---
title: "Organizations Face 100+ Hours of Battle Against Post-Delivery Email Threats, Cybersecurity News | DuoCircle"
description: "As widespread phishing attacks continue to escalate the global cyber threat potential."
image: "https://www.duocircle.com/images/og-default.png"
canonical: "https://www.duocircle.com/blog/announcements/cyber-security-news-update-week-23-of-2023/"
---

Quick Answer

Barracuda's 2023 spear-phishing report found that organizations spend more than 100 hours on average dealing with a single email-based threat after delivery. The data set covered 1,350 organizations and 50 billion emails across 3.5 million mailboxes. Half of the organizations surveyed had been hit by spear-phishing, and 24% had at least one email account compromised through account takeover. Remote workers are disproportionately affected: companies where more than half the workforce is remote saw higher rates of suspicious emails (12 per day versus 9) and slower detection. Common gaps include missing email authentication (SPF, DKIM, DMARC), no AI-driven detection for impersonation, and no automated incident response.

Share 

[ ](https://www.linkedin.com/sharing/share-offsite/?url=undefined%2Fblog%2Fannouncements%2Fcyber-security-news-update-week-23-of-2023%2F "Share on LinkedIn") [ ](https://twitter.com/intent/tweet?text=Organizations%20Face%20100%2B%20Hours%20of%20Battle%20Against%20Post-Delivery%20Email%20Threats%2C%20Cybersecurity%20News&url=undefined%2Fblog%2Fannouncements%2Fcyber-security-news-update-week-23-of-2023%2F "Share on X/Twitter") [ ](https://www.facebook.com/sharer/sharer.php?u=undefined%2Fblog%2Fannouncements%2Fcyber-security-news-update-week-23-of-2023%2F "Share on Facebook") [ ](https://reddit.com/submit?url=undefined%2Fblog%2Fannouncements%2Fcyber-security-news-update-week-23-of-2023%2F&title=Organizations%20Face%20100%2B%20Hours%20of%20Battle%20Against%20Post-Delivery%20Email%20Threats%2C%20Cybersecurity%20News "Share on Reddit") [ ](mailto:?subject=Organizations%20Face%20100%2B%20Hours%20of%20Battle%20Against%20Post-Delivery%20Email%20Threats%2C%20Cybersecurity%20News&body=Check out this article: undefined%2Fblog%2Fannouncements%2Fcyber-security-news-update-week-23-of-2023%2F "Share via Email") 

![cybersecurity](https://media.mailhop.org/duocircle/images/2023/06/Office-365-migration.jpg) 

_As widespread [phishing attacks](/resources/how-does-a-phishing-attack-work) continue to escalate the global cyber threat potential, new_ [_research_](https://www.barracuda.com/reports/spear-phishing-trends-2023) _reveals the sheer loss of productivity for the affected organizations._

Detecting email threats and taking necessary countermeasures rob organizations of their valuable work hours. A [study](https://www.barracuda.com/reports/spear-phishing-trends-2023) found that, on average, organizations need around 100 hours to identify, respond to, and take measures after the occurrence of an [email threat](/advanced-threat-defense). Further breaking up this equation, the threat detection process takes 43 hours for enterprises, while they need 56 hours to respond to the attack and take necessary countermeasures.

The report reveals that almost all organizations experiencing a [spear-phishing](/content/phishing-prevention/spear-phishing-attack) attempt in the last year faced adverse effects. These include _stolen data, malware infections, and damage to their reputation_. Among other alarming statistics, the report states that around 50% of the surveyed organizations were victims to spear phishing in 2022\. It led to compromised email accounts and **subsequent data breaches**. 

## How Comprehensive Was the Report?

The comprehensive report focuses on spear-phishing data and analysis derived from an extensive dataset comprising a staggering 50 billion emails from over 3.5 million mailboxes. Notably, this dataset includes nearly 30 million specimens of spear-phishing emails.

In addition to the robust data analysis, the professionals have suggested possible countermeasures to **mitigate the threat**. The research has been conducted by IT professionals from various organizational levels, spanning frontline workers to those in senior roles.

The survey encompasses 1,350 decision-makers across diverse industries in the United States, **EMEA (Europe, the Middle East, and Africa)**, and Asia-Pacific (APAC) regions. This comprehensive approach ensures that the report’s findings represent the global [cybersecurity](/) landscape.

By leveraging the combined power of survey insights, cybersecurity experts have come up with a holistic view of the current state of spear-phishing attacks. That enables organizations to understand the associated risks and develop **effective mitigation strategies**.

## The Widespread Impact of Spear-phishing Attacks

According to cybersecurity experts, spear phishing attacks have been highly successful in compromising their victims’ accounts. These attacks account for a staggering 66% of all [data breaches](https://www.csoonline.com/article/2130877/the-biggest-data-breaches-of-the-21st-century.html). Among the organizations analyzed, 22% had at least one email account compromised through an account takeover. It points to the urgent need for **robust defense mechanisms**.

[![spear phishing works](https://media.mailhop.org/duocircle/images/2023/06/office-365-migration-2.jpg)](https://media.mailhop.org/duocircle/images/2023/06/office-365-migration-2.jpg)

**How Does Spear Phishing Work?**

Spear phishing attacks leave a devastating impact on organizations. The report reveals that 55% of the victims reported their systems were infected with [malware](/resources/malware-and-its-defense-mechanism) or viruses. Besides, 49% reported sensitive data. Stolen login credentials affected 48% of the victims, while 39% of the organizations incurred direct financial losses.

Responding to these challenges and recovering lost data following the attacks remain significant for enterprises. On average, organizations need around 100 hours to identify, respond to, and remediate threats.

## Malicious Actors Targeting Remote Workers

With a more significant share of professionals working remotely in the new **WFH paradigm**, organizations are encountering increased risks associated with spear-phishing attacks. According to the report, organizations with 50% or more remote workforce report more [suspicious emails](https://www.businesstoday.in/technology/news/story/cybercriminals-exploit-chatgpt-hype-exercise-caution-with-suspicious-emails-links-385179-2023-06-12). On average, they receive _12 unsolicited emails daily_, compared to 9 for organizations with fewer remote workers.

The impact of phishing attempts lies beyond the **direct threat potential**. For most organizations with a remote workforce, detecting the threat can take 55 hours on average. Besides, they must channel 63 hours to respond to the threats and manage the consequences. Businesses having fewer remote workers can detect the threat in 36 hours and respond to the same in 51 hours.

## Investing in Advanced Cybersecurity Solutions

Considering the increasing threat potential for organizations with phishing instances on the rise, cybersecurity experts recommend advanced solutions to counter spear-phishing. Organizations must invest in account takeover **protection solutions** equipped with artificial intelligence capabilities.

As the attack models deployed by [threat actors](https://www.thehindu.com/news/cities/Kochi/threat-actors-do-not-have-access-to-entire-cowin-portal-claims-cybersecurity-start-up/article66961915.ece) continue to gain sophistication, organizations must adopt **advanced defense mechanisms**. AI-backed defense solutions prove to be more effective compared to traditional measures. With proper security measures in place, responding to attempts of [phishing](/content/phishing-prevention/what-is-phishing) or data breaches should take little time.

[![Cybersecurity Solutions](https://media.mailhop.org/duocircle/images/2023/06/buy-smtp-7521.jpg)](https://media.mailhop.org/duocircle/images/2023/06/buy-smtp-7521.jpg)

## What Do Organizations Need to Do?

As the impact of spear-phishing attacks continues to rise, global organizations need to strengthen their defense for [email security](https://www.channelweb.co.uk/news/4117707/barracuda-reveals-attacks-compromised-email-security-customers-ongoing). The spear-phishing trends report serves as a wake-up call for these enterprises. It highlights the need for channeling higher investments in advanced protection solutions for better **cybersecurity awareness**.

The secret to staying ahead of the adversaries lies in incorporating robust solutions and combating threats posed by spear-phishing attacks. This way, organizations can secure their _sensitive data, finances, and, most importantly, reputation._

## Final Words

The long-term adverse effects a successful [spear-phishing attack](/content/phishing-prevention/spear-phishing-attack) can have on an organization are well-known. However, it can cause immediate disruption of an organization’s productive activities, too, even when detected and blocked. The research results emphasize the **urgency for organizations** to bolster their email security strategies. Adopting advanced countermeasures against potential cybersecurity breaches can strengthen their lines of defense and enhance overall productivity.

## Topics

NewsSecurityUpdates 

![Brad Slavin](https://media.mailhop.org/dmarcreport/images/team/brad-slavin.jpg) 

Brad Slavin 

General Manager

General Manager at DuoCircle. Product strategy and commercial lead across the email security portfolio.

## Secure your email infrastructure

Protect, authenticate, and deliver. Contact our team to find the right solution.

[Contact Sales](/contact/) [Explore Products](/products/) 

## Related Articles

[  News 3m  Alert: Fix SPF & DKIM Settings For Your Email Forwarding Set Up Through Microsoft o365 SMTP Server Or Your Emails May End Up In Spam  Jul 20, 2021 ](/blog/announcements/alert-fix-spf-dkim-settings-for-your-email-forwarding-set-up-through-microsoft-o365-smtp-server-or-your-emails-may-end-up-in-spam/)[  News 6m  Cyber Security News Update, Week 1 of 2022  Jan 7, 2022 ](/blog/announcements/cyber-security-news-update-week-1-of-2022/)[  News 7m  Cybersecurity News Update, Week 1 of 2023  Jan 1, 2023 ](/blog/announcements/cyber-security-news-update-week-1-of-2023/)[  News 5m  EasyPark Data Breach, Ohio Lottery Cyberattack, GTA 5 Leak, Cybersecurity News \[December 25, 2023\]  Jan 4, 2024 ](/blog/announcements/cyber-security-news-update-week-1-of-2024/)

```json
{"@context":"https://schema.org","@type":"Organization","name":"DuoCircle LLC","url":"https://www.duocircle.com","logo":{"@type":"ImageObject","url":"https://www.duocircle.com/images/duocircle-logo.png"},"description":"DuoCircle is a portfolio of specialized email products covering protection, authentication, delivery, and routing. We deliver about 90% of category-leader capability at roughly half the price, backed by experts who own the outcome. Trusted by 50,000+ organizations since 2014.","subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}],"sameAs":["https://www.linkedin.com/company/duocircle","https://x.com/duocirclellc","https://www.facebook.com/duocirclellc","https://www.g2.com/products/phish-protection-by-duocircle/reviews","https://github.com/duocircle","https://www.crunchbase.com/organization/duocircle-llc"],"contactPoint":{"@type":"ContactPoint","contactType":"customer support","url":"https://support.duocircle.com"},"knowsAbout":["Email Security","Email Authentication","SPF","DKIM","DMARC","Phishing Protection","Spam Filtering","SMTP Relay","Email Deliverability","Email Forwarding"]}
```

```json
{"@context":"https://schema.org","@type":"WebSite","name":"DuoCircle LLC","url":"https://www.duocircle.com","description":"DuoCircle is a portfolio of specialized email products covering protection, authentication, delivery, and routing. We deliver about 90% of category-leader capability at roughly half the price, backed by experts who own the outcome. Trusted by 50,000+ organizations since 2014.","publisher":{"@type":"Organization","name":"DuoCircle LLC","url":"https://www.duocircle.com","logo":{"@type":"ImageObject","url":"https://www.duocircle.com/images/duocircle-logo.png"},"description":"DuoCircle is a portfolio of specialized email products covering protection, authentication, delivery, and routing. We deliver about 90% of category-leader capability at roughly half the price, backed by experts who own the outcome. Trusted by 50,000+ organizations since 2014.","subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}]}}
```

```json
[{"@context":"https://schema.org","@type":"BlogPosting","headline":"Organizations Face 100+ Hours of Battle Against Post-Delivery Email Threats, Cybersecurity News","description":"As widespread phishing attacks continue to escalate the global cyber threat potential.","url":"https://www.duocircle.com/blog/announcements/cyber-security-news-update-week-23-of-2023/","datePublished":"2023-06-05T12:01:03.000Z","dateModified":"2025-05-21T12:32:45.000Z","dateCreated":"2023-06-05T12:01:03.000Z","author":{"@type":"Person","@id":"https://www.duocircle.com/authors/brad-slavin/#person","name":"Brad Slavin","url":"https://www.duocircle.com/authors/brad-slavin/","jobTitle":"General Manager","description":"Brad Slavin runs DuoCircle, the company behind DMARC Report, AutoSPF, Phish Protection, and Mailhop. His focus is product strategy, customer relationships, and the commercial and compliance side of email authentication (DPAs, SLAs, enterprise procurement).","image":"https://media.mailhop.org/dmarcreport/images/team/brad-slavin.jpg","knowsAbout":["Email Security Strategy","SaaS Product Management","Enterprise Compliance","Customer Success","Email Deliverability Business"],"worksFor":{"@type":"Organization","name":"DuoCircle LLC","url":"https://www.duocircle.com"},"sameAs":["https://www.linkedin.com/in/bradslavin"]},"publisher":{"@type":"Organization","name":"DuoCircle LLC","url":"https://www.duocircle.com","logo":{"@type":"ImageObject","url":"https://www.duocircle.com/images/duocircle-logo.png"},"description":"DuoCircle is a portfolio of specialized email products covering protection, authentication, delivery, and routing. We deliver about 90% of category-leader capability at roughly half the price, backed by experts who own the outcome. Trusted by 50,000+ organizations since 2014.","subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}]},"mainEntityOfPage":{"@type":"WebPage","@id":"https://www.duocircle.com/blog/announcements/cyber-security-news-update-week-23-of-2023/"},"articleSection":"announcements","keywords":"News, Security, Updates","wordCount":803,"image":{"@type":"ImageObject","url":"https://media.mailhop.org/duocircle/images/2023/06/Office-365-migration.jpg","caption":"cybersecurity","width":900,"height":600},"speakable":{"@type":"SpeakableSpecification","cssSelector":[".answer-block","h1"]}},{"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Blog","item":"https://www.duocircle.com/blog/"},{"@type":"ListItem","position":2,"name":"News"},{"@type":"ListItem","position":3,"name":"Organizations Face 100+ Hours of Battle Against Post-Delivery Email Threats, Cybersecurity News","item":"https://www.duocircle.com/blog/announcements/cyber-security-news-update-week-23-of-2023/"}]}]
```

```json
{"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://www.duocircle.com/"},{"@type":"ListItem","position":2,"name":"Blog","item":"https://www.duocircle.com/blog/"},{"@type":"ListItem","position":3,"name":"News","item":"https://www.duocircle.comundefined"},{"@type":"ListItem","position":4,"name":"Organizations Face 100+ Hours of Battle Against Post-Delivery Email Threats, Cybersecurity News","item":"https://www.duocircle.com/blog/announcements/cyber-security-news-update-week-23-of-2023/"}]}
```

```json
{"@context":"https://schema.org","@type":"BlogPosting","headline":"Organizations Face 100+ Hours of Battle Against Post-Delivery Email Threats, Cybersecurity News","description":"As widespread phishing attacks continue to escalate the global cyber threat potential.","url":"https://www.duocircle.com/blog/announcements/cyber-security-news-update-week-23-of-2023/","datePublished":"2023-06-05T12:01:03.000Z","dateModified":"2025-05-21T12:32:45.000Z","dateCreated":"2023-06-05T12:01:03.000Z","author":{"@type":"Person","@id":"https://www.duocircle.com/authors/brad-slavin/#person","name":"Brad Slavin","url":"https://www.duocircle.com/authors/brad-slavin/","jobTitle":"General Manager","description":"Brad Slavin runs DuoCircle, the company behind DMARC Report, AutoSPF, Phish Protection, and Mailhop. His focus is product strategy, customer relationships, and the commercial and compliance side of email authentication (DPAs, SLAs, enterprise procurement).","image":"https://media.mailhop.org/dmarcreport/images/team/brad-slavin.jpg","knowsAbout":["Email Security Strategy","SaaS Product Management","Enterprise Compliance","Customer Success","Email Deliverability Business"],"worksFor":{"@type":"Organization","name":"DuoCircle LLC","url":"https://www.duocircle.com"},"sameAs":["https://www.linkedin.com/in/bradslavin"]},"publisher":{"@type":"Organization","name":"DuoCircle LLC","url":"https://www.duocircle.com","logo":{"@type":"ImageObject","url":"https://www.duocircle.com/images/duocircle-logo.png"},"description":"DuoCircle is a portfolio of specialized email products covering protection, authentication, delivery, and routing. We deliver about 90% of category-leader capability at roughly half the price, backed by experts who own the outcome. Trusted by 50,000+ organizations since 2014.","subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}]},"mainEntityOfPage":{"@type":"WebPage","@id":"https://www.duocircle.com/blog/announcements/cyber-security-news-update-week-23-of-2023/"},"articleSection":"announcements","keywords":"News, Security, Updates","wordCount":803,"image":{"@type":"ImageObject","url":"https://media.mailhop.org/duocircle/images/2023/06/Office-365-migration.jpg","caption":"cybersecurity","width":900,"height":600},"speakable":{"@type":"SpeakableSpecification","cssSelector":[".answer-block","h1"]}}
```