What are the most common strains of ransomware over the last few years? Which strains are demanding (and receiving) the highest ransoms? How do the most “successful” ransomware groups infiltrate their victims? What techniques do they use to spread around the network? How (and how often) is data exfiltrated in addition to being encrypted? And…
We’re thrilled to partner with Arete in this first major installment of new research focused on ransomware trends, and the financial exposure faced by past and future victims: Mitigating Ransomware’s Impact. This portion of the data contains nearly 1,300 completed ransomware engagements, including demands and payments totaling $797.7M and $218.4M, respectively. We explore specifics on…
Hey, you got multi-party incidents in my extreme events! You got extreme events in my multi-party incidents! Here at Cyentia, we love cooking up analysis of cyber incidents in the service of better risk decisions. We’ve explored multi-party incidents (Ripples Across the Risk Surface) and extreme events (IRIS Xtreme) before. It’s only natural to wonder…
Study finds median catastrophic cyber losses of $47M. One in five extreme loss events (43% of all monetary losses) are attributable to state-affiliated actors. The Cyentia Institute, a cyber security research and data science firm, is pleased to announce the IRIS 20/20 Xtreme. Early in 2020, the Cyentia Institute published the Information Risk Insights Study…
Study finds 1 in 4 Fortune 1000 firms will have a cyber loss event in the next year. SMBs typically lose 25% of annual revenues after a breach. The Cyentia Institute, a cyber security research and data science firm, is pleased to announce the 2020 Information Risk Insights Study. The “IRIS 20/20” clears the fog…
In collaboration with Siemplify, the Cyentia Institute recently released the Road to Security Operations Maturity study. It’s been a couple of years since we visited the topic of SecOps, so it was fun to get back into it during this project. As the name implies, the focus of this study was understanding where SecOps programs…
An Inside Perspective on Security Operations We are thrilled to announce the culmination of a project we’ve been working on for some time. The Voice of the Analyst Study released today and we’d like to share a few findings with the hope of stoking your interest enough to read the full report. First off, our thanks…
Mining for Insight in a decade’s worth of RSA Conference Abstracts Imagine for a moment that you had access to 15,000 Call-for-Paper (CFP) abstracts from ten years of the largest cybersecurity conference in the world — what would you want to know? Well, that’s exactly the position we found ourselves in when the RSA Conference…