Conference Presentation, Keynote
The Latest in Cyber Attacks
- Attackers are expected to shift focus from organizational targets to individuals due to the low cost and high profitability of targeting those in home offices and small-to-medium businesses with limited security spending.
- Business email compromise is projected to remain a $26 billion annual revenue stream for adversaries, while phishing sites are anticipated to continue replacing malware sites as the primary delivery method.
- SIM port attacks and social engineering tactics, such as manipulating victims into revealing PIN codes, are predicted to remain highly prevalent vectors for compromise.
- Password reuse is forecast to stay a primary entry vector, having been utilized in all but two known nation-state attacks in recent years.
- Account takeover incidents are expected to drop to zero with the widespread adoption of security keys, which are described as the only 100% effective mechanism against such threats, though a stolen physical backup key remains a breach risk.
- Digital security is projected to rely heavily on "herd immunity," where the failure of individuals to secure their personal digital lives compromises the broader corporate environment.
- High-tier secure devices, such as Chromebooks, are expected to significantly hinder remote attacker access, provided individuals adhere to basic security steps to achieve near-total immunity against listed attacks.
- Physical security is predicted to become increasingly critical alongside digital measures, with a forthcoming wave of residential smart cameras capable of identifying individuals via body posture and detecting malicious actions.