Intelligent CIO APAC Issue 19 | Page 55

FEATURE : CYBERTHREATS
Keep a close eye on API . Recent statistics suggest that more than 80 % of all Internet traffic belongs to API-based services . 5G and IoT traffic between API services and apps will make them increasingly lucrative targets , causing unwanted exposure of information . The connected nature of APIs potentially also introduces additional risks to businesses as they become an entry vector for wider supply chain attacks . In most cases , attacks targeting APIs go undetected as they are generally considered as trusted paths and lack the same level of governance and security controls .
Hijackers will target your application containers . Containers have become the de facto platform of modern cloud applications . In a recent IBM survey , 64 % of adopters expected to containerize over 50 % of existing and new business applications over the next two years . However , the accelerated use of containers increases the attack surface for an organization . And while attacks against containers are not new , in 2022 , we anticipate expanded exploitation on the orchestration layers , increasing use of malicious or backdoored images through insufficient vulnerability checks and increasing attacks targeting vulnerable applications .
Zero cares about Zero-Days . 2021 is already being touted as one of the worst years on record with respect to the volume of zero-day vulnerabilities exploited in the wild .
The scope of these exploitations , the diversity of targeted applications and ultimately the consequences to organizations were all notable . As we look to 2022 , we expect these factors to drive an
increase in the speed at which organizations respond . As a consequence , we can also expect renewed diligence around asset and patch management . From identifying public facing assets to quickly deploying patches despite potential business disruption , companies will have a renewed focus on reducing their ‘ time to patch ’. p
Raj Samani , Fellow and Chief Scientist of McAfee Enterprise and FireEye
www . intelligentcio . com INTELLIGENTCIO APAC 55