"Global Attacker Dwell Time Drops to Just 24 Days"

Researchers from FireEye conducted a new study where they analyzed targeted attack activity between October 1, 2019, and September 30, 2020. The researchers compiled their findings in a report called M-Trends 2021.  The researchers found that 59% of organizations detected attackers within their environments over the period, a 12-percentage point increase on the previous year.  The speed at which they did so also increased: dwell time for attackers inside corporate networks fell below a month for the first time in the report's history, with the median global figure now at 24 days. It's more than twice as fast as the previous year (56 days) and shows that detection and response are moving in the right direction. When the report was first published in 2011, it took firms 416 days to detect adversaries within their environments.  In the Americas, dwell time dropped from 60 days in 2019 to just 17 days last year. The researchers stated that the major factor contributing to the increased proportion of incidents with dwell times of 30 days or fewer is the continued surge in the proportion of investigations that involved ransomware, which rose to 25% in 2020 from 14% in 2019. 

Infosecurity reports: "Global Attacker Dwell Time Drops to Just 24 Days"