Opinion: Don’t Be Blinded by APTs

This industry perspective contends that small- and mid-sized organizations often overemphasize APTs due to sensational coverage and should instead prioritize protection of critical assets by identifying what assets matter, which adversaries are likely to target them, and which TTPs are relevant; practical recommendations include cross-department asset identification, adversary-focused intelligence, and concentrating resources on common threats such as phishing, ransomware, and business email compromise.