A chart showing initial compromise types, ranked in frequency seen in incidents by Sophos MDR and Sophos Incident Response. VPNs were the source of initial compromise over 30% of the time.

Notices where this attachment appears

1. Embed this notice
   Sophos X-Ops (sophosxops@infosec.exchange)'s status on Thursday, 17-Apr-2025 02:55:25 JST Sophos X-Ops

   Today, Sophos X-Ops has published Sophos' Annual Threat Report, with a focus on cybercrime affecting small and medium businesses. There are a number of key takeaways from the incident and detection telemetry from 2024:
   First, network edge devices-and VPN appliances in particular-have been the largest single initial access point for cybercriminals over the past year, accounting for over 30 percent of all documented initial access methods. /1