The Rise of IPv6 in Cybercriminal Activities is Highlighted in CrowdSec's New Cybersecurity Majority Report.

With the help of the combined efforts of its thousands of users, CrowdSec, the industry-leading open source and collaborative cybersecurity company, today released its Q2 2023 Majority Report, a thorough community-driven data report. The report's main conclusions centre on the growth of IPv6 and the significance of VPNs for cybercrime.

The CrowdSec Majority Report compiles insightful information from CrowdSec's open source network and provides data on some of the most significant global cybersecurity trends and threats. CrowdSec will discuss information from this report at Black Hat USA 2023.

The CrowdSec Majority Report leverages the strength of CrowdSec's extensive user base, comprising individuals, organizations, and cybersecurity experts dedicated to fortifying their defenses against emerging threats. By harnessing the insights collected by this community, the CrowdSec Majority Report shows that:

  • IPv6 represents 20% of reported malicious IPs. With such rapid high adoption, it was inevitable that IPv6 eventually started registering on cybersecurity radars. For October 2022–June 2023, the CrowdSec network detected increased new threats linked to IPv6 addresses.

  • Only 5% of reported IPs are flagged as VPN or proxy users. VPN's rise to popularity over the past few years sounded the alarm for many organizations. However, contrary to popular belief, data collected by the CrowdSec network indicates that VPNs and proxies play a far less significant role in cybercriminal activities.

  • The number of compromised assets is not the most accurate method of evaluating an Autonomous System (AS). The size of operators varies greatly, creating a discrepancy when comparing big operators to small. Though big operators inevitably receive a greater number of reports related to malicious IPs, smaller operators with fewer affiliated IPs — therefore receiving fewer reports — may be hosting riskier services.

  • Malevolent Duration (MD) is a more accurate metric for evaluating AS. This refers to the number of days for which users report a malicious IP to the operator. The average MD of all the IPs in the same AS indicates the operator's due diligence when it comes to identifying and dealing with compromised assets.

  • Third-party reports of infected machines play a significant role. The ability to quickly deal with infected machines reported by third parties within a network, as well as proactively identifying infected machines based on behavioral patterns, significantly impacts how long a machine stays infected.

  • Low MD translates to a lower risk for a business to inherit a machine that has been flagged as malevolent. By extension, this also minimizes the risk of a legitimate business asset being preemptively blocked by partners, prospects, or potential customers.

The CrowdSec Majority Report is an illustration of the insightful information that the CrowdSec community can offer in a threat environment that is constantly evolving. Users can take preventative measures to defend themselves against cyberattacks thanks to the continuous input from the CrowdSec community, which enables quick detection and response to emerging threats. Users of CrowdSec defend one another by pooling their collective knowledge to form a strong front against bad actors.

Philippe Humeau, CEO and co-founder of CrowdSec, stated that "The Majority Report serves as a testimony to the power of crowdsourced data." We produced this report to give the sector the threat intelligence it needs to identify malicious activity and stop impending cyberattacks. You can find proof of the CrowdSec network's effectiveness in identifying and blocking malicious IPs before they have a chance to compromise your system in the Majority Report.

Visit CrowdSec.net . To learn more about how CrowdSec is defining the future of proactive and collaborative cybersecurity, stop by booth 2850 at Black Hat USA 2023, or join CrowdSec CEO Philippe Humeau at the Omdia Analyst Summit on August 8 where he will be discussing the Acronym Soup of Cybersecurity.

Got a news tip for our journalists? Share it with us anonymously here.

Send press releases to [email protected]. Other ways to contact us. Editorially, we may rewrite headlines and descriptions.

Recommend Redwires AU: Accessible News For Young Cybersecurity Aussies

Redwires AU provides Young Australians with easily accessible, curated cybersecurity news.

Before you go..

You can get RedWires AU for free right now. Your donation, no matter how big or small, will help us keep doing honest journalism.

The readers of Redwires AU are the engine that drives our publication. Add your support to the effort to create a sustainable future for journalism that does not make compromises in the AU.

In the world we live in now, accurate and thorough reporting and analysis are becoming more and more critical. To stop the spread of false information, it's essential that everyone in Australia has access to good reporting.

The Redwires AU contributes to society by opening up access to information and resources for all people, rather than just a select few.

Our only goal is to educate the general public more thoroughly. If you believe in what we're trying to accomplish here, please consider making a contribution right away to ensure our success in the years to come.

Upgrade your subscription to get the most out of it. Join the growing number of people around the world who believe in the power of independent media.