{"id":1589,"date":"2020-03-04T11:14:37","date_gmt":"2020-03-04T07:14:37","guid":{"rendered":"https:\/\/www.techxmedia.com\/?p=1589"},"modified":"2025-04-18T00:01:37","modified_gmt":"2025-04-17T20:01:37","slug":"surge-attacker-access-privileged-accounts-services","status":"publish","type":"post","link":"https:\/\/techxmedia.com\/en\/surge-attacker-access-privileged-accounts-services\/","title":{"rendered":"Surge in attacker access to privileged accounts and services"},"content":{"rendered":"\n<p><a href=\"http:\/\/www.vectra.ai\/\">Vectra AI<\/a> has announced that\nthere is a major security gap that is obvious, important and urgent: the\nability to know if privileged accounts and services are compromised. &nbsp;It is\ncontinuing proof that traditional access-based approaches that rely on one-time\nsecurity gating decisions or predefined lists of privileged identities continue\nto fail. <\/p>\n\n\n\n<p>Published in the <a href=\"https:\/\/www.vectra.ai\/download\/2020-rsa-edition-of-the-attacker-behavior-industry-report\">Vectra 2020 RSA Conference Edition of the\nAttacker Behavior Industry Report<\/a> and <a href=\"https:\/\/www.vectra.ai\/download\/2020-spotlight-report-on-privilege-access\">Spotlight\nReport on Privilege Access Analytics Report<\/a>, the findings provide a\nfirst-hand analysis of active and persistent attacker behaviors from more than five\nmillion workloads and devices from customer cloud, data center and enterprise\nenvironments.<\/p>\n\n\n\n<p><strong>Key findings from\nthe 2020 RSA Conference Edition of the\nAttacker Behavior Industry Report and Spotlight Report on Privilege Access\nAnalytics :<\/strong><\/p>\n\n\n\n<ul class=\"wp-block-list\"><li>Potentially malicious privilege access from an unknown host was the most\ncommon privileged access anomaly behavior observed, accounting for 74% of all privilege access\nanomaly behavior detections. These are similar to the\nbehaviors found in the Capital One breach. <\/li><li>Finance and insurance,\nhealthcare and education organizations exhibited the most privilege access\nanomaly behaviors. These three\nindustries together account for almost half (47%) of all privilege access\nanomaly behavior detections.<\/li><li>Across all\nindustries, 215 attacker behavior detections per 10,000 hosts were observed.\nThis is lower than the 282 attacker behaviors per 10,000 hosts experienced in\nthe first half of 2019.<\/li><li>Technology (138\ndetections per 10,000) and education organizations (102 detections per 10,000)\nremain the most common sectors to exhibit command &amp; control behaviors,\nnearly 3 times more than the average across other industries.<\/li><li>Small companies (0\nto 5,000 employees) are more at risk of lateral movement attacks. Small\ncompanies observed 112 lateral movement behaviors per 10,000 hosts, nearly\ntwice that of medium and larger sized companies.<\/li><\/ul>\n\n\n\n<p>Notably, the reports highlight the importance of privileged access as a key part of lateral movement in cyber-attacks. Adversaries leverage privileged accounts to gain unauthorized access to the most critical assets that an organization relies on. It underscores the importance of continuous monitoring of user accounts, services and hosts once they gain access to and operate on the network so that security teams have the right information to take quick action against the malicious use of privilege across cloud and hybrid environments.<\/p>\n\n\n\n<p>\u201cThe observations from this report reinforce the importance of visibility\ninto privileged access and other attacker behaviors,\u201d said Chris Morales, Head\nof Security Analytics at Vectra. \u201cCombining data sources in the cloud with\nnetwork data can stitch together a powerful combination of information that\nincreases the likelihood of detecting and prioritizing post-compromise\nactivities before a catastrophic breach occurs.\u201d<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Vectra AI has announced that there is a major security gap that is obvious, important and urgent: the ability to know if privileged accounts and services are compromised. <\/p>\n","protected":false},"author":8,"featured_media":1593,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"inline_featured_image":false,"_monsterinsights_skip_tracking":false,"_monsterinsights_sitenote_active":false,"_monsterinsights_sitenote_note":"","_monsterinsights_sitenote_category":0,"footnotes":""},"categories":[147,1595,9621],"tags":[631,686,518,527,703,704],"contributor":[],"class_list":["post-1589","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-artificial-intelligence","category-cybersecurity","category-emerging-technologies","tag-artificial_intelligence","tag-cyber_attack","tag-cyber_security","tag-cyber_threat","tag-vectra_","tag-vectra_ai"],"featured_image_src":"https:\/\/techxmedia.com\/en\/wp-content\/uploads\/2020\/03\/Chris-Morales-Head-of-Security-Analytics-Vectra-e1583305992793.jpg","author_info":{"display_name":"Rabab","author_link":"https:\/\/techxmedia.com\/en\/author\/rabab\/"},"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/techxmedia.com\/en\/wp-json\/wp\/v2\/posts\/1589","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/techxmedia.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/techxmedia.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/techxmedia.com\/en\/wp-json\/wp\/v2\/users\/8"}],"replies":[{"embeddable":true,"href":"https:\/\/techxmedia.com\/en\/wp-json\/wp\/v2\/comments?post=1589"}],"version-history":[{"count":0,"href":"https:\/\/techxmedia.com\/en\/wp-json\/wp\/v2\/posts\/1589\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/techxmedia.com\/en\/wp-json\/wp\/v2\/media\/1593"}],"wp:attachment":[{"href":"https:\/\/techxmedia.com\/en\/wp-json\/wp\/v2\/media?parent=1589"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/techxmedia.com\/en\/wp-json\/wp\/v2\/categories?post=1589"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/techxmedia.com\/en\/wp-json\/wp\/v2\/tags?post=1589"},{"taxonomy":"contributor","embeddable":true,"href":"https:\/\/techxmedia.com\/en\/wp-json\/wp\/v2\/contributor?post=1589"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}