The 2023 Active Adversary Report for Security Practitioners
The remarkable decline in attacker dwell time is now well-documented, but what does that mean for those doing the hands-on work of infosecurity?
We present the Active Adversary Report for Security Practitioners, analyzing
data amassed by Sophos’ Incident Response team and covering the six quarters
ending June 2023. This is the third and final Active Adversary Report of 2023.
Report Snapshot
Key Takeaways:
- Urgency on the part of the attackers does not (necessarily) constitute an emergency on the part of defenders
- Attack speeds change; attack directions and processes don’t
- Bad system hygiene matters more in fast times
- To slow down speeding attacks, just add some friction
- Defenders, a TAC!