Identity & Access December 11, 2024

Another category? Why we need ITDR

5 min read - Technologists are understandably suffering from category fatigue. This fatigue can be more pronounced within security than in any other sub-sector of IT. Do the use cases and risks of today warrant identity threat detection and response (ITDR)? To address this…

Zero Trust October 5, 2023

Does your security program suffer from piecemeal detection and response?

4 min read - Many organizations face siloed and disjointed threat detection and response systems as part of their security program. Learn how to treat the affliction known as piecemeal detection and response.

Incident Response August 31, 2023

Alert fatigue: A 911 cyber call center that never sleeps

4 min read - Imagine running a 911 call center where the switchboard is constantly lit up with incoming calls. The initial question, “What’s your emergency, please?” aims to funnel the event to the right responder for triage and assessment. Over the course of…

Data Protection August 28, 2023

Advanced analytics can help detect insider threats rapidly

2 min read - While external cyber threats capture headlines, the rise of insider threats from within an organization is a growing concern. In 2023, the average cost of a data breach caused by an insider reached $4.90 million, 9.6% higher than the global…

News June 12, 2023

Global median dwell time drops to record low

4 min read - Now for some good news on the cyber front: It looks like we’re winning the global battle over dwell time. Global median dwell time is calculated as the median number of days an attacker is present in a target’s environment…

Application Security February 16, 2023

Detecting the undetected: The risk to your info

5 min read - IBM’s Advanced Threat Detection and Response Team (ATDR) has seen an increase in the malware family known as information stealers in the wild over the past year. Info stealers are malware with the capability of scanning for and exfiltrating data…

Incident Response January 27, 2023

5 golden rules of threat hunting

6 min read - When a breach is uncovered, the operational cadence includes threat detection, quarantine and termination. While all stages can occur within the first hour of discovery, in some cases, that’s already too late. Security operations center (SOC) teams monitor and hunt…

Intelligence & Analytics May 10, 2022

MITRE ATT&CK and SIEM rules: What should your expectations be?

6 min read - The MITRE ATT&CK threat framework is seemingly everywhere these days, and with good reason. It is an invaluable tool for understanding the various methods, or as MITRE refers to them Tactics and Techniques, employed by threat actors. It offers annotated…

Intelligence & Analytics December 30, 2021

Intelligent Adversary Engagement: Deceiving the Attacker

3 min read - Traditional security isn’t always enough to keep attackers at bay. When it comes to sneaking into networks, detection will often only come after malicious traffic reaches systems such as next-generation firewalls and intrusion detection and prevention systems. Meanwhile, threat actors…

Intelligence & Analytics November 2, 2021

Taking Threat Detection and Response to the Next Level with Open XDR

6 min read - The challenges facing today’s security industry can easily be described as a perfect storm: increasingly sophisticated cyber attackers combined with the proliferation of security tools to cover an expanding attack surface driven by remote work and cloud adoption. These dynamics…