Alert Logic Report Sheds Light on Evolving Attack Methods Against Small and Midsize Businesses
"Critical Watch Report: SMB Threatscape 2019" Finds 2/3 of Devices Run on Operating Systems that Expire on or Before 2020
HOUSTON, July 2, 2019 /PRNewswire/ -- Alert Logic, the SIEMless Threat Management™ company, today released the research, "Critical Watch Report: SMB Threatscape 2019." This report, specifically focused on challenges small and midsize businesses (SMBs) face, reveals a steady increase in attacks and changes in attack methods that target their weaknesses in encryption, workload configuration, limited visibility into vulnerabilities and outdated and unsupported operating systems. The research discovered 66% of SMB devices run Microsoft OS versions that have expired or will expire by January 2020, the majority of which are over 10 years old.
In support of the research, Alert Logic's Threat Intelligence team analyzed more than 1.3 petabytes of data, 10.2 trillion log messages, 2.8 billion intrusion detection events, and 8.2 million verified security incidents across Alert Logic's customer base of more than 4,000 organizations of all sizes, from SMBs to large enterprises. The teams also investigated emerging and evolving vulnerabilities and attack methods across the open internet. This research uncovered several patterns that specifically affect SMBs.
"The continued lack of skilled cybersecurity professionals affects organizations of all sizes, and small and midsize businesses are at greater disadvantage because they can't scale like large organizations can," said Onkar Birk, Senior Vice President of Product Strategy and Engineering, Alert Logic. "These organizations will greatly benefit from partnering with providers who can augment their limited teams with threat intelligence and experts to be more secure and compliant."
The report details nine top takeaways based on Alert Logic's analysis over a six-month period. Some of the key findings are as follows:
- 66% of SMB devices run Microsoft OS versions that are expired or will expire by January 2020. Shockingly, the majority of devices scanned in the research were running Windows versions more than 10 years old.
- 42% of SMB security issues are related to encryption. While automated patching has helped to reduce the frequency of vulnerabilities, configurations remain a major issue. The report identified just 13 encryption-related configuration issues accounted for 42% of all security issues found.
- 75% of unpatched vulnerabilities in the SMB space are more than one year old. Even though automated updates have improved software patching, organizations are still having difficulty keeping pace. Open source software further complicates the patch cycle, especially when it is embedded.
- More than 30% of SMB email servers operate on unsupported software. Modern businesses are fueled by email, and SMBs are no exception. Despite email being the life blood of most organizations, almost a third of the top email servers detected were running Exchange 2000, which has been unsupported for nearly 10 years.
"Alert Logic's research confirms that SMBs would benefit from more cost-conscious security options to take some of the responsibility off their shoulders," continued Birk. "That's our mission. We aim to bring the level of security traditionally afforded to the Fortune 500 to businesses of any size."
Download a free copy of the full research report, Critical Watch Report: SMB Threatscape 2019. Alert Logic will also hold a webinar on report findings and implications for SMBs.
Additional Resources
Blog
@AlertLogic on Twitter
LinkedIn
About Alert Logic
Alert Logic seamlessly connects an award-winning security platform, cutting-edge threat intelligence, and expert defenders – to provide the best security and peace of mind for businesses 24/7, regardless of their size or technology environment. More than 4,000 organizations rely on Alert Logic SIEMless Threat Management to ensure the right level of security and compliance coverage at a lower total cost than point solutions, SIEM tools, or traditional security outsourcing vendors. Founded in 2002, Alert Logic is headquartered in Houston, Texas, with offices in Austin, Seattle, Dallas, Cardiff, Belfast, London and Cali, Colombia. For more information, visit www.alertlogic.com.
For Alert Logic Inquiries:
Christine Blake
Public Relations
W2 Communications
703-877-8114
Christine@w2comm.com
Info - https://mma.prnewswire.com/media/941876/Alert_Logic_Critical_Watch_Report_Infographic.jpg
Logo - https://mma.prnewswire.com/media/882591/Alert_Logic_Logo.jpg
Share this article