2022 State of the Threat: A Year in Review

In 2022, ransomware remained the most prevalent form of attack. In investigations by Secureworks® incident responders, the median time between initial access and ransomware detonation dropped to 4.5 days in 2022, compared to 5 days in 2021. Meanwhile, nation-state dynamics like those observed in conflicts between Russia and Ukraine shifted rapidly.
Secureworks Counter Threat Unit™ (CTU) researchers have noted a general trend: the size of organizations falling victim to these threats is growing smaller over time. Smaller organizations are likely to be less well-resourced, making them a softer target and one that is less likely to bring in specialist incident response services after the event.
Read our comprehensive report to understand key findings and recommendations your organization can take to counter threats.