Security teams are investing in their defense strategies with technologies that leverage automation, machine learning and AI. But criminals are doing plenty of investing of their own in attack technologies while maturing the techniques they use to exploit vulnerabilities and gain access to sensitive information.
That’s the takeaway of Cisco’s 2018 Annual Cybersecurity Report Highlights, which relies on the insight of 3600 chief information security officers (CISOs).
Criminals are using cloud services for anonymity and to evade detection through encryption, which they are using as a tool to conceal command-and-control activity, according to the research. “They are using what we use to hide in the cloud,” said Franc Artes, an architect with Cisco’s security business group. “We can’t just blacklist all Amazon Web Services or Azure. Criminals know that and are leveraging that by paying attention to what we’re using.“