Kevin Beaumont on Nostr: Bruteforce and external remote access drives a significant portion of incidents, ...

Bruteforce and external remote access drives a significant portion of incidents, which also ties to compromised credentials (78% of cases is remote access with valid creds, infostealers go brrrr).

CitrixBleed was 5% of all security incidents - may explain why I made an MSPaint.exe logo for it

The long story short is you need really robust authentication - if you get it wrong, you are toast in 2025 - and really, really robust external services patching. Don't ever present RDP to the internet.