Key Cybersecurity Threats for 2024
The European Union Agency for Cybersecurity (ENISA) has identified availability, ransomware, and data attacks as the most pressing cybersecurity threats for 2024. This insight is drawn from an analysis of more than 11,000 cybersecurity incidents, emphasizing the ongoing challenges posed by a rapidly evolving digital landscape.
Understanding the Cyber Threat Landscape
In 2023 and 2024, cybersecurity attacks saw a significant increase, influenced by geopolitical tensions and the rise of hacktivism. Notably, Distributed-Denial-of-Service (DDoS) and ransomware attacks accounted for over half of the incidents reported. DDoS attacks disrupt services by overwhelming networks, while ransomware involves malicious software that encrypts data until a ransom is paid.
Sectoral Impact of Cyber Threats
The public administration sector was most affected, making up 19% of the targets, followed by transportation at 11%. This highlights that government services and infrastructure remain prime targets for cybercriminals.
Evolving Techniques and Threat Actors
Attackers are increasingly using techniques like Living Off The Land (LOTL), which involves using legitimate tools and services to carry out attacks unnoticed. For example, cyber attackers use trusted platforms like Slack and Telegram to disguise their malicious activities. Additionally, Business Email Compromise (BEC) incidents are on the rise, where attackers trick employees into transferring money or divulging confidential information.
Ransomware and Data Theft
Ransomware continues to be a significant threat, affecting sectors indiscriminately, including business services, manufacturing, and health. Data-related threats are particularly concerning for sectors handling personal information, such as public administration and finance.
AI and Information Manipulation
Artificial Intelligence (AI) is being explored by threat actors for information manipulation, though its use is still limited. This involves altering information to mislead or deceive the public, a tactic that has seen increased use during major events and elections.
Emerging Threats and Future Preparedness
The report stresses the importance of being prepared for anticipated and unforeseen cybersecurity challenges. Technological advancements, coupled with geopolitical influences, necessitate robust security strategies to protect against sophisticated cyber threats.
