Unveiling the 2024 Data Breach Investigations Report (DBIR)

on YouTube ↗50m

" summary

Report aggregates 30,000 incidents and over 10,000 breaches from 94 countries into a 100‑page DBIR and finds exploitation up 180% year over year, 68% of breaches involving a non‑malicious human element, and third‑party incidents rising 70% to 15% of breaches; stolen credentials appear in 31% of decade‑long cases. Threat actors exploit disclosed vulnerabilities in about 5 days while organizations patch only half by 55 days, ransomware declines as extortion rises, and generative AI is widely mentioned but rarely used by attackers.

AI-written summary · about

" chapters (10)

1. 0:002024 DBIR introduction
2. 3:112024 DBIR key findings
3. 7:27Credentials and MFA gaps
4. 11:39Vulnerability exploitation
5. 17:12Human error and third-party risks
6. 24:46Ransomware decline and extortion
7. 28:41Social engineering trends
8. 33:58Generative AI in threats
9. 40:03How to use the DBIR for your organization
10. 43:33Q&A

" related talks

• 37mWhat a Year! - Insights and Forecasts from the 2021 DBIRAlex Pinto · 33rd Annual FIRST Conference (Virtual Event)
• 40mData Breaches: Barbarians in the Throne RoomDave Lewis · Codemotion Rome 2018
• 22mSecurity and RisksAlison Gianotto · dotScale 2013
• 13mQuick Look: Operationalised Risk Modeling Using the Data Breach RepositoryAshish Thapar, Kristof Philipsen · RSAC 2018 Asia Pacific & Japan
• 22mSecurity and RisksAlison Gianotto · dotScale 2014
• 46mBreaches Are Everywhere. What’s A Good Security Leader To Do?!Richard Greenberg · OWASP Global AppSec Amsterdam 2019
• 57mLessons From Billions of Breached RecordsTroy Hunt · Security Visionaries 2022
• 54mHacked in hours: Red team assessments unveiling vulnerabilitiesRico Komenda · NDC Security 2024