LONDON, UK, Feb 21, 2024 IBM today released the 2024 X-Force Threat Intelligence Index highlighting an emerging global crisis as cybercriminals double down on exploiting user identities to compromise enterprises.
According to IBM X-Force, IBM Consulting's security services arm, cybercriminals last year generated more opportunities to log in to corporate networks through valid accounts, instead of hacking into them making this tactic a preferred weapon of choice for threat actors.
The X-Force Threat Intelligence Index is based on insights and observations from monitoring over 150 billion security events per day in more than 130 countries. In addition, data is gathered and analysed from multiple sources within IBM, including IBM X-Force Threat Intelligence, Incident Response, X-Force Red, IBM Managed Security Services, and data provided from Red Hat Insights and Intezer , which contributed to the 2024 report.
An emerging identity crisis
The report data revealed that exploiting valid accounts has become the path of least resistance for cybercriminals, with billions of compromised credentials accessible on the Dark Web.
According to the report, 50% of cyberattacks in the UK involved the exploitation of valid accounts as the initial access vector' and a further 25% of cases involved the exploitation of public-facing applications. Across Europe, X-Force observed a 66% year-on-year rise in attacks caused by the use of valid accounts contributing to Europe's prevalence as the most targeted region of 2023 and the record number of attacks that X-Force has ever reported regionally.
The criminal ecosystem was also quick to adapt to the use of valid accounts by attackers. In 2023, X-Force observed a 266% increase in infostealing malware, which is designed to steal personal and enterprise credentials, personally identifiable information, and banking and crypto wallet information.
This easy entry for attackers is harder to detect, eliciting a costly response from enterprises. According to X-Force, worldwide, major incidents caused by attackers using valid accounts were linked to nearly 200% more complex response measures by security teams than the average incident with defenders needing to distinguish between legitimate and malicious user activity on the network.
In fact, IBM's 2023 Cost of a Data Breach Report found that breaches caused by stolen or compromised credentials required roughly 11 months from detection to recovery the longest response lifecycle among all infection vectors.
Martin Borrett, Technical Director, IBM Security, UK, and Ireland (UKI) commented:
Our findings reveal that identity is increasingly being weaponised against enterprises, exploiting valid accounts and compromising credentials. It also shows us that the biggest security concern for enterprises stems not from novel or cryptic threats, but from well-known and existing ones.
Addressing cybersecurity challenges requires a strategic approach, emphasising the reinforcement of foundational security measures. Streamlining identity management through a unified Identity and Access Management (IAM) provider and strengthening legacy applications with modern security protocols are crucial steps in mitigating risks. Additionally, subjecting your system to rigorous stress tests by skilled offensive security teams proves invaluable in uncovering potential weaknesses. This insight is pivotal for crafting a robust incident response plan that engages all teams, from IT professionals to C-suite executives.
Julian David, CEO of techUK, added:
In an era marked by the growing sophistication of cybercriminals who exploit legitimate accounts to breach business defences, IBM's X-Force Threat Intelligence Index serves as a stark wake-up call.
The report underscores a troubling pattern where half of the cyberattacks in the UK rely on legitimate accounts for initial access, presenting significant challenges to businesses' recovery endeavours. To effectively combat this threat, businesses must adopt a strategic approach, integrating modern security protocols to mitigate risks and strengthen their defences against the ever-evolving landscape of cyber threats.
Further key UK findings include:
Malware made up 30% of security incidents observed in the UK.
Ransomware (30%) and cryptominers (20%) were the top malware types encountered in the country.
The impact of attacks was evenly distributed with extortion, digital currency mining and data leaks each making up 25% of total impacts in the UK.
This marks a shift from 2022, when half the cases X-Force observed in the UK involved extortion (57%) twice the global average followed by data theft (29%).
The professional, business and consumer services industry was the most targeted sector in the UK, representing 39% of cases.
Energy (30%) and finance & insurance (17%) were the second and third most targeted industries in UK, respectively.
Manufacturing was the most targeted industry in Europe, accounting for 28% of cases.
Europe overall experienced the highest percentage of incidents within the energy sector at 43%, as well as finance and insurance at 37%.
Major takeaways from the global report included:
Attacks on critical infrastructure reveal industry faux pas.
Worldwide, an alarming 69.6% of attacks that X-Force responded to were against critical infrastructure organisations, an alarming finding highlighting that cybercriminals are wagering on these high value targets' need for uptime to advance their objectives.
In 84% of attacks on critical sectors globally, compromise could have been mitigated with patching, multi-factor authentication, or least-privilege principals indicating that what the security industry historically described as basic security may be harder to achieve than portrayed.
Exploiting public-facing appl
Europe Stories
05/01/2027
Worlds first 802.15.4ab-UWB chip verified by Calterah and Rohde & Schwarz to be ...
09/10/2026
September 10 2026, 06:00 (PDT) Dolby Expands Dolby OptiView Platform with New Capabilities at IBC 2026
New Sports Intelligence helps providers better unders...
07/10/2026
Dalet, a leading technology and service provider for media-rich organizations, today announced the latest Long-Term Supported (LTS) release of Dalet Flex. Build...
02/10/2026
v1.9.3 introduces AUv3 support
Roland have just released an update that kits their free iPad-based software synth out with AUv3 support, meaning it can now ...
02/10/2026
Dolby Atmos support, AI-powered stem separation & more
The latest version of MOTU's DAW software is now available, and marks a major step forward with t...
02/10/2026
Portable DAC created in collaboration with Steve Levine
British hi-fi experts iFi audio have unveiled a new Master Tuned variant of their praised iDSD GR2 p...
02/10/2026
In our latest blog, Tim Pearson looks at streaming piracy from a different lens, focusing on digital trust, consumer risk, and the future of subscriber protecti...
02/10/2026
Friday 2 October 2026
Crystal Lake, a Friday the 13th' prequel series, com...
02/10/2026
Friday 2 October 2026
Sky VIP helps families celebrate the Christmas season wit...
02/10/2026
How the fertility sector in Ireland remains unregulated
Undercover filming reveals how without proper regulation the promotion of controversial fertility treat...
02/10/2026
Transforming Homes, Transforming Lives
Presenter Baz Ashmawy and his team take on four life-changing builds across Kildare, Limerick, Wicklow and Offaly in the...
01/10/2026
Third collaboration with celebrated composer
Spitfire Audio have once again teamed up with Grammy-nominated composer, producer and technologist BT, creating...
01/10/2026
FL Studio gets dedicated grid controller
Novation have teamed up with FL Studio developers Image-Line to create another dedicated controller for the popular...
01/10/2026
Six new USB interfaces introduced
Universal Audio's USB audio interface line-up has just been refreshed, gaining six new models aimed at musicians, prod...
01/10/2026
Siretta's SNYPER-5G cellular network analyser has been shortlisted for the IoT Global Awards 2026.
The IoT Global Awards recognise products, services and o...
01/10/2026
Mesh Broadcast Services Fits Big-Truck Audio Power into Compact Eclipse Unit with Calrec Argo M Canadian OB company Mesh Broadcast Services has fitted its Eclip...
01/10/2026
X-Rite Pantone Launches Spectura to Advance Connected Color Quality from Lab to ...
01/10/2026
Thursday 1 October 2026
Nominees revealed for 2026 Sky Arts Awards
Current slide, 0 0, undefined1
0
Irish National Opera and Jennifer Walshe: MARS
Jacob Al...
01/10/2026
Vital TV antenna replaced at SudburyHelicopter and broadcast engineers work together to upgrade TV services for 1.5M in the East
--
Share to Linkedin
Octobe...
01/10/2026
Arqiva appoints Simon Duffy as ChairSimon Duffy joins as Chair effective 01 October 2026
--
Share to Linkedin
October 1, 2026
Press Office
01 October 2026...
01/10/2026
Season 4 of the multi-award-winning hit entertainment series The 2 Johnnies Late Night Lock In is back, serving up another round of unpredictable laughs, unforg...
01/10/2026
New season begins Sunday, 4 October at 6pm on RT lyric fm and RT Listen
RT lyric fm's arts and culture documentary series The Lyric Feature returns on S...
01/10/2026
RT is proud to continue its commitment to supporting and celebrating the arts across Ireland this October, highlighting a vibrant programme of theatre, music, ...
30/09/2026
Add an envelope generator to any plug-in
Sync Audio's latest creation is a handy utility plug-in that can be used to combine and modulate other effects ...
30/09/2026
All-analogue tape-style drive joins Series A
Strymon's reputation was built on their digital knowhow, so many were surprised (and intrigued) when they a...
30/09/2026
Two new expansion packs released
Sonuscore have just introduced two new expansion packs for The Pulse, its production engine instrument for modern cinematic...
30/09/2026
eds3_5_jq(document).ready(function($) { $(#eds_sliderM519).chameleonSlider_2_1({...
30/09/2026
New Solution Expands Harmonic's Network Intelligence Portfolio and Brings Comcast-Developed Fiber Monitoring Technology to Broadband Operators, Providing Re...
30/09/2026
How to Shop Well Now starts Monday at 9.35pm
on RT One and RT Player
On the...
29/09/2026
Two new plug-ins launch alongside updated bundles
Zynaptiq have just announced the launch of two new plug-ins, alongside new and improved versions of two of...
29/09/2026
All-in-one bus processor revealed
Wes Audio's ng product range has come a long way since it was first introduced, and now includes a tasty selection of ...
29/09/2026
eds3_5_jq(document).ready(function($) { $(#eds_sliderM519).chameleonSlider_2_1({ content_source:......
29/09/2026
NOT FOR RELEASE, PUBLICATION OR DISTRIBUTION IN OR INTO OR TO ANY PERSON LOCATED OR RESIDENT IN, OR AT ANY ADDRESS IN, THE UNITED STATES OF AMERICA, ITS TERRITO...
29/09/2026
We tend to think we live in a digital world, with hopes and fears around artificial intelligence (AI), quantum computing, data centres and the next big technolo...
29/09/2026
Today, in partnership with the American Academy of Pediatrics (AAP), Apple relea...
29/09/2026
Final Cut Camera, the professional filming app for iPhone, receives a major upda...
29/09/2026
RT lyric fm is proud to announce the annual Choirs for Christmas competition callout. Warm up those vocal chords and join us on RT lyric fm for a celebration ...
28/09/2026
EQ plug-in can now be played via MIDI
Scaler Music have recently released a new and improved version of their patented musical EQ plug-in, kitting it out wi...
28/09/2026
New synth developed in collaboration with philterSoup
Boutique effects pedal and Eurorack manufacturer Animal Factory Amps have announced that the new compa...
28/09/2026
Rohde & Schwarz adds an integrated multi-channel pulse analysis option to its FS...
28/09/2026
Monday 28 September 2026
Sky launches Full Fibre 1.6 Gbps for millions of homes
Sky has launched a new Full Fibre 1.6 Gbps product, rolling out from today, gi...
28/09/2026
Arvato Systems Highlights It's Role for Automotive Manufacturers and Suppliers
TISAX
Arvato Systems has successfully completed the TISAX Level 3 assess...
28/09/2026
Crimecall, presented by Carla O'Brien, returns tonight for a brand new series at 9.35pm on RT One and RT Player.
In tonight's episode, alongside appe...
28/09/2026
CELEBRATING 40 YEARS AT THE HEART OF NEW IRISH WRITING
LIVE FROM POETRY IRELAND, DUBLIN AND ON RT RADIO 1 FROM 7PM
DETAILS: www.rte.ie/writing | FOLLOW: #r...
27/09/2026
New compact pedal packs in 120 effects
The latest multi-effects pedal from Boss is a compact unit that promises to give any pedalboard a massive boost in s...
26/09/2026
Launched alongside three new expansion packs
In celebration of their 30th anniversary, Native Instruments have released a major update for their Maschine 3 ...
25/09/2026
Algorithm update & new DVA vibrato-detection engine
A new flagship version of Antares' iconic pitch-correction software has arrived, and along with a co...
25/09/2026
New flagship unit to arrive in early 2027
Two notes Audio Engineering have revealed that a new and improved version of their hugely popular reactive load bo...
25/09/2026
AI-free mixing tool gets an upgrade
Launched in October 2025, Tim Exiles Finalist is an algorithmic mixing tool that's been designed for those who don&#...
LONDON, UK, Feb 21, 2024 IBM today released the 2024 X-Force Threat Intelligence Index highlighting an emerging global crisis as cybercriminals double down on exploiting user identities to compromise enterprises.
