Threat Intelligence February 23, 2022

Ransomware resilience tops findings in X-Force Threat Intelligence Index 2022

7 min read - For the third year in a row, ransomware was the top attack type globally in 2021, despite some successes last year by law enforcement to take down ransomware groups. This was among the top findings of IBM Security’s latest research…

Incident Response December 27, 2021

2021 Manufacturing and Supply Chain Security Roundup

4 min read - In 2020, ransomware actors demanded $17 million from a laptop maker and $34 million from a Taiwanese electronics contract company. The past two years have also delivered major disruptions for supply chains. The pandemic pushed supply chain attack issues front-and-center, with disruptions up…

Incident Response November 4, 2021

Maritime Cybersecurity: A Rising Tide Lifts all Boats

3 min read - Ports and ships — the maritime industry — are vital points in the global supply chain for food, medicine, consumer goods, fuel and many other products. Most of the world’s globally traded goods travel by sea. That’s why maritime security…

Intelligence & Analytics November 2, 2021

Using Open-Source Intelligence for Mergers and Acquisitions

3 min read - Mergers and acquisitions (M&A) have been challenging for IT and security teams for as long as businesses have relied on technology. Every company’s IT system is as unique as the company itself. Your business may run on commonly used tools…

Banking & Finance September 28, 2021

Supply Chain Attack: What It Is (and What to Do About It)

4 min read - The past two years have delivered major disruptions for supply chains. The pandemic pushed supply chain attack issues front-and-center, with disruptions up 67% in 2020 and problems expected to persist as global markets adjust to ‘new normal’ operations. Increasing reliance…

Government September 2, 2021

What Biden’s Cybersecurity Executive Order Means for Supply Chain Attacks

5 min read - With cybersecurity guidelines coming down from the executive branch, industry and policymakers clearly both see the extent of the cyberattack problem. Take a look at the contents of the Biden administration’s May executive order and what it means for people…

Software Vulnerabilities August 23, 2021

SSDF: The Key to Defending Against Supply Chain Cyberattacks

4 min read - For reasons we all know, software supply chain attacks took on new meaning near the end of 2020. This hasn’t changed over this year. One of the best modern ways to combat these cyberattacks is to integrate a secure software…

Incident Response August 16, 2021

5 Ways to Defend Against Supply Chain Cyberattacks

2 min read - Cutting corners happens, more so in high-stakes, high-speed jobs. But from employees honest enough to admit when they push vulnerable code live, we can put together a portfolio of products shipped broken. A new study by Osterman Research found a…

CISO August 11, 2021

A New Directive for Pipeline Operators Puts Cybersecurity in the Spotlight

3 min read - It’s no secret that cyberattacks against critical infrastructure are increasing. The recent attacks against water treatment plants, pipelines, vital hospital systems and food processing facilities have all made recent headlines and demonstrate the vulnerability of all types of critical infrastructure…

Malware July 7, 2021

REvil Ransomware Gang Launches Major Supply Chain Attack Through Kaseya

6 min read - On July 2, 2021, Kaseya customers were notified of a compromise affecting the company’s VSA product in a way that poisoned the product’s update mechanism with malicious code. VSA is a remote monitoring and management tool for networks and endpoints…