Security Automation: The Future of Enterprise Defense
When it comes to giving cyber security experts the tools they need to take action, automation and machine learning (ML) can make a big difference. Many companies are working with high volumes of data, and types and variants of attack are always growing and changing. It can become too much for people to process in…
What Is Threat Management? Common Challenges and Best Practices
Threat management, or cyber threat management, is a framework often used by cybersecurity professionals to manage the life cycle of a threat in an effort to identify and respond to it with speed and accuracy. The foundation of threat management is a seamless integration between people, process and technology to stay ahead of threats.
What Is Security Intelligence? Here’s What Your Business Leaders Want to Know
Every so often, a new phrase or buzzword does the rounds for a bit before it goes off to join the other forgotten buzzwords in the sky, only to be recalled at corporate parties for a laugh, or to gauge how long someone has been in the trade. However, a select few remain firmly embedded…
It’s Time to Bring Cloud Environments Out of the Shadows
The speed and scale of cloud computing has provided companies around the globe with more flexibility, lower overhead costs and quicker time to value for a wide variety of applications. While the business value of cloud adoption is undebatable, this rapid transition can leave security teams in the dark and sensitive information exposed.
Strengthening Cybersecurity’s Weakest Links With Deep Network Insights
Like a chain forged of steel, cybersecurity is only as strong as its weakest link. But how can we gain visibility into where these weaknesses exist and how they are being exploited? How can we determine where gaps occur that impact our ability to protect against, detect and respond to the latest threats? Studies have…
Know Your Security X’s and O’s: Your Cyberdefense Team Is Only as Good as Its Threat Intelligence
All of us in the security industry realize that we face a virtually insurmountable task to ensure that the data belonging to our organizations and customers is kept safe and secure. If you step back and think about it, the list of potential perpetrators is daunting in scope. It includes cybercriminals, hacktivists, foreign governments, and…
Identifying Named Pipe Impersonation and Other Malicious Privilege Escalation Techniques
Privilege escalation is one of the key components of any attack that involves penetrating a system. If threat actors have limited access due to a current user’s privilege levels, they will naturally aim to escalate their privileges before expanding the scope of the attack. How can security professionals detect malicious escalation techniques before adversaries get…
Rinse, Wash, Repeat: Defining, Planning and Continuously Improving Your SIEM Strategy
Designing your security information and event management (SIEM) strategy can be very challenging, particularly in complex environments that depend on many systems and stakeholders. For security leaders, it may seem as though this work is never complete. Indeed, maintaining an effective SIEM program requires a cyclical approach of reviewing business objectives, planning detection and response…
Innovation, Collaboration and Security Awareness: What We’re Grateful for This Thanksgiving
2017 has been yet another year full of widespread, highly disruptive ransomware attacks, data-destroying malware outbreaks and other headline-grabbing security incidents. However, with more organizations increasing their level of security awareness, sharing threat intelligence, achieving regulatory compliance, and recruiting more women and new collar workers to launch cybersecurity careers, there is plenty to be thankful for this Thanksgiving.
Using Phishing Intelligence to Reel In Advanced Threats and Protect Corporate Networks
Gone are the days of the Nigerian prince promising fortune to unsuspecting email recipients. Attackers have stepped up their phishing game and evolved their tactics to entice employees to click links or open attachments, preying on the opportunity to spread persistent malware or compromise credentials. These threat actors relentlessly target employees — both at work…