More than 14,277,163 pieces of spam, 9,992 emails containing dangerous file types, and 849 unknown emails with malware attachments were missed by the incumbent providers and delivered to users' inboxes among respondents in a survey in Mimecast's latest ESRA report. Most notably, 11,653 known emails with malicious attachments passed through these systems, an increase of 532 percent in comparison to last quarter's assessment.
“Mimecast's ESRA is aiming to establish a standard of transparency that raises the bar for all security vendors helping organisations pinpoint weaknesses in their defenses,” said Matthew Gardiner, cyber-security strategist at Mimecast. “Emails ranging from opportunistic spam, targeted impersonation attacks and unknown malware are getting through incumbent email security systems. The security system of one primary cloud email platform missed 76.6 percent of the aggregate impersonation attacks while another global security vendor missed the 83.4 percent of the “known” malware attachments.”
Mimecast recently conducted research with Vanson Bourne on the state of organisations' cyber-security, what attacks they've seen increase, and their level of confidence to thwart these evolving attacks. Consistent with the Mimecast ESRA report, unsurprisingly, organisations are forecasting a challenging future, with nearly 60 percent of respondents saying their organisation is likely to suffer a negative business impact because of an email-borne attack in 2018.
Despite efforts, email-borne attacks are also on the rise, and a clear majority of Vanson Bourne respondents have seen untargeted phishing attacks (94 percent) or targeted spear-phishing attacks (92 percent) with malicious links in the past 12 months, with the volume of both attacks increasing 56 percent over the last year.