{"id":4497,"date":"2023-05-10T14:47:09","date_gmt":"2023-05-10T18:47:09","guid":{"rendered":"https:\/\/solutionsreview.com\/security-information-event-management\/?p=4497"},"modified":"2023-05-10T14:49:43","modified_gmt":"2023-05-10T18:49:43","slug":"facts-about-the-future-of-cybersecurity","status":"publish","type":"post","link":"https:\/\/solutionsreview.com\/security-information-event-management\/facts-about-the-future-of-cybersecurity\/","title":{"rendered":"5 Facts About the Future of Cybersecurity"},"content":{"rendered":"

\"future<\/p>\n

Solutions Review\u2019s Expert Insights Series is a collection of contributed articles written by industry experts in enterprise software categories. Stephen Moore and Tyler Farrar of Exabeam<\/a> team up to beam up five facts about the future of cybersecurity.<\/b><\/em><\/p>\n

\"ExpertToday\u2019s attackers have become increasingly elusive by generally just using stolen credentials or looking for misconfigured systems. With the evolving nature of the cyber landscape, they are taking advantage of the current geopolitical climate to exploit new areas of business operations. Plus, as organizations are facing uncertain macroeconomic times, security risks are becoming even more challenging to detect, escalate, and manage with additional scrutiny on budgets.<\/p>\n

Using our combined military, SOC, and internal experience, we have compiled our top five insights on how organizations can keep an eye on the most prevalent threats– and build out more robust security architectures to defend against them.<\/p>\n

Looking to secure the future of cybersecurity? Check out our FREE SIEM Solutions Buyer’s Guide!<\/strong><\/a><\/p>\n

<\/div><\/p>\n

5 Facts About the Future of Cybersecurity<\/h2>\n
\n

Credential-Based Attacks and Evolving Threats<\/strong><\/h3>\n

The first critical trend to watch is the increased use of credentials in cyber-attacks for both initial and persistent access. Currently, nearly half of all attacks can be traced back to stolen credentials, according to Verizon. In our own recent SIEM market research, we found that 90 percent of attacks are now caused by compromised credentials at some level. This number increases for initial access and remains higher for persistence. Adversaries are experiencing continued success without using malware to gain access and sign in. From there, they can use internal credentials and tools against the defender.<\/p>\n

We\u2019ve seen the classic Cat and Mouse Game before: as credential-based attacks evolve, so must cyber defenses. Threat actors will continue to leverage tried and true methods like social engineering, initial access brokers, and information stealer tools to carry out their objectives. While multi-factor authentication often stands in the way of allowing the account to be fully compromised with stolen credentials, it can still often be bypassed, exploited, or operationally \u2018tricked\u2019 into working for the adversary. We can expect threat actors to implement new techniques to bypass this particular layer of defense– ultimately leading to an expansion of passwordless authentication solutions to combat the attackers.<\/p>\n

Additionally, a broader set of threat actors will join in to conduct cyber operations in 2023 and beyond. The new threat actor landscape will contain malicious actors who have increased financial motivation, government mandates to justify their cause, and not to mention bragging rights that increasingly attract a younger group of threat actors. As the threat landscape becomes more robust, it becomes increasingly imperative for organizations to not only build guardrails \u2013 but also prioritize detection when prevention inevitably fails.<\/p>\n

Zero Trust Will Remain Prevalent but Is Not a Single Solution<\/strong><\/h3>\n

Zero trust has become a highly regarded framework for securing business infrastructure and data for today\u2019s modern digital transformation. It addresses the modern-day challenges of today\u2019s threat landscape; however, it cannot be used as a single solution in rectifying ongoing security threats.<\/p>\n

Organizations must remember that zero trust is not a \u2018single solution,\u2019 but rather a framework and architectural principle used to secure data in a modern digital enterprise. Zero trust is also not overhyped, despite some opinions to the contrary. It has become a critical step towards mitigating cyber risk, preventing and even detecting malicious behavior (as the highest level of maturity for zero trust is analytics, according to CISA recommendations), and responding to security incidents. By requiring users and devices to be authenticated, authorized, and continuously monitored for a \u2018trusted\u2019 security posture before access is granted, zero trust can contain threats and limit business impacts when a breach does occur.<\/p>\n

Geopolitical Impact on the Future of Cybersecurity<\/strong><\/h3>\n

So long as world powers are in conflict, nation-state actors will continue cyber operations; whether these attacks increase, decrease, or stay the same ultimately depends upon the strategic objectives of each campaign. Based on the current geopolitical climate, organizations should expect an uptick in individual businesses and major players falling victim to nation-state attacks.<\/p>\n

For example, Russia\u2019s failure in Ukraine exposed its weaknesses to the world, but its attacks are likely to continue against the nation, including operational disruption, cyber espionage, and disinformation campaigns. It would be unsurprising for the attacks to expand beyond Ukraine, too, as Russia’s leader attempts to prove Russia is not weak. Likewise, cyber espionage is a key tactic in China\u2019s strategy for global influence and territorial supremacy, and we can expect these operations to increase, particularly across private sector companies. Additionally, as information and attack techniques are shared, we will see the lines blur between espionage and criminal activity. Loyalists to certain nations will continue cooperating with these international hacking efforts.<\/p>\n

State policies will continue to directly influence cyber-criminal and hacktivist communities to obfuscate sources and methods, increasingly leading nation-states, cyber-criminals, and hacktivists to overlap. As a result, we’ll see more governments attempting to create publicly known offensive capabilities to tear down criminal groups physically and technically. These takedowns of criminal networks take great diplomacy with speed and patience and active coordination of local and federal law enforcement. Ultimately, cybersecurity teams would be wise to remain flexible with respect to threat actor attribution.<\/p>\n

The Economic Downturn and Security Spending<\/strong><\/h3>\n

The economic downturn, and in particular inflation, has – and will continue to have– a significant impact on security spending, likely forcing reductions and leveling impacts to organizations and to threat actor behavior. The key to defense for these organizations is doubling down on cyber talent and security tools. In order to manage today\u2019s high operational costs and complex integrations, security organizations will need to consolidate legacy technology platforms, control cloud spending, and eliminate redundant tooling.<\/p>\n

Software Supply Chain Will Be Number One<\/strong><\/h3>\n

During the past year, organizations witnessed several high-profile breaches, where organizations suffered severe brand damage. This resulted in a shift from data recovery to reputation management when faced with a ransom. Organizations should expect to see threat actors shift their strategies to exploit this fear through extortion vs. ransomware in the year ahead.<\/p>\n

Further, threat actors will continue to take advantage of weaknesses in the software supply chain, which will become the number one threat vector in 2023. Organizations should create a vendor risk management plan, thoroughly vet third parties, and require accountability, to remain vigilant and align with cybersecurity best practices. Ongoing review and a joint incident response agreement to include information access during major incidents and\/or breaches are important components here. These plans are critical, too, as cyber insurance claims have exploded. We can expect to see insurance companies lowering their risk appetite and reducing or completely dropping client coverage in 2023. If your organization is in the market for a policy, expect to pay a hefty premium, or face a rigorous review of the organization\u2019s security posture, as insurance companies increase their due diligence to avoid liability.<\/p>\n

\n

Final Thoughts on the Future of Cybersecurity<\/strong><\/h3>\n

While we can\u2019t fully predict the future, we hope these initial insights will help organizations, including government agencies and enterprises, to defend themselves against a sophisticated new wave of bad actors, attack methods, and extortion attempts over the next 12 months and beyond.<\/p>\n


Widget not in any sidebars
<\/p>\n","protected":false},"excerpt":{"rendered":"

Solutions Review\u2019s Expert Insights Series is a collection of contributed articles written by industry experts in enterprise software categories. Stephen Moore and Tyler Farrar of Exabeam team up to beam up five facts about the future of cybersecurity. Today\u2019s attackers have become increasingly elusive by generally just using stolen credentials or looking for misconfigured systems. […]<\/p>\n","protected":false},"author":655,"featured_media":4498,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"inline_featured_image":false,"footnotes":""},"categories":[551,1],"tags":[],"acf":[],"yoast_head":"\n5 Facts About the Future of Cybersecurity<\/title>\n<meta name=\"description\" content=\"Stephen Moore and Tyler Farrar of Exabeam team up to beam up five facts about the future of cybersecurity.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/solutionsreview.com\/security-information-event-management\/facts-about-the-future-of-cybersecurity\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"5 Facts About the Future of Cybersecurity\" \/>\n<meta property=\"og:description\" content=\"Stephen Moore and Tyler Farrar of Exabeam team up to beam up five facts about the future of cybersecurity.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/solutionsreview.com\/security-information-event-management\/facts-about-the-future-of-cybersecurity\/\" \/>\n<meta property=\"og:site_name\" content=\"Best Information Security SIEM Tools, Software, Solutions & Vendors\" \/>\n<meta property=\"article:published_time\" content=\"2023-05-10T18:47:09+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2023-05-10T18:49:43+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/solutionsreview.com\/security-information-event-management\/files\/2023\/05\/Facts-About-the-Future-of-Cybersecurity.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"800\" \/>\n\t<meta property=\"og:image:height\" content=\"400\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Stephen Moore and Tyler Farrar\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Stephen Moore and Tyler Farrar\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"6 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/facts-about-the-future-of-cybersecurity\/\",\"url\":\"https:\/\/solutionsreview.com\/security-information-event-management\/facts-about-the-future-of-cybersecurity\/\",\"name\":\"5 Facts About the Future of Cybersecurity\",\"isPartOf\":{\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/facts-about-the-future-of-cybersecurity\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/facts-about-the-future-of-cybersecurity\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/solutionsreview.com\/security-information-event-management\/files\/2023\/05\/Facts-About-the-Future-of-Cybersecurity.jpg\",\"datePublished\":\"2023-05-10T18:47:09+00:00\",\"dateModified\":\"2023-05-10T18:49:43+00:00\",\"author\":{\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/#\/schema\/person\/6cb37eea5f1d0a6b86982aacbb615f85\"},\"description\":\"Stephen Moore and Tyler Farrar of Exabeam team up to beam up five facts about the future of cybersecurity.\",\"breadcrumb\":{\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/facts-about-the-future-of-cybersecurity\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/solutionsreview.com\/security-information-event-management\/facts-about-the-future-of-cybersecurity\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/facts-about-the-future-of-cybersecurity\/#primaryimage\",\"url\":\"https:\/\/solutionsreview.com\/security-information-event-management\/files\/2023\/05\/Facts-About-the-Future-of-Cybersecurity.jpg\",\"contentUrl\":\"https:\/\/solutionsreview.com\/security-information-event-management\/files\/2023\/05\/Facts-About-the-Future-of-Cybersecurity.jpg\",\"width\":800,\"height\":400,\"caption\":\"future of cybersecurity\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/facts-about-the-future-of-cybersecurity\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/solutionsreview.com\/security-information-event-management\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"5 Facts About the Future of Cybersecurity\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/#website\",\"url\":\"https:\/\/solutionsreview.com\/security-information-event-management\/\",\"name\":\"Best Information Security SIEM Tools, Software, Solutions & Vendors\",\"description\":\"Buyer's Guide and Best Practices\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/solutionsreview.com\/security-information-event-management\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/#\/schema\/person\/6cb37eea5f1d0a6b86982aacbb615f85\",\"name\":\"Stephen Moore and Tyler Farrar\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/2ad0f6c7455ead7d6c9b971280935b7e?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/2ad0f6c7455ead7d6c9b971280935b7e?s=96&d=mm&r=g\",\"caption\":\"Stephen Moore and Tyler Farrar\"},\"description\":\"Stephen Moore has been vice president and chief security strategist of Exabeam, Inc. since August 2017. Moore has more than 15 years of experience in information security, intrusion analysis, threat intelligence, security architecture, and web infrastructure design. Prior to joining Exabeam, he spent more than seven years at Anthem, in a variety of cybersecurity practitioner and leadership roles. He has deep experience working with legal, privacy, and audit staff to improve cybersecurity and demonstrate greater organizational relevance. Tyler Farrar is the Chief Information Security Officer (CISO) at Exabeam. He graduated from the United States Naval Academy in 2012 and received his Bachelor of Science in Aerospace Engineering. While in the Navy, Farrar served as a Naval Cryptologic Warfare Officer. Farrar continued his education at the Robert H. Smith School of Business, where he earned a Master of Business Administration in Accounting and Finance. Before Exabeam, Farrar was the Director of Cyber Security & Governance (CISO) at Maxar Technologies.\",\"url\":\"https:\/\/solutionsreview.com\/security-information-event-management\/author\/stephentyler\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"5 Facts About the Future of Cybersecurity","description":"Stephen Moore and Tyler Farrar of Exabeam team up to beam up five facts about the future of cybersecurity.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/solutionsreview.com\/security-information-event-management\/facts-about-the-future-of-cybersecurity\/","og_locale":"en_US","og_type":"article","og_title":"5 Facts About the Future of Cybersecurity","og_description":"Stephen Moore and Tyler Farrar of Exabeam team up to beam up five facts about the future of cybersecurity.","og_url":"https:\/\/solutionsreview.com\/security-information-event-management\/facts-about-the-future-of-cybersecurity\/","og_site_name":"Best Information Security SIEM Tools, Software, Solutions & Vendors","article_published_time":"2023-05-10T18:47:09+00:00","article_modified_time":"2023-05-10T18:49:43+00:00","og_image":[{"width":800,"height":400,"url":"https:\/\/solutionsreview.com\/security-information-event-management\/files\/2023\/05\/Facts-About-the-Future-of-Cybersecurity.jpg","type":"image\/jpeg"}],"author":"Stephen Moore and Tyler Farrar","twitter_misc":{"Written by":"Stephen Moore and Tyler Farrar","Est. reading time":"6 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/solutionsreview.com\/security-information-event-management\/facts-about-the-future-of-cybersecurity\/","url":"https:\/\/solutionsreview.com\/security-information-event-management\/facts-about-the-future-of-cybersecurity\/","name":"5 Facts About the Future of Cybersecurity","isPartOf":{"@id":"https:\/\/solutionsreview.com\/security-information-event-management\/#website"},"primaryImageOfPage":{"@id":"https:\/\/solutionsreview.com\/security-information-event-management\/facts-about-the-future-of-cybersecurity\/#primaryimage"},"image":{"@id":"https:\/\/solutionsreview.com\/security-information-event-management\/facts-about-the-future-of-cybersecurity\/#primaryimage"},"thumbnailUrl":"https:\/\/solutionsreview.com\/security-information-event-management\/files\/2023\/05\/Facts-About-the-Future-of-Cybersecurity.jpg","datePublished":"2023-05-10T18:47:09+00:00","dateModified":"2023-05-10T18:49:43+00:00","author":{"@id":"https:\/\/solutionsreview.com\/security-information-event-management\/#\/schema\/person\/6cb37eea5f1d0a6b86982aacbb615f85"},"description":"Stephen Moore and Tyler Farrar of Exabeam team up to beam up five facts about the future of cybersecurity.","breadcrumb":{"@id":"https:\/\/solutionsreview.com\/security-information-event-management\/facts-about-the-future-of-cybersecurity\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/solutionsreview.com\/security-information-event-management\/facts-about-the-future-of-cybersecurity\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/solutionsreview.com\/security-information-event-management\/facts-about-the-future-of-cybersecurity\/#primaryimage","url":"https:\/\/solutionsreview.com\/security-information-event-management\/files\/2023\/05\/Facts-About-the-Future-of-Cybersecurity.jpg","contentUrl":"https:\/\/solutionsreview.com\/security-information-event-management\/files\/2023\/05\/Facts-About-the-Future-of-Cybersecurity.jpg","width":800,"height":400,"caption":"future of cybersecurity"},{"@type":"BreadcrumbList","@id":"https:\/\/solutionsreview.com\/security-information-event-management\/facts-about-the-future-of-cybersecurity\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/solutionsreview.com\/security-information-event-management\/"},{"@type":"ListItem","position":2,"name":"5 Facts About the Future of Cybersecurity"}]},{"@type":"WebSite","@id":"https:\/\/solutionsreview.com\/security-information-event-management\/#website","url":"https:\/\/solutionsreview.com\/security-information-event-management\/","name":"Best Information Security SIEM Tools, Software, Solutions & Vendors","description":"Buyer's Guide and Best Practices","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/solutionsreview.com\/security-information-event-management\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/solutionsreview.com\/security-information-event-management\/#\/schema\/person\/6cb37eea5f1d0a6b86982aacbb615f85","name":"Stephen Moore and Tyler Farrar","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/solutionsreview.com\/security-information-event-management\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/2ad0f6c7455ead7d6c9b971280935b7e?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/2ad0f6c7455ead7d6c9b971280935b7e?s=96&d=mm&r=g","caption":"Stephen Moore and Tyler Farrar"},"description":"Stephen Moore has been vice president and chief security strategist of Exabeam, Inc. since August 2017. Moore has more than 15 years of experience in information security, intrusion analysis, threat intelligence, security architecture, and web infrastructure design. Prior to joining Exabeam, he spent more than seven years at Anthem, in a variety of cybersecurity practitioner and leadership roles. He has deep experience working with legal, privacy, and audit staff to improve cybersecurity and demonstrate greater organizational relevance. Tyler Farrar is the Chief Information Security Officer (CISO) at Exabeam. He graduated from the United States Naval Academy in 2012 and received his Bachelor of Science in Aerospace Engineering. While in the Navy, Farrar served as a Naval Cryptologic Warfare Officer. Farrar continued his education at the Robert H. Smith School of Business, where he earned a Master of Business Administration in Accounting and Finance. Before Exabeam, Farrar was the Director of Cyber Security & Governance (CISO) at Maxar Technologies.","url":"https:\/\/solutionsreview.com\/security-information-event-management\/author\/stephentyler\/"}]}},"_links":{"self":[{"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/posts\/4497"}],"collection":[{"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/users\/655"}],"replies":[{"embeddable":true,"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/comments?post=4497"}],"version-history":[{"count":0,"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/posts\/4497\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/media\/4498"}],"wp:attachment":[{"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/media?parent=4497"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/categories?post=4497"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/tags?post=4497"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}