Risk Management August 25, 2022

Black Hat SEO: Is Someone Phishing With Your Site Domain?

5 min read - Search engine optimization (SEO) is a long game. Improving your website to rank higher on search engine results pages helps you attract more traffic. Plus, it helps build a trustworthy reputation. But, some people want to take shortcuts by using…

Software Vulnerabilities August 9, 2022

Controlling the Source: Abusing Source Code Management Systems

13 min read - For full details on this research, see the X-Force Red whitepaper “Controlling the Source: Abusing Source Code Management Systems”. This material is also being presented at Black Hat USA 2022. Source Code Management (SCM) systems play a vital role within…

Advanced Threats August 2, 2022

Black Hat 2022 Sneak Peek: How to Build a Threat Hunting Program

4 min read - You may recall my previous blog post about how our X-Force veteran threat hunter Neil Wyler (a.k.a “Grifter”) discovered nation-state attackers exfiltrating unencrypted, personally identifiable information (PII) from a company’s network, unbeknownst to the security team. The post highlighted why…

Mobile Security August 4, 2021

ITG18: Operational Security Errors Continue to Plague Sizable Iranian Threat Group

5 min read - This blog supplements a Black Hat USA 2021 talk given August 2021.  IBM Security X-Force threat intelligence researchers continue to track the infrastructure and activity of a suspected Iranian threat group ITG18. This group’s tactics, techniques and procedures(TTPs) overlap with…

CISO December 16, 2019

15 Can’t-Miss Cybersecurity Conferences in 2020: Physical and Virtual Industry Events

6 min read - Improve your ongoing education plan for next year by committing to attend some of the best cybersecurity conferences in 2020, including RSAC, BSides, THINK, Black Hat and more.

News August 16, 2019

7 Can’t-Miss Cybersecurity Lessons From Black Hat USA and Vegas Security Week

5 min read - Black Hat USA and DEF CON revealed some shocking developments in IoT and biometric security, providing important cybersecurity lessons for enterprise security professionals.

Advanced Threats August 8, 2019

From Backhoes to Operating Systems: The Top Five ATM Security Weaknesses

6 min read - Here are the top five ATM security vulnerabilities that X-Force Red, IBM Security's team of veteran hackers, has uncovered during its many years of performing ATM penetration tests.

Data Protection August 6, 2019

Top Five Security Focus Areas for Mainframes

5 min read - Given trends like data center consolidation, hybrid cloud models and new designs that allow mainframes to operate in traditional environments, what better time to reevaluate your mainframe security?

CISO January 18, 2019

10 Cybersecurity Conference Trips You Should Make Time for This Year

3 min read - Not sure where to distribute IT budgets for ideal returns? Here's a roundup of the top 10 cybersecurity conference trips to make time for this year.

Endpoint August 20, 2018

Stories From the Edge of IoT Security: Threat Demos From Black Hat and DEF CON

4 min read - At Black Hat 2018 and DEF CON 26, experts shared insights about IoT security risks and vulnerabilities and offered advice to help organizations and consumers navigate our increasingly connected world.