Feds saw spike in cyberattacks, improved detection – FISMA report

TLDR:

According to the FISMA report, federal agencies experienced a nearly 10% increase in cyberattacks in FY2023, with 11 major incidents reported. The rise in attacks was mainly attributed to improved detection capabilities. Email phishing attacks doubled, and attrition attacks saw a significant surge. The report also highlights the need for increased cybersecurity funding for federal agencies.

Summary:

In FY2023, federal agencies reported 32,211 cyber incidents to CISA, marking a 10% increase from the previous year. The most notable rise was observed in attrition attacks and email phishing attacks, indicating a growing need for improved cybersecurity measures. Agencies’ efforts in enhancing detection capabilities have attributed to the increase in reported incidents, with 11 major incidents categorized in the report.

The Departments of Health and Human Services, Treasury, and Justice were among those affected by major cyber incidents, emphasizing the need for robust cybersecurity measures across all government agencies. The report also highlights the importance of increased cybersecurity funding, with the White House proposing a 10% increase in cybersecurity funds for federal agencies in its 2025 budget request.

Overall, the FISMA report underscores the evolving cybersecurity landscape and the ongoing threats faced by federal agencies. It emphasizes the need for continuous improvement in detection and mitigation strategies to protect sensitive data and critical infrastructure from cyber threats.