Thursday, February 27, 2025
HomeCyber AttackReport Says Content Indexing and Data Classification Critical for Cyber Resiliency

Report Says Content Indexing and Data Classification Critical for Cyber Resiliency

Published on

SIEM as a Service

Follow Us on Google News

Backing up the data is not enough, ESG Stated in Showcase: The Criticality of Data Integrity for Successful Cyber Resilience…and More, commissioned by data resilience experts Index Engines. Gaining a good understanding of that data is also necessary,not only to support recovery efforts, but also to leverage the data for other purposes. Cyber-criminals regularly target the backup infrastructure itself,which is why the requirement for meta content and context about data is becoming more urgent.

“The pandemic crisis accelerated digital transformation programs on a broad scale, and we have witnessed increasingly frequent cyber-attacks as a side effect of that evolution,” said report authors Christophe Bertrand, ESG Senior Analystand Monya Keane, ESG Senior Research Analyst.

To put it simply, data has to bemore intelligent, the report continues.It’s really about achieving business-leveloutcomes—embracing the notion that data is a true asset that can be leveraged to create profit and help avoid cost and risk.It is imperative that organizations not only protect their data from ransomware, but also understand the content and ensure it is safe and protected if it could otherwise be used to harm the business.

When a cyber-attack succeeds, real-time cybersecurityprotection solutions may not by themselves be enough to fend off the enemyor minimize the damage.Data gets corrupted and must be recovered.Notably, cyber-criminals are now specifically focusing on accessing and infecting months’worth of companies’ backup datasets (in addition to corrupting the primary production data), making these attacks even more damaging and highrisk.

Nearly half of the organizations surveyed by ESG view fortifying cybersecurity as a business issue driving their technology spending, with 47% of respondents identifying improving cybersecurity as a top IT investment justification.1 That’s likely why experts with cybersecurity skills are in such high demand.

In fact, cybersecurity is an area of IT in which organizations frequently indicated that they have a problematic skills shortage.  80% of surveyed IT decision makers regard data reuse as an extension of or even a replacement for their data protection strategy moving forward.

“Cyber criminals are now utilizing advanced techniques, including artificial intelligence, to penetrate the data center and corrupt critical data assets,” said Jim McGann, vice president at Index Engines.  “Organizations need to be smarter and more aggressive in combatting these attacks instead of using common and predictable approaches, which have not worked in the past.  These new approaches include protecting the backup data, checking the integrity, and ensuring that when they are attacked, they can recover quickly with a known good backup.”

The full report can be found here: https://indexengines.com/cybersense-esg-report

CyberSense by Index Engine integrates analytics, machine learning, reports and diagnostic capabilities with storage and backup platforms for a high level of confidence that even the most sophisticated attacks are detected and false positives and negatives are minimized. CyberSense also provides post-attack forensic reporting for rapid recovery, including identifying the attack vector, corrupted files, and last good versions of files in previous backups. For more information visit https://indexengines.com/cybersense

Latest articles

Lotus Blossom Hacker Group Uses Dropbox, Twitter, and Zimbra for C2 Communications

The Lotus Blossom hacker group, also known as Spring Dragon, Billbug, or Thrip, has...

Squidoor: Multi-Vector Malware Exploiting Outlook API, DNS & ICMP Tunneling for C2

A newly identified malware, dubbed "Squidoor," has emerged as a sophisticated threat targeting government,...

Unpatched Vulnerabilities Attract Cybercriminals as EDR Visibility Remains Limited

Cyber adversaries have evolved into highly organized and professional entities, mirroring the operational efficiency...

Threat Actors Attack Job Seekers of Fortune 500 Companies to Steal Personal Details

In Q3 2024, Cofense Intelligence uncovered a targeted spear-phishing campaign aimed at employees working...

Supply Chain Attack Prevention

Free Webinar - Supply Chain Attack Prevention

Recent attacks like Polyfill[.]io show how compromised third-party components become backdoors for hackers. PCI DSS 4.0’s Requirement 6.4.3 mandates stricter browser script controls, while Requirement 12.8 focuses on securing third-party providers.

Join Vivekanand Gopalan (VP of Products – Indusface) and Phani Deepak Akella (VP of Marketing – Indusface) as they break down these compliance requirements and share strategies to protect your applications from supply chain attacks.

Discussion points

Meeting PCI DSS 4.0 mandates.
Blocking malicious components and unauthorized JavaScript execution.
PIdentifying attack surfaces from third-party dependencies.
Preventing man-in-the-browser attacks with proactive monitoring.

More like this

Threat Actors Attack Job Seekers of Fortune 500 Companies to Steal Personal Details

In Q3 2024, Cofense Intelligence uncovered a targeted spear-phishing campaign aimed at employees working...

DragonForce Attacks Critical Infrastructure to Exfiltrate Data and Halt Operations

The DragonForce ransomware group has launched a significant cyberattack on critical infrastructure in Saudi...

Researchers Uncover $1.4B in Sensitive Data Tied to ByBit Hack by Lazarus Group

In a significant breakthrough, cybersecurity firm Silent Push has uncovered sensitive infrastructure tied to...