Zscaler: More Than 87% of Cyber Threats Concealed in Encrypted Traffic

Published:

Cyber Warriors Conclave — nine editions, one cyber safe nation

Zscaler ThreatLabz 2024 Report: The Rise of Encrypted Attacks and Strategies for Mitigation

Zscaler Report Reveals Alarming Surge in Encrypted Cyber Attacks

In a striking revelation, Zscaler has unveiled its Zscaler ThreatLabz 2024 Encrypted Attacks Report, highlighting a dramatic rise in cyber threats delivered through encrypted channels. Between October 2023 and September 2024, over 87% of all threats were transmitted via HTTPS, marking a 10% increase from the previous year. This alarming trend underscores the growing sophistication of cybercriminals, particularly as they leverage artificial intelligence to enhance their tactics.

"With a significant share of threats now delivered over encrypted channels, organizations must adopt a zero trust architecture with TLS/SSL inspection at scale," stated Deepen Desai, Chief Security Officer at Zscaler. The report emphasizes that malware accounted for a staggering 86% of encrypted attacks, totaling 27.8 billion hits—a 19% year-over-year increase. Attackers are increasingly using encryption to mask malicious payloads, making detection more challenging.

The manufacturing sector emerged as the most targeted industry, suffering 42% of encrypted attacks, nearly three times that of the technology and communications sector. This surge is attributed to the rapid advancements in Industry 4.0, which have expanded the attack surface for cyber threats.

Geographically, the United States, India, and France were identified as the most frequently targeted nations, with the U.S. alone experiencing 11 billion encrypted attacks. The report also noted significant increases in web-based threats, including cryptomining and phishing, potentially fueled by the rise of generative AI technologies.

To combat these covert threats, Zscaler recommends organizations implement comprehensive security strategies, including inspecting all incoming encrypted traffic and leveraging AI-driven cloud sandboxes to isolate unknown attacks. As cyber threats evolve, the call for robust security measures has never been more urgent.

Cyber Warriors Conclave Chapter X — Beyond the Ballroom

Related articles

Recent articles

Russian Data Centers Enhance Security Measures Amid Increased Ukrainian Drone Threats

Russian data center operators are reportedly preparing to invest more in physical defenses as Moscow tightens security requirements for critical infrastructure amid ongoing Ukrainian...

Iran Expands Cyber Attacks on US, Experts Warn of Geopolitical Implications

Iran has reportedly intensified its cyber attacks on the United States, raising alarms among technology experts about the geopolitical implications of such actions. According...

CrowdStrike Launches Agentic Identity Provider to Secure AI Agent Identities

The rise of artificial intelligence (AI) agents is reshaping the landscape of identity management in cybersecurity. These agents, capable of executing code, accessing sensitive...

Threat Actors Exploit Microsoft Teams to Gain Enterprise-Wide Access via IT Support Impersonation

Microsoft Threat Intelligence has identified a human-operated intrusion campaign that exploits Microsoft Teams to impersonate IT support personnel, manipulating users into granting remote access....