Blog

Taipei, Taiwan — 22 December 2020 — CyCraft Technology, the fastest-growing cybersecurity firm in Asia, announced the release of their latest report, Securing Small, Medium, and Large Orgs for the 2020s. The report, which goes into thorough detail on SOC (security operation center) functions, SOC roles and responsibilities, SOC stressors, and how to model effective and efficient SOCs for small, medium, and large organizations, also includes research from Gartner, Inc. on why Midsize enterprises should embrace MDR providers.

Security Operations Center (SOC) pain points leading to SOC team burnout is a big security challenge every organization faces. Ponemon Institute performed a survey of more than 500 IT and security practitioners, looking into the frustrations security analysts have in maintaining SOCs as well as the frustrations organizations have with their SOC’s lack of effectiveness.

In April 2020, CyCraft observed highly malicious cyber activity in several Taiwan government agencies. Some of these attacks have been attributed to the same threat actor due to similar techniques, tactics, and procedures — the most important of which is the utilization of Skeleton Keys and Owlproxy malware.

In April 2020, highly malicious cyber activity was detected in several Taiwan government agencies. In one environment alone, out of the thousands of endpoints scanned, 30 endpoints were confirmed to be infected, and 10 high-risk endpoints were connected by these compromised endpoints. 10 key malware were discovered during these sophisticated targeted attacks — most of them were Waterbear Loader malware.

CVE-2020–1472 is ranked Critical 10/10 CVSSv3. The August 2020 Patch Tuesday warned that the flaw is present in most supported versions of Windows Server, from Server 2008 through Server 2019.

In cybersecurity, there have been several approaches used to track and analyze the various characteristics of cyber intrusions by advanced threat actors.