2024 Incident Response Report

The scale, speed, and sophistication of threat actors’ actions have increased in the past year. In about 45% of our Unit 42^® Incident Response cases in 2023, attackers exfiltrated data in less than a day after compromise.

At the same time, large-scale exploitation of internet-facing vulnerabilities was the initial access vector in 39% of our cases, compared to 28% of cases in 2022. This shift drives automated intrusion campaigns at a large scale by scanning vast portions of address space, looking for vulnerable systems, and stealing credentials.

This means your security operation teams need to evolve—to not only detect but also respond within hours to stop them.

Our 2024 Unit 42 Incident Response Report distills real-world insights from organizations like yours, enabling you to understand the threats that matter and providing effective strategies to gain the upper hand. Read the report to gain more insights into:

• The most prevalent threat actor tactics.
• What contributes to attackers’ success.
• Which industries were the most targeted.
• The impact of AI-driven data in cybersecurity.
• Top cybersecurity predictions from our incident responders.
• In-depth, actionable recommendations for defenders.