Incident Response January 27, 2023

5 Golden Rules of Threat Hunting

6 min read - When a breach is uncovered, the operational cadence includes threat detection, quarantine and termination. While all stages can occur within the first hour of discovery, in some cases, that’s already too late. Security operations center (SOC) teams monitor and hunt…

Incident Response December 14, 2022

5 Holiday Cybersecurity Tips That Make a Real Impact

4 min read - Tired of cybersecurity tips that don’t really make an impact? This post is for you. The year is winding down to an end. Everyone, including security teams, is busy and preoccupied. Cyber actors know this and are gearing up to…

News July 27, 2022

FIN7 Threat Actors Add Ransomware to Their Arsenal

2 min read - FIN7, one of the most prolific cyber criminal gangs in the world, has added ransomware to its attack arsenal. The organization gained infamy in 2014 after it stole a total of $1 billion from over 100 companies around the world.…

News July 13, 2022

Feds Offer $5 Million for Information on North Korean Cyber Threats

2 min read - North Korean-based actors have allegedly run company breaches, crypto crime, weapons sales, money laundering, human rights abuses and WMD program funding. Given the high stakes involved, the U.S. Department of State Rewards for Justice program is offering $5 million for…

News June 22, 2022

CISA Warns of Russia-Sponsored Threats to Critical Infrastructure

2 min read - Cybersecurity authorities from the United States, Australia, Canada, New Zealand and the U.K. recently released a joint Cybersecurity Advisory warning of increased cyber threats related to Russia’s invasion of Ukraine. As per the alert, attacks may occur as a response…

News October 6, 2021

CISA Creates JCDC Agency for U.S. Cyber Defense Operations Plans

2 min read - The Cybersecurity and Infrastructure Security Agency (CISA) announced the creation of a new agency on Aug. 6 to lead the development and execution of U.S. cyber defense plans. CISA dubbed the new agency the Joint Cyber Defense Collaborative (JCDC). Its…

Advanced Threats September 3, 2021

Fighting Cyber Threats With Open-Source Tools and Open Standards

7 min read - Detecting cyber threats is usually the first critical step in the mitigation of cyber attacks. Common means to achieve this goal are rules or analytics that track network and system behaviors and raise alerts when potentially malicious attacks are identified.…

Incident Response August 26, 2021

Red & Blue: United We Stand

4 min read - Offensive and defensive security are typically viewed as opposite sides of the same fence. On one side, the offensive team aims to prevent attackers from compromising an organization, whereas on the other side the defensive team aims to stop attackers…

Advanced Threats August 17, 2021

Analysis of Diavol Ransomware Reveals Possible Link to TrickBot Gang

7 min read - Ransomware has become the number one cyber threat to organizations, making up nearly 25% of attacks IBM X-Force Incident Response remediated in 2020. Ransomware is making headlines on a regular basis due to the high impact of certain attacks on…