{"id":25928,"date":"2023-09-11T15:33:00","date_gmt":"2023-09-11T15:33:00","guid":{"rendered":"https:\/\/nsfocusglobal.com\/?p=25928"},"modified":"2026-04-17T18:07:40","modified_gmt":"2026-04-17T18:07:40","slug":"insights-from-attack-and-defense-drills-strategies-and-resilience","status":"publish","type":"post","link":"https:\/\/nsfocusglobal.com\/pt-br\/insights-from-attack-and-defense-drills-strategies-and-resilience\/","title":{"rendered":"Insights from Attack and Defense Drills: Strategies and Resilience"},"content":{"rendered":"\n

Recently, NSFOCUS SOC team summarized the findings from attack and defense drills in the first half of 2023. In these smokeless battles, the attackers advanced with aggressive strategies, while the defenders relied on comprehensive defense systems, taking measures from protecting, monitoring to tracing, and resisting every attempt to breach their defenses.<\/p>\n\n\n\n

Vulnerability and Asset Impact Analysis<\/h2>\n\n\n\n

During these exercises, NSFOCUS SOC team detected and confirmed hundreds of actively exploited vulnerabilities. Zero-day and one-day vulnerabilities increased compared to previous years, but N-day remained dominant.<\/p>\n\n\n

\n
\"Red<\/a><\/figure>\n<\/div>\n\n\n

<\/p>\n\n\n\n

The Office Automation software and boundary network products were primary targets for vulnerability discovery, accounting for 56%.<\/p>\n\n\n

\n
\"Red<\/a><\/figure>\n<\/div>\n\n\n

<\/p>\n\n\n\n

Many vulnerabilities exposed this year were already known, and vendors had released patches. However, customers who didn’t update were significantly affected.<\/p>\n\n\n

\n
\"Red<\/a><\/figure>\n<\/div>\n\n\n

Defense Strategy in Practice<\/h2>\n\n\n\n

Certain tactical characteristics were observed for both attackers and defenders, indicating areas of focus for both parties in the near future:<\/p>\n\n\n\n