Critical Start Pinpoints Most Targeted Industries for Cyberattacks

Manufacturing and industrial products remained the most targeted industry by cyberattacks during the first half of 2024, according to a new Critical Start report.

Critical Start’s Cyber Research Unit (CRU) reviewed 3,438 high and critical alerts generated by 20 supported endpoint detection and response (EDR) solutions alongside. It also tracked 4,602 reports detailing ransomware and database leak activities across 24 industries in 126 countries.

Global cybercrime should increase by 15% per year over the next five years, reaching $10.5 trillion annually by 2025. That's up from $3 trillion in 2015, according to the report.

Callie Guenther, senior manager of cyber threat research at Critical Start, said one of the most surprising aspects of the report is the rapid adaptation of new attack techniques by threat actors, particularly in industries that were previously less targeted, such as manufacturing.

Critical Start's Callie Guenther

“The aggressiveness and sophistication of these attacks are increasing, highlighting the need for more proactive threat intelligence,” she said.

Key Critical Start Report Findings

Noteworthy findings in the Critical Start report include:

Related:Palo Alto CEO: CrowdStrike Outage Prompting 'Conversations'

Critical Start found a 12.75% decrease in database leaks and ransomware attacks targeting technology companies during the first half of this year compared to the first half of 2023.

Certain Industries ‘Prime Targets’

“Certain industries, like health care and finance, are prime targets due to the sensitive and valuable nature of the data they handle,” Guenther said. “However, the report indicates a rise in attacks on manufacturing and critical infrastructure, likely due to the operational disruption potential and the higher likelihood of paying ransoms to avoid downtime.”

Related:Advance Auto Parts Data Breach Impacts Millions

The report also highlights trending concerns for businesses, including:

“Organizations often fail to adopt a proactive approach to cybersecurity, relying too heavily on reactive measures,” Guenther said. “This includes insufficient threat intelligence integration, lack of employee training on phishing, and inadequate patch management, which leaves them vulnerable to known exploits.”

If current trends continue, the second half of 2024 may see a continuation or even an increase in the frequency and sophistication of attacks, particularly as threat actors refine their methods, she said. Organizations will need to bolster their defenses significantly to counter these evolving threats.