What a Year! - Insights and Forecasts from the 2021 DBIR
summary
Verizon’s DBIR uses a 14‑year consolidated dataset (5,000+ breaches, ~80,000 incidents) and shows phishing up 11 points, with 61% of breaches involving credential abuse and ~85% involving a human element. Analysis finds attackers favor short attacks and massive automated login attempts (up to 3.3 billion per org per year, ~105/sec). Ransomware and business email compromise now yield high monetary outcomes (95th‑percentile losses around $1–1.5M). Recommendations focus on credential hygiene, secure configuration and targeted controls where they buy the most ROI.
AI-written summary · about
chapters (25)
- 0:00Introduction
- 1:07What is the DBIR
- 3:27What did we talk about this year
- 6:14Top 3 causes of breaches
- 8:15What works
- 9:25Financial gain
- 9:57Uncertainty
- 12:04Short Attacks
- 13:07Phishing Increase
- 14:17Phishing Success Rate
- 16:51Credential Abuse
- 18:47How Many Attempts
- 20:07Business as Usual
- 20:27Ransomware
- 23:46Outcomes of Attacks
- 24:50Data from the FBI
- 27:17How to fix this
- 27:44No organization can do everything
- 29:49The gini coefficient
- 31:07Top 3 varieties
- 31:58The norm
- 32:27Build specific defenses
- 33:36Recommendations
- 34:46DBIR Authors
- 36:02Conclusion
related talks
50mUnveiling the 2024 Data Breach Investigations Report (DBIR)
13mQuick Look: Operationalised Risk Modeling Using the Data Breach Repository
22mSecurity and Risks
45mApplying Past Lessons for Intel-Driven Identity Threat Detection- 22mSecurity and Risks
40mData Breaches: Barbarians in the Throne Room
40mLeveraging Human Risk Data to Strengthen Cyber Resiliency
22mCybersecurity: The Challenge of Our Decade