Patrick Sullivan, CTO for security strategy at Akamai, said this type of cyberattack is becoming more common following the successes that cybercriminals collectively known as Magecart groups have had attacking shopping carts on e-commerce sites.
Many of those attacks are also polymorphic, as cybercriminals are becoming more adept at exploiting vulnerabilities to launch multiple types of attacks at the same time.
That issue is one of the primary reasons for relying on a content delivery network (CDN) to deploy web applications that are frequently targeted by cybercriminals. In addition to improving their performance, a CDN isolates web applications from the rest of the enterprise, thereby reducing the chances malware will spread. Providers of CDNs such as Akamai generally also have more cybersecurity tools and services available to secure those applications.
Of course, there’s no such thing as perfect security. Organizations that employ CDNs still need to invest in developing their own cybersecurity skills and expertise. However, given the general scarcity of cybersecurity expertise, a provider of a CDN can prove to be a crucial ally at a time when cyberattacks continue to increase in both volume and severity.