Mandiant M-Trends 2024: Inside the annual cybersecurity report
Cybersecurity firm Mandiant, now owned by Google, has recently unveiled the latest M-Trends 2024 report. This comprehensive report sheds light on the top cybersecurity trends, threats, and analyses identified by Mandiant over the course of the previous year.
Key Findings
The M-Trends 2024 report covers investigations conducted from January 1, 2023, to December 31, 2023. One significant observation highlighted in the report is the increasing sophistication of attackers in evading detection for prolonged periods.
Throughout the year 2023, Mandiant noted a significant rise in the use of zero-day vulnerabilities by well-funded attackers and espionage groups. The report indicated that more than 90 zero-day exploits were identified in 2023, marking a 50% growth from the previous year.
Attack Trends
Notably, well-funded attackers and nation-state actors are increasingly leveraging "living off the land" attack techniques. These methods involve exploiting legitimate tools or software already present in a targeted environment.
For instance, the advanced persistent threat group Volt Typhoon utilized this approach to infiltrate IT systems at U.S. military bases in Guam and other strategic locations in the Asia-Pacific region.
Industry Targets
The financial sector emerged as the most heavily targeted industry vertical, comprising 17.3% of the attacks, followed by business and professional services at 13.3%, and high-tech companies at 12.4%.
Empowering Cybersecurity Professionals
For years, Mandiant has been releasing its annual M-Trends report to equip cybersecurity professionals and clients with frontline insights into the evolving cyber threat landscape.
If you are interested in accessing the M-Trends 2024 report or previous editions, you can download them directly from Mandiant’s website.
