概述/Overview
本報告深入分析了不斷變化的網路威脅形勢，重點介紹了網路犯罪、民族國家威脅、重大挑戰和安全創新方面的主要動態。
The report provides insights into the evolving cyber threat landscape, highlighting key developments in cybercrime, nation-state threats, critical challenges, and security innovations.
主要動態/Key Developments
-
網路犯罪分子正在利用網路犯罪即服務模式，大規模發起網路釣魚、勒索軟體和商業電子郵件泄露等攻擊。他們繞過安全措施的手段更加復雜。
-
民族國家更加注重網路間諜活動，而不是破壞性攻擊。中國和伊朗的組織加強了能力，而朝鮮則進行了首次觀察到的供應鏈攻擊。
-
對 IT/OT 交叉點的攻擊有所增加，25% 的 OT 設備使用了不支持的系統。在關鍵基礎設施中使用的 CODESYS 軟體中發現了 15 個新漏洞。
-
人工智慧和機器學習為自動化安全和增強人的能力提供了新的機遇，但也帶來了新的潛在風險，必須加以解決。
-
Cybercriminals are using the cybercrime-as-a-service model to launch attacks like phishing, ransomware, and business email compromise at scale. They are bypassing security measures with greater sophistication.
-
Nation-states focused more on cyber espionage rather than destructive attacks. Chinese and Iranian groups enhanced capabilities, while North Korea conducted its first observed supply chain attack.
-
Attacks on IT/OT intersections increased, with 25% of OT devices using unsupported systems. 15 new vulnerabilities were found in CODESYS software used across critical infrastructure.
-
AI and machine learning provide new opportunities to automate security and augment human capabilities, but also introduce new potential risks that must be addressed.
關鍵統計數據/Key stats
-
自 2022 年 9 月以來，人為操作的勒索軟體攻擊增加了 200% 以上。
-
70% 的勒索軟體受害者的員工人數少於 500 人。
-
自 2022 年 11 月以來，潛在信息外泄增加了一倍。
-
商業電子郵件泄露(BEC)嘗試達到每天 156,000 次。
-
密碼暴力攻擊從每月 30 億次增至 300 多億次。
-
人工智慧可幫助實現威脅情報、響應、監控、測試、教育和治理的自動化。
-
Human-operated ransomware attacks increased over 200% since September 2022.
-
70% of ransomware victims had fewer than 500 employees.
-
Potential exfiltration doubled since November 2022.
-
Business email compromise attempts reached 156,000 per day.
-
Password spray attacks grew from 3 billion to over 30 billion monthly.
-
AI can help automate threat intel, response, monitoring, testing, education, and governance.
主要應對方式/Key takeaways
-
採用網路安全基礎知識 - MFA、套件修補、最小權限訪問、備份。
-
優先考慮身份保護，實施防網路釣魚身份驗證。
-
更加關注供應鏈風險和非托管設備的安全性。
-
安全負責地利用人工智慧加強安全。
-
跨部門合作，共用情報，採取法律/技術行動，提高集體應變能力。
-
Adopt cyber hygiene basics - MFA, patching, least privilege access, backups.
-
Prioritize identity protection and implement phishing-resistant authentication.
-
Increase focus on supply chain risks and security of unmanaged devices.
-
Leverage AI safely and responsibly to enhance security.
-
Collaborate across sectors to share intelligence, take legal/technical action, and boost collective resilience.
結論/Summary
報告強調了網路威脅的規模和復雜程度不斷增加，同時也強調了創新、加強防禦和共同努力創建更安全的網路生態系統的機會。採用技術和政策解決方案將是關鍵所在。
The report highlights the increasing scale and sophistication of cyber threats, while emphasizing opportunities to innovate, strengthen defenses, and work together to create a safer online ecosystem. Adopting both technological and policy solutions will be key.