


Question: Aside from the upside of getting ahead of threat actors looking to deploy ransomware, what are the other implications - positive or negative?Īndy Piazza: I think this stat continues to deliver us positive news. It could mean that defenders are detecting these cases before the ransomware payload is actually deployed.Īndy Piazza: Instead of playing catch-up against a barrage of threats, this means we’re moving left of boom and getting ahead of the actual real critical impacts.

Question: Interesting, why should we be paying close attention to this backdoor stat, in particular? Is this bad news for organizations?Īndy Piazza: Since we know that backdoors are often the precursor to ransomware events, I take this stat as a good sign, actually. What was the #1 action we saw threat actors take?Īndy Piazza: The number one action on the objective we saw threat actors take was the deployment of backdoors at 21% ransomware came in second at 17% and business email compromise third at 6%. APAC being the #1 targeted geographic region. Question: The Threat Intelligence Index is full of #1s - Manufacturing being the #1 targeted industry. Moving Left of Boom: Early Backdoor DetectionĪndy Piazza, Global Head of Threat Intelligence at IBM Security X-Force, sat down with Security Intelligence to chat with us about the rise in the deployment of backdoors, and why it’s not necessarily all bad news. Top insights are in from this year’s IBM Security X-Force Threat Intelligence Index, but what do they mean? Three IBM Security X-Force experts share their thoughts on the implications of the most pressing cybersecurity threats, and offer guidance for what organizations can do to better protect themselves.
