\nCyber-savvy organizations understand that security is key in the delivery and deployment of applications \u2013 and that it shouldn\u2019t be something that\u2019s tacked on as an afterthought right before moving them to production.<\/p>\n
As a result, we\u2019ll see more cloud architects assuming responsibility for the security of their applications. Simultaneously, solutions originally designed for security practitioners will provide more capabilities for developers, so they are able to continuously improve the security of their applications without slowing down development.<\/p>\n
![\"\"](\"https:\/\/oberig-it.com\/wp-content\/uploads\/2024\/01\/malyunok-1-oglyad-kiberbezpeki-prognozi-ekspertiv-tenable-na-2024-rik-u-galuzi-ot-bezpeki-shtuchnogo-intelektu-hmarno\u0457-bezpeki-iam-ta-in-300x200.jpg\")
<\/p>\n
For more information about software development security, \u201cshift left\u201d and DevSecOps:<\/p>\n
- \n
- \u201cAddressing the confusion around shift-left cloud security\u201d<\/span><\/a> (TechTarget)<\/li>\n
- \u201cThe Big Interview: Jinhong Brejnholt, Chief Cloud Architect, Saxo\u201d<\/span><\/a> (The Stack)<\/li>\n
- \u201cAvoiding the Security Potluck: Good Governance Helps You from Code to Cloud\u201d<\/span><\/a> (Tenable)<\/li>\n
- \u201cHow to Turn A DevOps Pipeline Into a DevSecOps Pipeline: A Shift Left Concept Overview\u201d<\/span><\/a> (Hackernoon)<\/li>\n
- \u201cSecure from the get-go: top challenges in implementing shift-left cybersecurity approaches\u201d<\/span><\/a> (CSO)<\/li>\n
- \u201cSecure Software Development Framework (SSDF) Version 1.1\u201d<\/span><\/a> (NIST)<\/li>\n
- \u201cSecuring the Software Supply Chain: Recommended Practices Guide for Developers\u201d<\/span><\/a> (CISA)<\/li>\n<\/ul>\n
2 – Orgs will consolidate, unify cloud security tool sets<\/strong>
\nIt\u2019s become clear to cybersecurity leaders that cloud native security allows their organizations to break up silos and provide a unified, contextual risk picture. Thus, organizations will accelerate their efforts to consolidate cloud security products and vendors. This will in turn yield not only more secure applications, but also better optimization of resources, skills and time, during a period when organizations are stretched to the limit.<\/p>\n![\"\"](\"https:\/\/oberig-it.com\/wp-content\/uploads\/2024\/01\/malyunok-2-oglyad-kiberbezpeki-prognozi-ekspertiv-tenable-na-2024-rik-u-galuzi-ot-bezpeki-shtuchnogo-intelektu-hmarno\u0457-bezpeki-iam-ta-in-300x200.jpeg\")
<\/p>\nIn fact, this move away from tool and vendor sprawl, and towards unified tool sets will not be limited to the cloud security realm. Demand from CISOs for integrated security suites and platforms will reach new heights, because they allow security teams to see the big picture, assess their complete attack surface and prioritize remediation of their most critical weaknesses.<\/p>\n
For more information about the benefits of integrated security tool stacks, suites and platforms:<\/p>\n
- \n
- \u201cSecurity vendor consolidation a priority for majority of organizations worldwide\u201d<\/span><\/a> (Cybersecurity Dive)<\/li>\n
- \u201cRein in cybersecurity tool sprawl with a portfolio approach\u201d<\/span><\/a> (TechTarget)<\/li>\n
- \u201cSecurity Buyers Are Consolidating Vendors\u201d<\/span><\/a> (eSecurity Planet)<\/li>\n
- \u201cExposure Management: 7 Benefits of a Platform Approach\u201d<\/span><\/a> (Tenable)<\/li>\n
- \u201cWhat cybersecurity consolidation means for enterprises\u201d<\/span><\/a> (TechTarget)<\/li>\n<\/ul>\n
3 – Cyber insurers will tighten the screws on industrial companies<\/strong>
\nIndustrial companies will be less able to rely on their cyber insurance for covering the cost of damages from a cyber incident. Why? Before issuing coverage, cyber insurers will conduct their due diligence process more stringently. And when they do offer policies to industrial companies, the scope of coverage will be more limited. As a result, industrial companies will need to be more proactive about managing their cyber risk, as opposed to being reactive and hoping that their cyber insurance will cover the costs of an attack.<\/p>\n![\"\"](\"https:\/\/oberig-it.com\/wp-content\/uploads\/2024\/01\/malyunok-3-oglyad-kiberbezpeki-prognozi-ekspertiv-tenable-na-2024-rik-u-galuzi-ot-bezpeki-shtuchnogo-intelektu-hmarno\u0457-bezpeki-iam-ta-in-300x200.jpeg\")
<\/p>\nAnd speaking of lowering cyber risk, CFOs and CISOs of organizations with OT systems will realize that now, more than ever, investments in OT security will yield a better cost-benefit than investments in IT security. In other words, spending in OT security has a much biggest impact on reducing risk.<\/p>\n
For more information about cyber insurance trends:<\/p>\n
- \n
- \u201cInsurance Costs Rise, Coverage Shrinks, but Policies Remain Essential\u201d<\/span> <\/a>(Dark Reading)<\/li>\n
- \u201cHow To Obtain the Right Cybersecurity Insurance for Your Business\u201d<\/span><\/a> (Tenable)<\/li>\n
- FTC\u2019s \u201cCyber Insurance\u201d page<\/span><\/a><\/li>\n
- \u201cWhat is cyberinsurance and why is it important?\u201d<\/span><\/a> (TechTarget)<\/li>\n
- \u201c5 Cyber Insurance Trends To Watch Right Now\u201d<\/span> <\/a>(CRN)<\/li>\n
- \u201c4 tips to find cyber insurance coverage in 2024\u201d<\/span><\/a> (TechTarget)<\/li>\n
- \u201cInsurer: Ransomware causes jump in cyber insurance claims\u201d<\/span><\/a> (Tenable)<\/li>\n<\/ul>\n
4 – Proliferation of energy-monitoring sensors will heighten OT risk<\/strong>
\nSeeking to lower energy costs and avoid carbon-usage fines, organizations will increase the number of OT-based sensor deployments and controls. This will allow organizations to better manage their energy usage. However, having more internet-connected IoT and OT devices in smart buildings and in factory- and building-management systems will also expand their attack surface.<\/p>\nFor more information about OT\/IoT cybersecurity:<\/p>\n
- \n
- \u201cWhy are Sensors the Key to IoT Cybersecurity?\u201d<\/span><\/a> (IEEE)<\/li>\n
- \u201cHow to Tackle OT Challenges: Asset Inventory and Vulnerability Assessment\u201d<\/span><\/a> (Tenable)<\/li>\n
- \u201cHow to enhance the cybersecurity of operational technology environments\u201d<\/span><\/a> (McKinsey)<\/li>\n
- \u201cPublic Power Utilities\u2019 Cyber Investment Key to Mitigate Greater Risk\u201d<\/span><\/a> (Fitch Ratings)<\/li>\n
- \u201cWhy attackers love to target IoT devices\u201d<\/span><\/a> (VentureBeat)<\/li>\n<\/ul>\n
VIDEO<\/strong><\/p>\n
The top threats to ICS systems (Tenable)<\/span><\/a><\/p>\n
5 – Ransomware groups will target OT, collaboration technologies<\/strong>
\nRansomware gangs will set their sights on two attractive targets: OT systems and collaboration technologies.<\/p>\nThe allure of targeting businesses that depend on OT systems resides on two factors. First, it\u2019s highly lucrative to go after these organizations, especially in the manufacturing industry. Second, the publicity that these high-profile attacks garner boosts ransomware gangs\u2019 brands. This motivation fuels hacktivist groups in particular, as they look to give visibility to their causes by attacking organizations they oppose.<\/p>\n
![\"\"](\"https:\/\/oberig-it.com\/wp-content\/uploads\/2024\/01\/malyunok-4-oglyad-kiberbezpeki-prognozi-ekspertiv-tenable-na-2024-rik-u-galuzi-ot-bezpeki-shtuchnogo-intelektu-hmarno\u0457-bezpeki-iam-ta-in-300x132.jpeg\")
<\/p>\nMeanwhile, ransomware groups will continue to evolve their tactics to hit multiple organizations with collaboration technologies. Targeting of a zero-day vulnerability in MOVEit Transfer \u2013 a secure managed file transfer (MFT) software made by Progress Software \u2013 was just the beginning. We’ll continue to see these groups target zero-days and n-days in order to claim as many victims as possible.<\/p>\n
Tenable experts also predict that while dozens of nations have pledged to not pay ransoms in cyberattacks, organizations of all sizes will continue to pay, even with no guarantees that the attackers will delete the stolen data. In fact, data will be 2024’s most sought after resource for ransomware groups and their affiliates.<\/p>\n
For more information about ransomware trends, check out these Tenable resources:<\/p>\n
- \n
- \u201cCritical infrastructure orgs warned about Snatch ransomware\u201d<\/span><\/a> (blog)<\/li>\n
- \u201cDHS shines light on ransomware trends\u201d<\/span><\/a> (blog)<\/li>\n
- \u201cLet\u2019s quit paying ransoms: the International Counter Ransomware Initiative pledge\u201d<\/span><\/a> (blog)<\/li>\n<\/ul>\n
VIDEOS<\/strong><\/p>\n
- \n
- Tenable.ot Security Spotlight – Episode 1: The Ransomware Ecosystem<\/span><\/a><\/li>\n
- Tenable CEO Amit Yoran discusses MOVEit Transfer Hack on BBC Asia<\/span><\/a><\/li>\n
- Anatomy of a Threat: MOVEIt<\/span><\/a><\/li>\n<\/ul>\n
6 – Spending on IAM security will skyrocket<\/strong>
\nInvestment in identity and access management (IAM) tools will continue to grow in 2024, as ransomware groups and \u201chack-the-human\u201d attackers, such as phishers, continue to compromise digital identities across organizations of all sizes.<\/p>\n![\"\"](\"https:\/\/oberig-it.com\/wp-content\/uploads\/2024\/01\/malyunok-5-oglyad-kiberbezpeki-prognozi-ekspertiv-tenable-na-2024-rik-u-galuzi-ot-bezpeki-shtuchnogo-intelektu-hmarno\u0457-bezpeki-iam-ta-in-300x197.jpeg\")
<\/p>\nAs they grapple with higher cloud adoption and with a shortage of qualified cyber pros, organizations will heavily invest in IAM products, with the hope of being better able to stay ahead of bad actors and protect 2024\u2019s most valuable resource: data.<\/p>\n
For more information about IAM security:<\/strong><\/p>\n
- \n
- \u201cIdentities: The Connective Tissue for Security in the Cloud\u201d<\/span><\/a> (Tenable)<\/li>\n
- \u201cIdentity and Access Management: Developer and Vendor Challenges\u201d<\/span><\/a> (CISA)<\/li>\n
- \u201cIdentity and Access Management Recommended Best Practices Guide for Administrators\u201d<\/span><\/a> (CISA)<\/li>\n
- \u201cNavigating the Top 10 Challenges in Cloud Identity and Access Management\u201d<\/span><\/a> (Cloud Security Alliance)<\/li>\n
- \u201c10 things every CISO needs to know about identity and access management\u201d<\/span><\/a> (VentureBeat)<\/li>\n<\/ul>\n
Bonus: Stocking stuffers<\/strong>
\nAnd here are several quick takes from our experts:<\/p>\n - \u201cIdentity and Access Management: Developer and Vendor Challenges\u201d<\/span><\/a> (CISA)<\/li>\n
- Tenable CEO Amit Yoran discusses MOVEit Transfer Hack on BBC Asia<\/span><\/a><\/li>\n
- \u201cDHS shines light on ransomware trends\u201d<\/span><\/a> (blog)<\/li>\n
- \u201cHow to Tackle OT Challenges: Asset Inventory and Vulnerability Assessment\u201d<\/span><\/a> (Tenable)<\/li>\n
- \u201cHow To Obtain the Right Cybersecurity Insurance for Your Business\u201d<\/span><\/a> (Tenable)<\/li>\n
- \u201cRein in cybersecurity tool sprawl with a portfolio approach\u201d<\/span><\/a> (TechTarget)<\/li>\n
- \u201cThe Big Interview: Jinhong Brejnholt, Chief Cloud Architect, Saxo\u201d<\/span><\/a> (The Stack)<\/li>\n