概述/Overview
本報告深入分析了不斷變化的網路威脅形勢，重點介紹了網路犯罪、民族國家威脅、重大挑戰和安全創新方面的主要動態。
The report provides insights into the evolving cyber threat landscape, highlighting key developments in cybercrime, nation-state threats, critical challenges, and security innovations.
主要動態/Key Developments
網路犯罪分子正在利用網路犯罪即服務模式，大規模發起網路釣魚、勒索軟體和商業電子郵件泄露等攻擊。他們繞過安全措施的手段更加復雜。
民族國家更加注重網路間諜活動，而不是破壞性攻擊。中國和伊朗的組織加強了能力，而朝鮮則進行了首次觀察到的供應鏈攻擊。
對 IT/OT 交叉點的攻擊有所增加，25% 的 OT 設備使用了不支持的系統。在關鍵基礎設施中使用的 CODESYS 軟體中發現了 15 個新漏洞。
人工智慧和機器學習為自動化安全和增強人的能力提供了新的機遇，但也帶來了新的潛在風險，必須加以解決。
Cybercriminals are using the cybercrime-as-a-service model to launch attacks like phishing, ransomware, and business email compromise at scale. They are bypassing security measures with greater sophistication.
Nation-states focused more on cyber espionage rather than destructive attacks. Chinese and Iranian groups enhanced capabilities, while North Korea conducted its first observed supply chain attack.
Attacks on IT/OT intersections increased, with 25% of OT devices using unsupported systems. 15 new vulnerabilities were found in CODESYS software used across critical infrastructure.
AI and machine learning provide new opportunities to automate security and augment human capabilities, but also introduce new potential risks that must be addressed.
關鍵統計數據/Key stats
自 2022 年 9 月以來，人為操作的勒索軟體攻擊增加了 200% 以上。
70% 的勒索軟體受害者的員工人數少於 500 人。
自 2022 年 11 月以來，潛在信息外泄增加了一倍。
商業電子郵件泄露(BEC)嘗試達到每天 156,000 次。
密碼暴力攻擊從每月 30 億次增至 300 多億次。
人工智慧可幫助實現威脅情報、響應、監控、測試、教育和治理的自動化。
Human-operated ransomware attacks increased over 200% since September 2022.
70% of ransomware victims had fewer than 500 employees.
Potential exfiltration doubled since November 2022.
Business email compromise attempts reached 156,000 per day.
Password spray attacks grew from 3 billion to over 30 billion monthly.
AI can help automate threat intel, response, monitoring, testing, education, and governance.
主要應對方式/Key takeaways
採用網路安全基礎知識 - MFA、套件修補、最小權限訪問、備份。
優先考慮身份保護，實施防網路釣魚身份驗證。
更加關注供應鏈風險和非托管設備的安全性。
安全負責地利用人工智慧加強安全。
跨部門合作，共用情報，採取法律/技術行動，提高集體應變能力。
Adopt cyber hygiene basics - MFA, patching, least privilege access, backups.
Prioritize identity protection and implement phishing-resistant authentication.
Increase focus on supply chain risks and security of unmanaged devices.
Leverage AI safely and responsibly to enhance security.
Collaborate across sectors to share intelligence, take legal/technical action, and boost collective resilience.
結論/Summary
報告強調了網路威脅的規模和復雜程度不斷增加，同時也強調了創新、加強防禦和共同努力創建更安全的網路生態系統的機會。採用技術和政策解決方案將是關鍵所在。
The report highlights the increasing scale and sophistication of cyber threats, while emphasizing opportunities to innovate, strengthen defenses, and work together to create a safer online ecosystem. Adopting both technological and policy solutions will be key.