January 19, 2018 By Shane Schick 2 min read

Less than a week before political and business leaders descend on Davos, Switzerland, the World Economic Forum has released a study with cybersecurity attack statistics that suggest cybercriminals will be a key topic during the three-day event.

According to the “The Global Risks Report 2018,” threats against industrial systems and critical infrastructure rank high among the major forces that could threaten international stability. Though the possibility of nuclear war and extreme weather topped the list, the report’s cybersecurity attack statistics indicated a major incident could happen in the next five years.

The work of cybercriminals has been growing in frequency, intensity and sophistication, according to the World Economic Forum. The report’s cybersecurity attack statistics included details on how threats such as NotPetya crippled some organizations to the tune of $300 million per quarter. In addition, technologies such as aviation systems can get hit by malware or other exploits an average of 1,000 times every month.

Other well-known cases cited in the report include the WannaCry incident from May 2017, but ransomware in general was called out among the statistics covered. Out of all the email that includes malicious code or some kind of phishing scheme, 65 percent was intended to take over a device and hold it hostage until a victim pays up.

The World Economic Forum is also concerned by threats against the Internet of Things (IoT) — an issue that was highlighted in last year’s report.

As Fortune pointed out, the World Economic Forum’s research divides risks into two categories: likelihood and potential impact. Whereas threats from cybercriminals are in the top five in the first category, they rank sixth in the latter.

While that ranking is still alarming, cybersecurity attacks statistics tend to reveal the severe effects on companies or industries rather than threats that affect entire populations. This year’s World Economic Forum may be the place where we learn whether the top minds in business and government believe that will change anytime soon.

More from

SoaPy: Stealthy enumeration of Active Directory environments through ADWS

10 min read - Introduction Over time, both targeted and large-scale enumeration of Active Directory (AD) environments have become increasingly detected due to modern defensive solutions. During our internship at X-Force Red this past summer, we noticed FalconForce’s SOAPHound was becoming popular for enumerating Active Directory environments. This tool brought a new perspective to Active Directory enumeration by performing collection via Active Directory Web Services (ADWS) instead of directly through Lightweight Directory Access Protocol (LDAP) as other AD enumeration tools had in the past.…

Smoltalk: RCE in open source agents

26 min read - Big shoutout to Hugging Face and the smolagents team for their cooperation and quick turnaround for a fix! Introduction Recently, I have been working on a side project to automate some pentest reconnaissance with AI agents. Just after I started this project, Hugging Face announced the release of smolagents, a lightweight framework for building AI agents that implements the methodology described in the ReAct paper, emphasizing reasoning through iterative decision-making. Interestingly, smolagents enables agents to reason and act by generating…

4 ways to bring cybersecurity into your community

4 min read - It’s easy to focus on technology when talking about cybersecurity. However, the best prevention measures rely on the education of those who use technology. Organizations training their employees is the first step. But the industry needs to expand the concept of a culture of cybersecurity and take it from where it currently stands as an organizational responsibility to a global perspective.When every person who uses technology — for work, personal use and school — views cybersecurity as their responsibility, it…

Topic updates

Get email updates and stay ahead of the latest threats to the security landscape, thought leadership and research.
Subscribe today