Topic starter
24/10/2026 8:52 pm
TL;DR: Blended attack activity is the article's central finding, because Nozomi Networks Labs says 2023 threats are combining hacktivist, criminal and nation-state tradecraft. OT and IoT environments need faster behaviour-led detection and tighter segmentation when labels do not explain the risk.
Editorial analysis by NHI Mgmt Group, based on content published by Nozomi Networks: “Be On the Lookout for These New Cybersecurity Threats in 2023”.
Key questions
Q: What makes unsupported medical devices so difficult to secure?
A: Unsupported devices are hard to secure because their vulnerabilities persist after vendor support ends, while the surrounding clinical workflow still depends on their data and availability.
Q: Why do AI-generated phishing attacks change human identity controls?
A: They reduce the value of message inspection as a control because attackers can now generate persuasive, context-aware lures at scale.
Q: How should security teams respond when attacker tactics blend criminal and nation-state tradecraft?
A: Treat attribution as useful context, not the first control decision.
Practitioner guidance
- Strengthen detection for hybrid intrusion patterns Tune monitoring to catch campaigns that mix criminal extortion, ideological disruption and state tradecraft in the same incident path.
- Inventory unsupported medical devices Identify legacy devices and the monitoring systems they feed so you can assess where unsupported software creates safety and availability risk.
- Harden identity controls against AI-assisted phishing Prioritise phishing-resistant authentication, account recovery governance and user verification steps that do not rely on message tone or grammar.
Bottom line: The article frames 2023 threat activity as a convergence problem, not a single new malware or exploit trend.
Glossary terms: Hybrid Threat Tactics, Store now, decrypt later, Medical Device Security, AI-Driven Phishing Tests
Explore further
View Full Forum → | NHI Foundation Course → | Our Services → | Read the full analysis →
This topic was modified 6 days ago by NHI Mgmt Group
25/10/2026 11:12 am
Hybrid threat tactics create an attribution debt problem: the more attacker methods converge, the harder it becomes to rely on static labels for response prioritisation. Organisations that still separate criminal, hacktivist and state activity into different operational paths will miss the shared control failures underneath them. The practical shift is toward behaviour-led detection and impact-led escalation, especially in environments where OT disruption can be achieved through ordinary intrusion methods.
A question worth separating out:
Q: What is the difference between cyber insurance and cyber resilience?
A: Cyber insurance transfers some financial loss from a cyber incident, while cyber resilience is the organisation’s ability to withstand, respond to, and recover from it. Insurance can help with costs after an event, but it does not prevent outages or data loss. Resilience depends on controls, backups, recovery testing, and incident readiness.
👉 Read our full editorial: 2023 cyber threats point to hybrid tactics, AI abuse and OT risk
This post was modified 6 days ago by NHI Mgmt Group