Annual Cyber-Threat Report

80% of ransomware attacks in the last year focused on data exfiltration only.

After initial access, "breakout time" typically takes just 48 minutes, with some groups achieving lateral movement in as little as 27 minutes.

Exfiltration-only ransomware attacks are 34% faster than those involving encryption.

A quarter of active intrusions started with exploitation of public-facing applications.

Compromised service accounts were present in 85% of breaches last year.

Two-thirds of critical hands-on-keyboard incidents involved legitimate software like remote access tools last year.