Intelligence & Analytics November 10, 2021

Breach and Attack Simulation: Hack Yourself to a More Secure Future

4 min read - Getting breached is the surest way to learn your organization’s cybersecurity vulnerabilities. And that’s why you need to hack yourself before threat actors do. A cyber breach and attack simulation, also called red teaming, is best to understand vulnerabilities in…

Intelligence & Analytics November 2, 2021

Taking Threat Detection and Response to the Next Level with Open XDR

6 min read - The challenges facing today’s security industry can easily be described as a perfect storm: increasingly sophisticated cyber attackers combined with the proliferation of security tools to cover an expanding attack surface driven by remote work and cloud adoption. These dynamics…

Incident Response October 22, 2021

How the 2011 DigiNotar Attacks Changed Cybersecurity for the Next Decade

4 min read - The DigiNotar attack in 2011 set itself apart because it was an attack on the cybersecurity industry itself. Most attacks are on a single company. But this one shook trust in cybersecurity tools and how users decide whom to trust…

CISO October 18, 2021

Cybersecurity Careers: Awareness, Opportunities and Retention

3 min read - This week, Cybersecurity Awareness Month focuses on cybersecurity careers and jobs in the industry, with a simple tagline: Explore. Experience. Share. Check out NIST’s workshops and toolkits for Career Week. For cybersecurity and IT workers, if you want to position…

Identity & Access October 14, 2021

Roundup: Customer Data and Retail Security in the News

3 min read - More people are shopping online than ever before due to the pandemic. Therefore, businesses had to take extra steps to protect customer data, combat fraud and implement the latest in online safety. In 2020, e-commerce retail sales jumped from 16%…

Advanced Threats October 6, 2021

Phishing Attacks Are Top Cyber Crime Threat, Easier Than Ever to Create and Deploy

4 min read - Why is one of cyber crime’s oldest threats still going strong? The Anti-Phishing Working Group (APWG) reports that January 2021 marked an unprecedented high in the APWG’s records, with over 245,771 phishing attacks in one month. IBM X-Force’s 2021 Threat…

Incident Response September 21, 2021

Cybersecurity Solutions to Know in 2021: Open Source and Scaling Up

4 min read - Speed is of the essence in digital defense. As the latest Ponemon Institute Cost of a Data Breach Report makes clear, businesses and agencies that are able to respond to and contain an incident rapidly will save millions over their slower…

Security Services September 17, 2021

How to protect against deepfake attacks and extortion

2 min read - Cybersecurity professionals are already losing sleep over data breaches and how to best protect their employers from attacks. Now they have another nightmare to stress over — how to spot a deepfake. Deepfakes are different because attackers can easily use…

Advanced Threats September 3, 2021

Fighting Cyber Threats With Open-Source Tools and Open Standards

7 min read - Detecting cyber threats is usually the first critical step in the mitigation of cyber attacks. Common means to achieve this goal are rules or analytics that track network and system behaviors and raise alerts when potentially malicious attacks are identified.…

Software Vulnerabilities August 23, 2021

SSDF: The Key to Defending Against Supply Chain Cyberattacks

4 min read - For reasons we all know, software supply chain attacks took on new meaning near the end of 2020. This hasn’t changed over this year. One of the best modern ways to combat these cyberattacks is to integrate a secure software…