Abstract:Taking into account the process of complication of the geopolitical and geoeconomic landscape space, the development of information technologies and the formation of new security challenges associated with the emergence of new cyber threats, there is a need for constant monitoring and forecasting of them in order to prevent consequences in the form of damage and leakage of valuable and confidential information. The authors analyzed the new predictable cyber security threats to organizations, with special attention paid to the protection of endpoints. Threats identified in the field of artificial intelligence development (underground development of malicious Large Language Models (LLM); “Script Kiddies” update; voice fraud for social engineering, which is created by artificial intelligence); changing trends in the behavior of threat actors (attacks on supply chains against managed file transfer solutions, malware threats that are becoming multilingual); as new emerging threats and attack methods (growing QR code rivalry; stealth attacks on peripheral devices; Python implementation in Excel creating a potentially new vector for attacks; LOL drivers changing action algorithms). The resulting detection of future threats emphasizes the need for strategic planning for the adoption of new technologies and platforms: such as Endpoint Detection and Response (EDR) capabilities, as well as the use of EDR as part of a multi-instrumented enhanced detection and response (XDR) architecture. Gartner’s research has been proven to have a tremendous impact on improving organizations’ threat detection capabilities by providing valuable insight into the strengths and weaknesses of each cybersecurity service provider with respect to emerging threat intelligence, by focusing organizations’ attention on opportunities to identify gaps in their existing security infrastructure and adopt sound decisions to invest in additional solutions or services that effectively address these gaps. The spheres of activity of the world’s leading companies were analyzed, their connection with Ukrainian companies was found, and further cooperation was proposed for the effective protection of national cyberspace.

On SolarWinds Orion Platform Security Breach

A review of SolarWinds attack on Orion platform using persistent threat agents and techniques for gaining unauthorized access

SolarWinds Software Supply Chain Security: Better Protection with Enforced Policies and Technologies

Software Supply Chain Attacks, a Threat to Global Cybersecurity: SolarWinds’ Case Study

SolarWinds and the Challenges of Patching: Can We Ever Stop Dancing With the Devil?

Insider threats in Cyber Security: The enemy within the gates

Better Call Saltzer \& Schroeder: A Retrospective Security Analysis of SolarWinds \& Log4j

Hacktivism Goes Orbital: Investigating NB65's Breach of ROSCOSMOS

After the Breach: Incident Response within Enterprises

Cyber security threats in industrial control systems and protection

An In Depth Analysis of a Cyber Attack: Case Study and Security Insights

Insecure by Design in the Backbone of Critical Infrastructure

Supply Chain Insecurity: The Lack of Integrity Protection in SBOM Solutions

ANALYSIS OF CURRENT THREATS TO THE INFORMATION SECURITY OF ORGANIZATIONSAND THE FORMATION OF THE INFORMATION PLATFORM AGAINST THEM

Looking back to look forward: Lessons learnt from cyber-attacks on Industrial Control Systems

Emerging Threats in Cyberspace: Implications for National Security Policy and Healthcare Sector

A Review of Cybersecurity Incidents in the Water Sector

Security Incident Recognition and Reporting (SIRR): An Industrial Perspective

S3C2 Summit 2023-11: Industry Secure Supply Chain Summit

Current Status and Security Trend of OSINT

Anatomy of a High-Profile Data Breach: Dissecting the Aftermath of a Crypto-Wallet Case