Among Infrastructure as a Service (IaaS) Users, 56% Experienced an Increase in the Volume of Attacks and 67% Were Hit by Ransomware

OXFORD, U.K. — Noviembre 29, 2022 —

Sophos, a global leader in innovating and delivering cybersecurity as a service, today published findings of a new survey, “The Reality of SMB Cloud Security in 2022.” The survey found that, among Infrastructure as a Service (IaaS) users, 56% experienced an increase in the volume of attacks on their organization when compared to the previous year, and 67% were hit by ransomware. In addition, 59% experienced an increase in complexity of attacks.

For many of these users, a lack of visibility into their infrastructure, unpatched vulnerabilities and resource misconfigurations make them susceptible to various types of attacks, including ransomware. Of those surveyed, only 37% track and detect resource misconfigurations and only 43% routinely scan IaaS resources for software vulnerabilities. What’s more, 65% of cloud users reported not having visibility of all resources and their configurations, and only 33% said their organization has the resources to continuously detect, investigate and remove threats in their IaaS infrastructure.

"It is imperative that security is prioritized as organizations continue to adopt cloud services. This includes implementing traditional threat-based protections, as well as risk-based mitigations. Unpatched vulnerabilities and misconfigured resources are both preventable mistakes and avoidable risks that make life easier for attackers. Most attackers are not unstoppable criminal masterminds, but rather opportunistic cyberthugs looking for an easy payday," said John Shier, senior security advisor, Sophos. “However, the survey also found that more advanced IaaS users are twice as likely to report a decrease in attack impact than beginners, suggesting the appropriate defense mechanisms can go a long way in deterring threat actors. For users who need help, we recommend security services that have the 24/7 experts who can detect and quickly respond to active attacks.”

To learn more about The Reality of SMB Cloud Security in 2022, read the full report on Sophos.com.

The Reality of SMB Cloud Security in 2022 survey polled 4,984 IT professionals in small and mid-sized organizations.

Acerca de Sophos

Sophos es líder en ciberseguridad y protege a 600 000 organizaciones en todo el mundo con su plataforma basada en IA y servicios prestados por expertos. Sophos acompaña a las organizaciones, independientemente de su nivel de madurez en materia de seguridad, y crece con ellas para derrotar los ciberataques. Sus soluciones combinan el Machine Learning, la automatización y la información sobre amenazas en tiempo real con la experiencia humana de primera línea de Sophos X-Ops para ofrecer supervisión, detección y respuesta avanzadas 24/7 frente a amenazas.
Sophos ofrece detección y respuesta gestionadas (MDR) líder en el sector, junto con una completa cartera de tecnologías de ciberseguridad que incluye seguridad para endpoints, redes, correo electrónico y la nube, detección y respuesta ampliadas (XDR), detección y respuesta ante amenazas de identidad (ITDR) y SIEM next-gen. Junto con los servicios de asesoramiento de expertos, estas funcionalidades ayudan a las organizaciones a reducir el riesgo de forma proactiva y a responder con mayor rapidez, con la visibilidad y escalabilidad necesarias para adelantarse a las amenazas en evolución.
Sophos comercializa sus productos a través de un ecosistema global de Partners, que incluye proveedores de servicios gestionados (MSP), proveedores de servicios de seguridad gestionados (MSSP), Partners y distribuidores, integraciones para marketplaces y Partners especializados en ciberriesgos, lo que ofrece a las organizaciones la flexibilidad de elegir colaboraciones de confianza a la hora de proteger su negocio.  Sophos tiene su sede en Oxford, Reino Unido. Encontrará más información en es.sophos.com.