Risk Management April 18, 2023

Securing your remote workforce: How to reduce cyber threats

4 min read - The debates have (mostly) stopped about whether remote work is here to stay. For many people, it’s just the way we work today. However, even three years later, cybersecurity around remote work is still a top concern. Both companies and…

Risk Management February 24, 2023

With 40% of Log4j downloads still vulnerable, security retrofitting needs to be a full-time job

4 min read - Vulnerabilities like Log4j remain responsible for security breaches a full year after the discovery of the flaw. In the months after widespread reporting about the vulnerability, 40% of Log4j downloads remained vulnerable to exploitation. Rapid response — by both security…

Incident Response January 27, 2023

5 golden rules of threat hunting

6 min read - When a breach is uncovered, the operational cadence includes threat detection, quarantine and termination. While all stages can occur within the first hour of discovery, in some cases, that’s already too late. Security operations center (SOC) teams monitor and hunt…

Incident Response December 14, 2022

5 holiday cybersecurity tips that make a real impact

4 min read - Tired of cybersecurity tips that don’t really make an impact? This post is for you. The year is winding down to an end. Everyone, including security teams, is busy and preoccupied. Cyber actors know this and are gearing up to…

News July 27, 2022

FIN7 threat actors add ransomware to their arsenal

2 min read - FIN7, one of the most prolific cyber criminal gangs in the world, has added ransomware to its attack arsenal. The organization gained infamy in 2014 after it stole a total of $1 billion from over 100 companies around the world.…

News July 13, 2022

Feds offer $5 million for information on North Korean cyber threats

2 min read - North Korean-based actors have allegedly run company breaches, crypto crime, weapons sales, money laundering, human rights abuses and WMD program funding. Given the high stakes involved, the U.S. Department of State Rewards for Justice program is offering $5 million for…

News June 22, 2022

CISA warns of Russia-sponsored threats to critical infrastructure

2 min read - Cybersecurity authorities from the United States, Australia, Canada, New Zealand and the U.K. recently released a joint Cybersecurity Advisory warning of increased cyber threats related to Russia’s invasion of Ukraine. As per the alert, attacks may occur as a response…

News October 6, 2021

CISA Creates JCDC Agency for U.S. Cyber Defense Operations Plans

2 min read - The Cybersecurity and Infrastructure Security Agency (CISA) announced the creation of a new agency on Aug. 6 to lead the development and execution of U.S. cyber defense plans. CISA dubbed the new agency the Joint Cyber Defense Collaborative (JCDC). Its…

Advanced Threats September 3, 2021

Fighting Cyber Threats With Open-Source Tools and Open Standards

7 min read - Detecting cyber threats is usually the first critical step in the mitigation of cyber attacks. Common means to achieve this goal are rules or analytics that track network and system behaviors and raise alerts when potentially malicious attacks are identified.…

Advanced Threats August 17, 2021

Analysis of Diavol ransomware reveals possible link to TrickBot gang

7 min read - Ransomware has become the number one cyber threat to organizations, making up nearly 25% of attacks IBM X-Force Incident Response remediated in 2020. Ransomware is making headlines on a regular basis due to the high impact of certain attacks on…