Trends & Insights

CYBERSECURITY: Looking Back at 2022 and Ahead to 2023

The cybersecurity landscape of 2022 demonstrated how attack strategies continue to evolve and highlighted the security measures organizations should prioritize in response. Discover the trends that shaped IT security and why Identity & Access Management (IAM), Zero Trust, and Cloud Security are more important than ever.

19. January 2023
6 min. reading time
Cyberattacks against German IT infrastructures increased significantly throughout 2022, resulting in substantial financial losses for businesses and public organizations due to cyber incidents and data breaches. At the time, there were no signs that this trend was slowing. At the same time, analyzing these attacks provides valuable insights that help organizations anticipate and prepare for future threats.

According to IBM’s Cost of a Data Breach Report 2022, the average total cost of a data breach reached USD 4.5 million (excluding ransomware payments). These costs include incident response, recovery, and rebuilding affected systems.

The most common initial attack vectors were:
  • Stolen or compromised credentials (19%)
  • Phishing (16%)
  • Misconfigured cloud environments (15%)
  • Vulnerabilities in third-party software (13%)

The report also found that organizations required an average of 327 days to identify and contain a security breach.

Cybersecurity Rückblick 2022 Ausblick 2023

The Lapsus$ Attack Campaign

The Lapsus$ cybercriminal group made headlines throughout 2022 by targeting major organizations including NVIDIA, Ubisoft, Samsung, and Microsoft. In each case, sensitive data was stolen, and in many instances, publicly released. Their business model centered on extortion following successful intrusions. Unlike many other threat groups, Lapsus$ primarily gained access through phishing attacks, while ransomware generally did not play a role in their operations.

Increasing Data Theft in Healthcare

In March 2022, Shields Health Care Group suffered a cyberattack that exposed the personal information of approximately two million patients, affecting an estimated 53 healthcare organizations. 

Later that year, in August, a Managed Service Provider (MSP) supporting the UK’s National Health Service experienced a ransomware attack that caused major disruptions to emergency healthcare services across the country.

Microsoft and Mandiant were brought in to assist with recovery efforts. Similar attacks have previously been associated with the REvil ransomware group, which has repeatedly targeted managed service providers.

Are Cryptocurrencies Really Secure?

The rapid growth of the cryptocurrency market has attracted increasing attention from cybercriminals. Fast-growing ecosystems often introduce software security weaknesses.

Notable attacks during 2022 included:

  • The Lazarus Group stealing approximately $540 million in Ethereum and USDC from the Ronin Bridge.
  • The theft of $321 million from the Wormhole Ethereum Bridge.
  • An exploit against the Beanstalk stablecoin protocol resulting in losses of approximately $182 million.

These incidents demonstrated that blockchain technologies and decentralized finance (DeFi) platforms remain attractive targets for sophisticated attackers.

Drone-Based Cyberattacks

Cyberattacks involving drones have long been considered a theoretical threat, but in October 2022, security researcher Greg Linares documented a real-world incident.

After unusual activity was detected within an organization’s internal Confluence environment, investigators discovered an unauthorized wireless device connected to the corporate Wi-Fi network.

Using signal tracking equipment, the security team located two drones on the roof of the building:
  • One carried a WiFi Pineapple device.
  • The other was equipped with a Raspberry Pi, a 4G modem, a Wi-Fi router, and battery packs.

The attackers used Wi-Fi spoofing techniques to capture internal credentials and gain access to the organization’s network.

Ransomware: Some Good News

While ransomware dominated cybersecurity headlines throughout 2022, there were also positive developments. Dutch law enforcement successfully persuaded the DeadBolt ransomware group to surrender 155 decryption keys, allowing victims to recover their encrypted data without paying ransom demands—saving both time and significant financial losses.

What to Expect in 2023

Although cyber threats continue to evolve rapidly, cybersecurity experts identified several trends expected to shape 2023:

Phishing Will Remain a Primary Attack Vector

Phishing is expected to continue as one of the most common attack methods. Threat actors will likely develop increasingly sophisticated techniques to trick victims into revealing sensitive information.

Ransomware Will Continue to Evolve

Ransomware remains one of the most significant cybersecurity threats. Attackers are expected to develop new techniques designed to bypass increasingly mature security controls.

Cloud Security Will Become Even More Critical

As organizations continue migrating workloads to the cloud, cloud environments will become increasingly attractive targets for attackers. Organizations will therefore need to further strengthen cloud security while threat actors continuously adapt their attack methods.

Artificial Intelligence Will Be Used by Attackers

Artificial intelligence is expected to play a growing role in offensive cyber operations. Threat actors may leverage AI to automate attacks, improve phishing campaigns, and evade traditional security controls.

Preparing for Future Threats

Organizations are not powerless against these evolving cyber risks. A combination of preventive security measures, continuous monitoring, early threat detection, and rapid incident response can significantly reduce cyber risk and strengthen organizational resilience.

By investing in modern cybersecurity strategies—including Identity & Access Management (IAM), Zero Trust, Cloud Security, and proactive security operations—organizations can better protect themselves against both current and emerging threats.

Contact: security-experts@oediv.de

Newsletter

Stay Informed

Subscribe to our newsletter to receive regular insights into Identity & Access Management.

    By submitting this form, I consent to the processing of the data I have provided for the purpose of handling my enquiry.
    I may withdraw this consent at any time with future effect. Further information: Privacy Policy.
    Read More

    Related Articles

    Ready for an Initial Consultation?

    Let's assess together how resilient and future-ready your Identity & Access Management strategy really is.

    vertrieb­@secusys.de

    Request a Strategy Meeting