LONDON, UK, Feb 21, 2024 IBM today released the 2024 X-Force Threat Intelligence Index highlighting an emerging global crisis as cybercriminals double down on exploiting user identities to compromise enterprises.
According to IBM X-Force, IBM Consulting's security services arm, cybercriminals last year generated more opportunities to log in to corporate networks through valid accounts, instead of hacking into them making this tactic a preferred weapon of choice for threat actors.
The X-Force Threat Intelligence Index is based on insights and observations from monitoring over 150 billion security events per day in more than 130 countries. In addition, data is gathered and analysed from multiple sources within IBM, including IBM X-Force Threat Intelligence, Incident Response, X-Force Red, IBM Managed Security Services, and data provided from Red Hat Insights and Intezer , which contributed to the 2024 report.
An emerging identity crisis
The report data revealed that exploiting valid accounts has become the path of least resistance for cybercriminals, with billions of compromised credentials accessible on the Dark Web.
According to the report, 50% of cyberattacks in the UK involved the exploitation of valid accounts as the initial access vector' and a further 25% of cases involved the exploitation of public-facing applications. Across Europe, X-Force observed a 66% year-on-year rise in attacks caused by the use of valid accounts contributing to Europe's prevalence as the most targeted region of 2023 and the record number of attacks that X-Force has ever reported regionally.
The criminal ecosystem was also quick to adapt to the use of valid accounts by attackers. In 2023, X-Force observed a 266% increase in infostealing malware, which is designed to steal personal and enterprise credentials, personally identifiable information, and banking and crypto wallet information.
This easy entry for attackers is harder to detect, eliciting a costly response from enterprises. According to X-Force, worldwide, major incidents caused by attackers using valid accounts were linked to nearly 200% more complex response measures by security teams than the average incident with defenders needing to distinguish between legitimate and malicious user activity on the network.
In fact, IBM's 2023 Cost of a Data Breach Report found that breaches caused by stolen or compromised credentials required roughly 11 months from detection to recovery the longest response lifecycle among all infection vectors.
Martin Borrett, Technical Director, IBM Security, UK, and Ireland (UKI) commented:
Our findings reveal that identity is increasingly being weaponised against enterprises, exploiting valid accounts and compromising credentials. It also shows us that the biggest security concern for enterprises stems not from novel or cryptic threats, but from well-known and existing ones.
Addressing cybersecurity challenges requires a strategic approach, emphasising the reinforcement of foundational security measures. Streamlining identity management through a unified Identity and Access Management (IAM) provider and strengthening legacy applications with modern security protocols are crucial steps in mitigating risks. Additionally, subjecting your system to rigorous stress tests by skilled offensive security teams proves invaluable in uncovering potential weaknesses. This insight is pivotal for crafting a robust incident response plan that engages all teams, from IT professionals to C-suite executives.
Julian David, CEO of techUK, added:
In an era marked by the growing sophistication of cybercriminals who exploit legitimate accounts to breach business defences, IBM's X-Force Threat Intelligence Index serves as a stark wake-up call.
The report underscores a troubling pattern where half of the cyberattacks in the UK rely on legitimate accounts for initial access, presenting significant challenges to businesses' recovery endeavours. To effectively combat this threat, businesses must adopt a strategic approach, integrating modern security protocols to mitigate risks and strengthen their defences against the ever-evolving landscape of cyber threats.
Further key UK findings include:
Malware made up 30% of security incidents observed in the UK.
Ransomware (30%) and cryptominers (20%) were the top malware types encountered in the country.
The impact of attacks was evenly distributed with extortion, digital currency mining and data leaks each making up 25% of total impacts in the UK.
This marks a shift from 2022, when half the cases X-Force observed in the UK involved extortion (57%) twice the global average followed by data theft (29%).
The professional, business and consumer services industry was the most targeted sector in the UK, representing 39% of cases.
Energy (30%) and finance & insurance (17%) were the second and third most targeted industries in UK, respectively.
Manufacturing was the most targeted industry in Europe, accounting for 28% of cases.
Europe overall experienced the highest percentage of incidents within the energy sector at 43%, as well as finance and insurance at 37%.
Major takeaways from the global report included:
Attacks on critical infrastructure reveal industry faux pas.
Worldwide, an alarming 69.6% of attacks that X-Force responded to were against critical infrastructure organisations, an alarming finding highlighting that cybercriminals are wagering on these high value targets' need for uptime to advance their objectives.
In 84% of attacks on critical sectors globally, compromise could have been mitigated with patching, multi-factor authentication, or least-privilege principals indicating that what the security industry historically described as basic security may be harder to achieve than portrayed.
Exploiting public-facing appl
Europe Stories
05/01/2027
Worlds first 802.15.4ab-UWB chip verified by Calterah and Rohde & Schwarz to be ...
09/10/2026
September 10 2026, 06:00 (PDT) Dolby Expands Dolby OptiView Platform with New Capabilities at IBC 2026
New Sports Intelligence helps providers better unders...
07/10/2026
Dalet, a leading technology and service provider for media-rich organizations, today announced the latest Long-Term Supported (LTS) release of Dalet Flex. Build...
11/09/2026
Spark series gains compact modelling stompbox
Positive Grid's Spark amps have become a popular part of the company's line-up, offering a convenient ...
11/09/2026
New flagship sequencing plug-in revealed
Rapid Flow have just launched a new 16-track sequencer plug-in which they say has been designed for total rhythmic...
11/09/2026
Rohde & Schwarz unveils the air-cooled R&S TM1 medium-power UHF transmitter at I...
11/09/2026
Friday 11 September 2026
Sky Sports extends US Open deal to 2030
Sky has agreed a three-year extension to its US Open deal, ensuring Sky Sports & NOW remains ...
11/09/2026
Wuppertal September 11, 2026
A Decade of Innovation: AMP VISUAL TV Builds on Ten Years of MediorNet EvolutionAMP VISUAL TV is continuing the evolution of its ...
11/09/2026
Wuppertal September 11, 2026
Mediacom Deploys Riedel Easy5G for Wireless Camer...
11/09/2026
Wuppertal September 11, 2026
Touring Video Expands Flexible Production Workflows With Riedel MediorNet and hiRiedel Communications today announced that Tourin...
11/09/2026
Wuppertal September 11, 2026
Riedel Technology Powers Record-Breaking Esports World Cup Production in ParisFrom July 6 to Aug. 23, 2026, Paris hosted the Espo...
11/09/2026
Article courtesy of Digital Production
Read the article
With Baselight 8 coming in 2027, the interesting part is not the number of new buttons. Some features...
11/09/2026
It's almost iPhone Pro time. Starting Saturday, September 12, at 1 p.m, cust...
11/09/2026
RT has today announced Benetti Menswear as the sponsor of its 2026 Amgen Irish Open coverage for a sixth consecutive year, further strengthening the heritage c...
10/09/2026
Editing, restoration & mastering suite upgraded Acon Digital Acoustica 8 audio editing restoration mastering software.
Acon Digital have just launched the la...
10/09/2026
Classic synths & drum machines available to play
Based in Reading, UK, Readipop are a music and arts charity with a long track record of innovative, partici...
10/09/2026
Popular model updated & new addition introduced
With many of the models in Neumann's KH family now boasting onboard DSP and support for the company'...
10/09/2026
Improved desktop interface announced
The latest iteration of Arturia's flagship desktop audio interface has just arrived, introducing improved preamps, ...
10/09/2026
Progress needs proof: Rohde & Schwarz showcases its trailblazing test solutions ...
10/09/2026
The beloved duo are back with big challenges and even bigger laughs as they discover if you're ever truly too old to try something new.
Previous praise for...
10/09/2026
Thursday 10 September 2026
Sky News Defence Insider app launches as new researc...
10/09/2026
Thursday 10 September 2026
Award-winning network Sky Mobile to offer Apple iPho...
10/09/2026
Thursday 10 September 2026
Sky unveils gripping teaser for The Good Daughter, coming this NovemberTurn on cookies to view this content. Go to Privacy options a...
10/09/2026
Harmonic Leads the New Era of Broadband Connectivity at SCTE TechExpo 2026 Showcase Spotlights Include:
New cOS SensAI intelligence fabric unleashing data-pow...
10/09/2026
RT to Broadcast Amgen Irish Open free-to-air
New multi-year agreement will see RT continue to bring the Amgen Irish Open to Irish audiences
Ryder Cup hig...
10/09/2026
More than 30 women report allegations of sexual harassment, misogyny and bullying within National Ambulance Service
Tonight on RT Prime Time, 9:35pm, RT One ...
10/09/2026
Series 3 of Nero's Class begins Friday 11 September on RT Listen
The third...
09/09/2026
New parts aimed at hip-hop and pop productions
The latest update to Celemony's innovative virtual session musician expands the collection of built-in in...
09/09/2026
Save up to 40% until 21 September 2026
Sonarworks are currently running their Autumn Sale, with discounts of up to 40% currently available across their rang...
09/09/2026
Upcoming title officially launches in September 2026
Bjooks' celebrations for this year's 909 Day will be welcome news amongst drum machine lovers, ...
09/09/2026
Chennai/Luxembourg, 9 September 2026 - SES, a leading space solutions company, today announced the inauguration of its new office in Chennai, India, marking a s...
09/09/2026
September 9 2026, 22:35 (PDT) Cinema Sunshine Becomes Japan's First Exhibit...
09/09/2026
Wednesday 9 September 2026
Tom Daley adds final stitch to giant Baa-Ewe' t...
09/09/2026
Red Seat Ventures Integrates Barometer into Speakeasy to Maximize Podcast Revenu...
09/09/2026
Baselight-powered color comes natively to Media Composer, connecting creative de...
09/09/2026
RT brings three packed days of live radio, entertainment, news, weather and fun
Join RT Radio 1: Morning Ireland, Oliver Callan, Today with David McCullagh,...
08/09/2026
Built for rap producers, by rap producers
Sauceware Audio, the independent plug-in company founded by Grammy-nominated producer Jacob (Travis Scott, 21 Sava...
08/09/2026
Classic Sound Techniques design revived
Warm Audio's latest release delivers a meticulous recreation of the preamp circuitry employed by the Sound Techn...
08/09/2026
Latest soft synth inspired by the Memorymoog
XILS Lab have just launched a software instrument that draws its inspiration from Moog's iconic Memorymoog,...
08/09/2026
September 08, 2026 NORTHRIDGE, Calif. - Soundcraft today announced the launch of its Signature Plus Series Analog Connected Mixing Consoles. As the next genera...
08/09/2026
Tuesday 8 September 2026
Sky Go gets a major upgrade for Sky Glass and Sky Stream customers
Today, Sky launches a new version of the Sky Go app for Sky Glass ...
08/09/2026
Documentary thriller simulating a Russian attack on UK soil will culminate in a live final episode reuniting the playersTuesday 8 September 2026
Trailer releas...
08/09/2026
Tuesday 8 September 2026
Jamie Demetriou and Amelia Dimoldenberg to host next t...
08/09/2026
Wuppertal September 8, 2026
Riedel Introduces New OnAir Headset PlatformRiedel Communications today announced the launch of its new OnAir headset platform, a...
08/09/2026
BERLIN, September 8, 2026 - J nger Audio will introduce a major expansion of its flexAI audio processing platform at IBC 2026. The flexAI system adds autonomous...
08/09/2026
New Vendor-Agnostic Broadband Intelligence Fabric Reduces Operational Complexity and Improves Service Quality for Broadband Service Providers SAN JOSE, Calif. -...
08/09/2026
Arvato Systems Brings TI Expertise to the Stage
Panels, workshops, and real-world examples at the TI-SUMMIT 2026
Arvato Systems, a partner of the TI-SUMMIT 2...
08/09/2026
On October 1, Apple Arcade is rolling out a lineup of fun new games for players ...
07/09/2026
Two new full-range, flat-response cabinets introduced
HeadRush have recently introduced a pair of new full-range, flat-response cabinets designed for player...
LONDON, UK, Feb 21, 2024 IBM today released the 2024 X-Force Threat Intelligence Index highlighting an emerging global crisis as cybercriminals double down on exploiting user identities to compromise enterprises.
