After the cyber attacks timelines (part I and part II), it’s time to publish the statistics of November 2022 where I have collected and analyzed 272 events, a value slightly lower than October, but in line with the latest months, which confirms the overall high level of cyber activity that is characterizing the end of this 2022.
Cyber Crime leads the Motivations chart, and the soar in ransomware attacks push its percentage to 86% from 79.5% in October. The operations driven by Cyber Espionage drop to 6.3% from 9.7%. Hacktivism showed a light decrease to 5.1% from 5.6% and is back to the values of September. Events motivated by Cyber Warfare got a tiny 1.5%, down from 1.5% of the previous month.
Malware is always on top of the Attack Techniques, and once again the growing number of ransomware attacks push its percentage to 43.8% from 34.7%, ahead (again) of Account Takeovers, down to 14% from 22.8%, and Targeted Attacks that reduced their percentage of nearly a half, to 4.4% from 8.2%. Nearly the same value of Vulnerabilities that went down to 4% from 6.7%.
The Target Distribution chart is led, once again, by campaigns against Multiple Organizations, up to 19.1% from 16.8% of October, ahead of campaigns against individuals (17.3% vs. 9% in October) and Healthcare, which takes the third place with 11% vs 13.4% and confirms to be a top target, nearly the same value of Governments (10.7%, slightly down from 11.6%).
Check out the interactive charts and the statistics, also available as an infographic.
As always bear in mind that the sample refers exclusively to the attacks included in my timelines, available from public sources such as blogs and news sites. Obviously the sample cannot be complete, but only aims to provide an high level overview of the threat landscape.
| Geo Map November 2022 |
Finally, please support my work, sharing the content, and of course follow @paulsparrows on Twitter for the latest updates.
Support my work! Make a donation!
Rogue AI AgentsAI agents are escaping sandboxes, misusing credentials and acting without authorization. This live dashboard tracks every reported incident on a horizontal timeline, with charts showing which AI companies and agents are involved, the techniques used and how they got in. It updates automatically as new ...
Mega Breaches in 2026Here’s a collection of the main mega breaches (that is data breaches with more than one million records compromised and possibly leaked) during 2026. The information is derived from the cyber attacks timelines that I published, normally, on a bi-weekly basis.
October 2026 Cyber Attacks TimelineA live view of the month's vetted cyber incidents, updated as new events are confirmed. Explore the timeline, filter by attack type, and see motivations, techniques, initial access methods, targeted sectors and target countries on an interactive map.
AI-Assisted Malicious CampaignsIn this blog post I am collecting the campaigns that show evidence of being AI-generated, or make use of AI tools to increase their impact. As always I will continue to update the list as soon as new campaigns emerge.
September 2026 Cyber Attacks StatisticsSeptember 2026 recorded 182 cyber incidents, and Cyber Crime drove roughly three in four of them (73.9%). Malware was the top attack vector at 27.8%, exploitation of public-facing applications led initial access at 28.9%, and Information & Communication was the most targeted sector. Explore the ...
