Follow Us on Telegram For Up To Date Tech News and Reviews


The daily number of human-driven cyber incidents increased by 1.5 times in 2022


Research based on the analysis of incidents reported to customers of Kaspersky Managed Detection and Response (MDR) has revealed that Security Operations Center (SOC) analysts discovered more than three high-severity incidents with direct human involvement every day in 2022.


The efficiency external specialists provided while dealing with cybersecurity solutions and requirements of special knowledges were the main reasons for the companies to outsource external experts in 2022. To address the lack of gaps in expertise among IT Security professionals and provide them with insights on the current threat landscape, Kaspersky analysed anonymised customer incidents detected by its MDR service.  

Kaspersky’s annual Managed Detection and Response Analyst Report¹ showed the high-severity incidents required an average 43.8 minutes to be detected by Kaspersky MDR². Due to an increase in human-driven attacks this processing time grew by approximately 6% compared to the previous year, as they take up more of SOC analyst time.

Regarding the nature of such incidents, 30% of them were associated with APTsᵌ, 26% accounted for malware attacks, and just over 19% resulted from “ethical hacking” (pentests, red teaming or any other types of cyber exercises conducted in customers’ infrastructures either for the security assessment of IT systems or to test the operational readiness of the MDR service). The proportion of incidents involving publicly available critical vulnerabilities and the detection of traces of previous attacks involving humans was around 9%. The remaining incidents resulted from the successful use of social engineering techniques or were linked to insider threats.

“The MDR report shows that sophisticated attacks driven by humans continue to grow. They require more resources to be investigated and they take up more of SOC analyst time as this type of attack lends itself to automation to a lesser degree. To detect these attacks efficiently we recommend companies to implement comprehensive threat hunting practices combined with classic alert monitoring,” comments Sergey Soldatov, Head of Security Operations Center, Kaspersky.

For greater protection from advanced attacks, Kaspersky experts recommend the following:

  • Deploy a solution that combines detection and response capabilities and help identify threats without involving additional in-house resources.
  • Provide your SOC team with access to the latest threat intelligence and ensure in-depth visibility into cyberthreats targeting your organisation.
  • Provide your staff with essential cybersecurity knowledge to reduce the likelihood of targeted attacks.
  • Implement expert Incident Response training to improve the expertise of your in-house digital forensics and incident response team.

The full Kaspersky Managed Detection and Response Analyst Report 2022 is available via this link.

About author

Tech Arena is an independent technology news website that mainly covers social media news, mobile and gadget news and reviews, apps and software among others. The site focuses on tech news from all over the world that directly impact Kenya.
Related posts

Carrefour Expands its Self-Checkout Service to its Village Market Store


African SAP User Group Board Welcomes Louise Steenekamp as Vice-Chair


Zoho Partners with MOMO Pencils to Support the Education of Underprivileged Children in Kenya


Interesting Facts About Casino That You May Not Have Known

Sign up for our Newsletter and
stay informed

Leave a Reply

Your email address will not be published. Required fields are marked *

This site uses Akismet to reduce spam. Learn how your comment data is processed.