November 1, 2018

Lock and sLoad: PowerShell Malware Downloader Geofences Attacks for Maximum Impact

2 min read - A PowerShell malware downloader known as sLoad uses geofencing, customized emails and device reconnaissance to identify high-value Trojan targets.

Incident Response October 4, 2018

How Nick Bradley Made a Career of Pursuing Bad Guys, From the Military to X-Force IRIS

4 min read - X-Force IRIS Practice Lead Nick Bradley was on track for an illustrious career in the military police when a computer virus detoured his path towards protection of a different kind.

September 20, 2018

Cobalt Gang Using CobInt Downloader to Install Malware on Systems of Interest

2 min read - Security researchers observed the threat group Cobalt Gang using a downloader known as CobInt to infect and subsequently install additional malware on systems of interest.

Threat Intelligence August 9, 2018

How a Cyberattack Framework Can Help Reduce Risk at All Levels, Part 4

7 min read - Even after a successful attack, security teams can still minimize the financial and reputational damage associated with a breach by following the IBM X-Force cyberattack framework.

Threat Intelligence August 1, 2018

How a Cyberattack Framework Can Help Reduce Risk at All Levels, Part 3

6 min read - An attacker who gains access won't necessarily walk away with an organization's proprietary data. Here's how a cyberattack framework can help you subvert an attacker already in a network.

Incident Response July 25, 2018

How a Cyberattack Framework Can Help Reduce Risk at All Levels, Part 2

7 min read - In the external reconnaissance and launch attack phases of the X-Force IRIS cyberattack preparation framework, threat actors look for vulnerabilities and tailor their attacks to exploit them.

Incident Response July 18, 2018

How the IBM X-Force IRIS Cyberattack Framework Helps Security Teams Reduce Risk at All Levels, Part 1

5 min read - The IBM X-Force IRIS cyberattack preparation and execution frameworks aim to help security teams predict threat actors' motives and tactics and communicate security intelligence more clearly.

Intelligence & Analytics May 15, 2018

Best Practices for Designing a Security Operations Center

3 min read - Designing a security operations center (SOC) is not as simple as setting and forgetting an SIEM solution. Security leaders must consider human factors, business needs, budgetary constraints and more.

Risk Management May 14, 2018

The Cherry on Top: Add Value to Existing Risk Management Activities With Open Source Tools

4 min read - Organizations with established risk management processes can drive efficiency and improve their overall risk posture by leveraging open source tools.

Threat Intelligence April 4, 2018

2018 IBM X-Force Report: Shellshock Fades, Gozi Rises and Insider Threats Soar

2 min read - The latest IBM X-Force report highlighted threats stemming from misconfigured cloud servers and inadvertent insider negligence and examined malware trends from 2017 that could continue into 2018.