#BHUSA: Only 22% of Firms Have Mature Threat Intelligence Programs

Only 22% of organizations have achieved a fully matured threat intelligence program, revealed a new report by cybersecurity solutions provider OPSWAT.

The company presented the findings at Black Hat USA on August 9 in Las Vegas. The OPSWAT Threat Intelligence Survey was conducted among more than 300 IT professionals from organizations with at least 50 employees specializing in malware detection and response.

The report highlights a notable trend, revealing that a significant majority (62%) of the surveyed professionals recognize the imperative for further investments in both advanced tools and refined processes.

Common challenges highlighted by the survey include the difficulty in detecting both known and unknown malware (68%), struggling with the limited effectiveness of signature-based solutions (67%) and dealing with a fragmented array of security tools (54%).

The survey’s insights also shed light on the current landscape of artificial intelligence (AI) adoption in threat detection. Only 11% of respondents have integrated AI into their threat detection strategies. In comparison, 56% of them express a positive outlook on the future potential of AI in bolstering threat detection efforts. 

Conversely, 27% retain a degree of skepticism, highlighting a cautious attitude that reflects ongoing discussions around AI’s practical application and limitations in the field of cybersecurity.

Read more about AI-powered security: Why Relying on AI for Automated Detection and Response is Dangerous

Phishing URLs and emails were identified as primary concerns for file type and delivery methods, with approximately half of survey participants emphasizing the significance of advanced security measures like Deep Content Disarm and Reconstruction (CDR), sandboxing and link reputation checks.

“Threat intelligence plays a crucial role in safeguarding critical assets,” said Jan Miller, CTO of threat analysis at OPSWAT.

“Understanding the evolving threat landscape empowers organizations to stay one step ahead of malicious actors, and in this rapidly changing cybersecurity landscape, it becomes the critical strategic advantage.”