetrating company networks and inflicting damage to sensitive data, applications and workloads.
When a cybercriminal detects a weak spot in the system, they use it to gain unauthorised access and install malware, spyware, or other harmful software.
These weak spots are also a gateway for social engineering attacks, where individuals become an easier target. As more and more data is created, stored, and transmitted electronically, the risk of cyber attacks that could compromise sensitive information also increases.
One of the key factors contributing to the ongoing prevalence of network security issues is the growing complexity of cyber threats.
Cybercriminals are constantly developing new tactics and techniques to bypass traditional security measures, making it challenging for businesses to stay ahead of the curve.
From phishing scams and ransomware attacks to DDoS attacks and APTs, there are numerous ways in which cyber criminals can exploit vulnerabilities in a company’s network.
Furthermore, the rise of remote work and BYOD (bring your own device) policies has created additional challenges for network security. With employees accessing company data from various locations and devices, the potential for security breaches is heightened.
This, combined with the lack of proper security protocols and employee training, creates a vulnerable environment for cyber attacks to occur. Human factor is another big headache. It is another key factor contributing to security incidents.
Forty per cent of companies in the META region reported incidents where their own employees consciously or unconsciously helped adversaries by their action or inaction, with the majority of these occurrences in medium and small businesses, large organisations faced this problem much less often.
Mistakes or negligence by employees, whether due to a lack of security awareness or insufficient training, are leading causes of cyber breaches and data leaks in organisations.
Phishing attacks, where employees unwittingly click on malicious links or provide sensitive information to scammers, are a common threat.
Insider threats, where employees intentionally or unintentionally leak confidential data, can also pose a significant risk to a company’s security.
The consequences of employee negligence in cyber security can be severe as data breaches often result in financial loss, damage to a company’s reputation, and legal repercussions.
In extreme cases, companies may face fines and legal action for failing to adequately protect sensitive information.
