Adam Meyer is the Chief Security Strategist at SurfWatch Labs. In his article in SecurityWeek with the same title as this post, he stated that;
….but if you look at all of the cybercrime activity from the past year, it’s clear that the majority of threats do not have the level of sophistication that is often talked about.
Rather, what cyber threat intelligence is showing us is that most threats simply exploit a series of well-documented vulnerabilities and other weak points to move along the path of least resistance – and the most profit.
Interestingly, this is a pointer for us to acknowledge that just because things CAN get sophisticated, it does not mean the ‘oldies‘ cannot still churn out ‘nasties‘. He went to list Ransomware, Exploit Kits, Credentials Management and Extortion as some of the top threats out there today.
*Note: there is a jargon he used in the article that some readers can be a little befuddled. I give you the meaning here for your reference.