Press release
Zscaler ThreatLabz Finds Most Cyberattacks Hide In Encrypted Traffic
86% of Cyberattacks Are Delivered Over Encrypted Channels, with Manufacturing Being The Most Targeted Industry Key findings: Threats over HTTPS grew by 24%
About this update from Zscaler Inc
[{"type":"text","content":"86% of Cyberattacks Are Delivered Over Encrypted Channels, with Manufacturing Being The Most Targeted Industry\nKey findings: Threats over HTTPS grew by 24% year-over-year in the Zscaler cloud, representing nearly 30 billion threats blockedEncrypted malware and malicious content is a top threat, comprising 78% of observed attacksManufacturing was the most targeted industry, experiencing 32% of encrypted attacks, with over 2.1 billion AI/ML-related transactions processedBrowser exploits and ad spyware sites have increased by 297% and 290% year-over-year SAN JOSE, Calif., Dec. 14, 2023 (GLOBE NEWSWIRE) -- Zscaler, Inc. (NASDAQ: ZS), the leader in cloud security, announced today the release of its annual Zscaler™ ThreatLabz 2023 State of Encrypted Attacks Report. This year’s report focused on the increase in threats over HTTPS, which grew by 24% from 2022, underscoring the sophisticated nature of cybercriminal tactics that target encrypted channels. For the second year in a row, manufacturing was the industry most commonly targeted, with education and government organizations seeing the highest year-over-year increase in attacks. Additionally, malware, which includes malicious web content and malware payloads, continued to dominate over other types of encrypted attacks, with ad spyware sites and cross-site scripting accounting for 78% of all blocked attacks. This year’s research analyzed nearly 30 billion blocked threats from October 2022 to September 2023 by the Zscaler Zero Trust Exchange™ platform, the world’s largest security cloud platform. In total, 86% of all cyber threats, including malware, ransomware, and phishing attacks, are delivered over encrypted channels. “With nearly 95% of web traffic flowing over HTTPS and 86% of the advanced threats delivered over encrypted channels, any HTTPS traffic that does not undergo inline inspection represents a significant blind spot that cybercriminals continue to exploit when targeting global organizations,” said Deepen Desai, Chief Security Officer, Zscaler. “To defend against encrypted attacks, organizations should replace vulnerable appliances, like VPNs and firewalls, with a Zero Trust Network Access (ZTNA) solution. This allows IT teams to inspect TLS traffic at scale while blocking threats and preventing sensitive data leakage.” Malware is the top encrypted threat Malware keeps ...