波耐蒙研究所&Balbix：2024年AI时代的企业网络安全风险现状报告（英文版）（27页）.pdf

1、EOLRansomwareUnpatched softwareDenial-of-serviceZero daySQL injectionCloud misconfigurationsDefault passwordSoftware CVEsSession hijackingOpen portsMalwareWeak encryptionXSS scriptingSocial engineeringState of Enterprise Cyber Riskin the Age of AI2024Sponsored by i Balbix2024 State of Enterprise Cyb

2、er Risk in the Age of AI 129117315171921132324contentsExecutive Summary At a Glance Insight 1Vulnerabilities,Misconfigurations,and User Errors Are Top Concerns5Insight 2Most Organizations Use Inadequate Prioritization Strategies for VM Insight 3Lack of Senior Executive Engagement De-emphasizes Cyber

3、 RiskInsight 4Most Security Teams Use Impact-Related Metrics to Determine The Cost of a Cyberattack or Other Security Incident Insight 5ChatGPT and Copilot Adoption Outpaces Security Team Ability to Manage Their UsageInsight 6Most Cyber Professionals Feel Unprepared for AI-Powered Attacks Insight 7A

4、I Is a Tool That Can Help Bridge the Cybersecurity Skills Gap Insight 8Many Organizations Have Not Embraced Automation to Address Resource Constraints Insight 9A Majority of Organizations Trust Established Cybersecurity Frameworks Insight 10Many Organizations Have Obsolete Cyber Risk StrategiesConcl

5、usion Final Thoughts 1 Balbix2024 State of Enterprise Cyber Risk in the Age of AI Executive SummaryIn our State of Enterprise Cyber Risk in the Age of AI,we identified several trends that demonstrated most organizations still lack basic cyber hygiene.Consider the following alarming statistics from t

6、he research:a concerning 10%of U.S.organizations admitting to never scanning for vulnerabilities and more than half only scanning for vulnerabilities only once a week or less.Additionally,65%of respondents rely on an organizational security plan designed for two or more years.Since new security risk