The eSentire Security Operations Center detected nearly 5 million attacks across multiple industries. Intrusions, primarily web attacks, marked the top threat category at nearly 30% of all events. Cybercriminals don’t need to use sophisticated malicious code attacks when methods like ransomware can successfully exploit “low-hanging fruit” and web applications are written without security in mind. Small- and midsized businesses are often victims of cybercriminals seeking low-risk, high-reward targets. The most frequent threat categories were intrusion attempts, information gathering and policy violations.”]
Source: https://www.darkreading.com/attacks-breaches/midsize-businesses-prove-easy-attack-targets