Pakistani firms face rising network security threats

Cybersecurity report reveals human error, growing complexity of remote work as major risks

Listen to article

LAHORE:

In 2024, network protection incidents emerged as the most common cybersecurity challenge for Pakistani businesses, according to the latest Kaspersky IT Security Economics report. The report revealed that 71% of companies faced attempts to infiltrate their networks, while 49% reported incidents involving malicious code execution or adversaries attempting to take control of compromised systems.

Large enterprises, despite having advanced security measures, experienced the highest rate of network security incidents. Small and medium-sized businesses (SMBs) were also significantly affected, with many incidents stemming from employee actions, whether deliberate or accidental.

Network security threats exploit system vulnerabilities by penetrating company networks, enabling cybercriminals to gain unauthorised access, install malware, or compromise sensitive data and applications. The report noted that as the volume of electronic data increases, the complexity and frequency of cyber threats such as phishing scams, ransomware, DDoS attacks and advanced persistent threats (APTs) also grow.

The rise of remote work and bring-your-own-device (BYOD) policies has further complicated network security. Employees accessing company data from diverse locations and devices create heightened risks for breaches, especially in environments lacking robust security protocols and training.

Human error remains a significant factor, with 31% of companies reporting incidents where employees consciously or unconsciously assisted adversaries. Employee negligence can lead to severe consequences, including financial losses, reputational damage, and legal liabilities.

SMBs are particularly vulnerable to data breaches due to limited resources for cybersecurity measures and training, compared to larger corporations. To mitigate risks, companies must prioritise employee awareness and invest in comprehensive cybersecurity training programmes like those offered by Pureversity, KnowBe4, Mimecast among others. Regular security audits, monitoring, and the implementation of advanced solutions such as Endpoint Detection and Response (EDR) and Extended Detection and Response (XDR) can strengthen defences.