Tag: Security Intelligence

The 13 Costliest Cyberattacks of 2022: Looking Back

2022-12-29 16:12

2022 has shaped up to be a pricey year for victims of cyberattacks. Cyberattacks continue to target critical infrastructures such as health systems, small government agencies and educational institutions. Ransomware remains a popular attack method for large and small targets…

Twitter is the New Poster Child for Failing at Compliance

2022-12-28 13:12

All companies have to comply with privacy and security laws. They must also comply with any settlements or edicts imposed by regulatory agencies of the U.S. government. But Twitter now finds itself in a precarious position and appears to be…

The Most Prolific Ransomware Gangs of 2022

2022-12-27 19:12

As we look forward to 2023, we can find many ransomware lessons in looking back at 2022. The year brought us numerous attacks by many of the same gangs we’ve watched for years, as well as some newcomers. Many ransomware…

How the CCPA is Shaping Other State’s Data Privacy

2022-12-23 16:12

Privacy laws are nothing new when it comes to modern-day business. However, since the global digitization of data and the sharing economy took off, companies have struggled to keep up with an ever-changing legal landscape while still fulfilling their obligations…

What Can We Learn From Recent Cyber History?

2022-12-22 16:12

The Center for Strategic and International Studies compiled a list of significant cyber incidents dating back to 2003. Compiling attacks on government agencies, defense and high-tech companies or economic crimes with losses of more than a million dollars, this list…

When Logs Are Out, Enhanced Analytics Stay In

2022-12-22 02:12

I was talking to an analyst firm the other day. They told me that a lot of organizations purchase a security information and event management (SIEM) solution and then “place it on the shelf.” “Why would they do that?” I…

Beware of What Is Lurking in the Shadows of Your IT

2022-12-21 22:12

This post was written with contributions from Joseph Lozowski. Comprehensive incident preparedness requires building out and testing response plans that consider the possibility that threats will bypass all security protections. An example of a threat vector that can bypass security…

Don’t Wait to Embrace CISA’s Vulnerability Management Rules

2022-12-21 16:12

Vulnerability management is the time-consuming process of finding and patching a seemingly unlimited number of potential risks. The National Institute of Standards and Technology (NIST) reports more than 23,000 new vulnerabilities for 2022, where more than 17,000 are classified as…

Don’t Wait To Embrace CISA’s Vulnerability Management Rules

2022-12-21 12:12

4 Most Common Cyberattack Patterns from 2022

2022-12-20 16:12

As 2022 comes to an end, cybersecurity teams globally are taking the opportunity to reflect on the past 12 months and draw whatever conclusions and insights they can about the threat landscape. It has been a challenging year for security…

How Reveton Ransomware-as-a-Service Changed Cybersecurity

2022-12-19 16:12

In 2012, Reveton ransomware emerged. It’s considered to be the first Ransomware-as-a-Service (RaaS) operation ever. Since then, RaaS has enabled gangs with basic technical skills to launch attacks indiscriminately. Now, nearly anyone can create highly effective malware campaigns. We now…

The Cybersecurity Takeaway from Twitter’s Verification Chaos

2022-12-16 15:12

Twitter has been verifiably bonkers since electric car and rocket mogul Elon Musk took over and reworked the social network’s long-standing verification system. This provides a valuable lesson about the link between verification or authentication and between security and usability. …

5 Ways to Improve Holiday Retail and Wholesale Cybersecurity

2022-12-16 12:12

It’s the most wonderful time of the year for retailers and wholesalers since the holidays help boost year-end profits. The National Retail Federation (NRF) predicts 2022 holiday sales will come in 6% to 8% higher than in 2021. But rising…

How to Embed Gen Z in Your Organization’s Security Culture

2022-12-15 19:12

Generation Z, which Pew Research Center defines as those born after 1996, is considered the first digital-native generation. This group of young people always has the latest technology at their fingertips. Yet even with this strong digital connection, the National…

How Posture Management Prevents Catastrophic Cloud Breaches

2022-12-15 16:12

We’ve all heard about catastrophic cloud breaches. But for every cyberattack reported in the news, many more may never reach the public eye. Perhaps worst of all, a large number of the offending vulnerabilities might have been avoided entirely through…

5 Holiday Cybersecurity Tips That Make a Real Impact

2022-12-14 17:12

Tired of cybersecurity tips that don’t really make an impact? This post is for you. The year is winding down to an end. Everyone, including security teams, is busy and preoccupied. Cyber actors know this and are gearing up to…

5 Holiday Cybersecurity Tips That Make A Real Impact

2022-12-14 13:12

Critical Remote Code Execution Vulnerability in SPNEGO Extended Negotiation Security Mechanism

2022-12-13 20:12

In September 2022, Microsoft patched an information disclosure vulnerability in SPNEGO NEGOEX (CVE-2022-37958). On December 13, Microsoft reclassified the vulnerability as “Critical” severity after IBM Security X-Force Red Security Researcher Valentina Palmiotti discovered the vulnerability could allow attackers to remotely…

How to Implement Cloud Identity and Access Governance

2022-12-13 16:12

Creating identity and access governance across cloud environments is crucial for modern organizations. In our previous post, we discussed how important human and non-human identities are for these environments and why their management and the governance of their access can…

Cybersecurity Trends: IBM’s Predictions for 2023

2022-12-13 13:12

As with many other aspects of life and business, 2022 held fewer overall surprises in cybersecurity than in recent years — thank goodness. Instead, many trends brewing over the past few years began to take clearer form. Some were unexpected,…

How The Talent Shortage Changes the Approach to Cybersecurity

2022-12-12 15:12

There’s good news, and there’s bad news. The good news is that the number of cybersecurity professionals has reached an all-time high. According to (ISC)2’s annual Cybersecurity Workforce Study, 4.7 million people currently work in a security-related job. The bad…

Why Cybersecurity Risk Assessment Matters in the Banking Industry

2022-12-09 15:12

When customers put money in a bank, they need to trust it will stay there. Because of the high stakes involved for the customer, such as financial loss, and how long it takes to resolve fraud and potential identity theft,…

What CISOs Should Know About CIRCIA Incident Reporting

2022-12-08 17:12

In March of 2022, a new federal law was adopted: the Cyber Incident Reporting Critical Infrastructure Act (CIRCIA). This new legislation focuses on reporting requirements related to cybersecurity incidents and ransomware payments. The key takeaway: covered entities in critical infrastructure…

Containers, Security, and Risks within Containerized Environments

2022-12-06 19:12

Applications have historically been deployed and created in a manner reminiscent of classic shopping malls. First, a developer builds the mall, then creates the various stores inside. The stores conform to the dimensions of the mall and operate within its…

Inside the Second White House Ransomware Summit

2022-12-06 18:12

Ransomware is a growing, international threat. It’s also an insidious one. The state of the art in ransomware is simple but effective. Well-organized criminal gangs hiding in safe-haven countries breach an organization, find, steal and encrypt important files. Then they…

Did Brazil DSL Modem Attacks Change Device Security?

2022-12-05 16:12

From 2011 to 2012, millions of Internet users in Brazil fell victim to a massive attack against vulnerable DSL modems. By configuring the modems remotely, attackers could redirect users to malicious domain name system (DNS) servers. Victims trying to visit…

Securing Your SAP Environments: Going Beyond Access Control

2022-12-04 07:12

Many large businesses run SAP to manage their business operations and their customer relations. Security has become an increasingly critical priority due to the ongoing digitalization of society and the new opportunities that attackers exploit to achieve a system breach.…

How Do You Plan to Celebrate National Computer Security Day?

2022-12-02 21:12

In October 2022, the world marked the 19th Cybersecurity Awareness Month. October might be over, but employers can still talk about awareness of digital threats. We all have another chance before then: National Computer Security Day. The History of National…

Who Carries the Weight of a Cyberattack?

2022-12-02 16:12

Almost immediately after a company discovers a data breach, the finger-pointing begins. Who is to blame? Most often, it is the chief information security officer (CISO) or chief security officer (CSO) because protecting the network infrastructure is their job. Heck,…

Transitioning to Quantum-Safe Encryption

2022-12-01 16:12

With their vast increase in computing power, quantum computers promise to revolutionize many fields. Artificial intelligence, medicine and space exploration all benefit from this technological leap — but that power is also a double-edged sword. The risk is that threat…

How Do You Plan to Celebrate National Computer Security Day?

2022-11-29 21:11

Deploying Security Automation to Your Endpoints

2022-11-29 15:11

Globally, data is growing at an exponential rate. Due to factors like information explosion and the rising interconnectivity of endpoints, data growth will only become a more pressing issue. This enormous influx of data will invariably affect security teams. Faced…

Worms of Wisdom: How WannaCry Shapes Cybersecurity Today

2022-11-28 16:11

WannaCry wasn’t a particularly complex or innovative ransomware attack. What made it unique, however, was its rapid spread. Using the EternalBlue exploit, malware could quickly move from device to device, leveraging a flaw in the Microsoft Windows Server Message Block…

Emotional Blowback: Dealing With Post-Incident Stress

2022-11-23 13:11

Cyberattacks are on the rise as adversaries find new ways of creating chaos and increasing profits. Attacks evolve constantly and often involve real-world consequences. The growing criminal Software-as-a-Service enterprise puts ready-made tools in the hands of threat actors who can…

RansomExx Upgrades to Rust

2022-11-22 19:11

IBM Security X-Force Threat Researchers have discovered a new variant of the RansomExx ransomware that has been rewritten in the Rust programming language, joining a growing trend of ransomware developers switching to the language. Malware written in Rust often benefits…

Why Operational Technology Security Cannot Be Avoided

2022-11-22 16:11

Operational technology (OT) includes any hardware and software that directly monitors and controls industrial equipment and all its assets, processes and events to detect or initiate a change. Yet despite occupying a critical role in a large number of essential…

Resilient Companies Have a Disaster Recovery Plan

2022-11-21 17:11

Historically, disaster recovery (DR) planning focused on protection against unlikely events such as fires, floods and natural disasters. Some companies mistakenly view DR as an insurance policy for which the likelihood of a claim is low. With the current financial…

Tech Stack Diversity: Security Benefits and Costs

2022-11-18 20:11

If your remit protects the information technology estate, you might be tired of the constant fire drills and reminders of upcoming disruptions. The barrage from cybersecurity vendors claiming “we have the solution” is almost equally exhausting. Start here: there is…

What People Get Wrong About Incident Responders

2022-11-18 16:11

Today’s threat landscape is ever-evolving and skyrocketing in complexity as bad actors possess more advanced tactics, techniques and procedures (TTP) than ever before. To address these advanced threats, deploying an incident response team is critical for modern organizations. An incident…

Moving at the Speed of Business — Challenging Our Assumptions About Cybersecurity

2022-11-18 09:11

The traditional narrative for cybersecurity has been about limited visibility and operational constraints — not business opportunities. These conversations are grounded in various assumptions, such as limited budgets, scarce resources, skills being at a premium, the attack surface growing, and…

Tech Stack Diversity: Security Benefits and Costs

2022-11-17 17:11

Moving at the Speed of Business — Challenging Our Assumptions About Cybersecurity

2022-11-16 23:11

Effectively Enforce a Least Privilege Strategy

2022-11-16 20:11

Every security officer wants to minimize their attack surface. One of the best ways to do this is by implementing a least privilege strategy. One report revealed that data breaches from insiders could cost as much as 20% of annual…

How the DNSChanger Shutdown Changed Cybersecurity

2022-11-16 19:11

On the morning of July 9, 2012, the world braced for an “internet doomsday”: a full-scale crash of the global internet. Except it didn’t happen. And that non-event represented the culmination of a long and successful coordinated action taken between…

What Hurricane Preparedness Can Teach Us About Ransomware

2022-10-27 12:10

Each year between June and November, many parts of the U.S. become potential targets for hurricanes. In October 2022, we had Hurricane Ian devastate Florida. To prepare for natural disasters like hurricanes, organizations are encouraged to build out and test…

A Day in the Life: Working in Cyber Incident Response

2022-10-27 05:10

As a cybersecurity incident responder, your life can go from zero to 100 in a heartbeat. One moment you are sipping a beverage reading the latest threat intelligence or getting the kids ready for bed; the next, you may be…

Charles Henderson’s Cybersecurity Awareness Month Content Roundup

2022-10-27 05:10

In some parts of the world during October, we have Halloween, which conjures the specter of imagined monsters lurking in the dark. Simultaneously, October is Cybersecurity Awareness Month, which evokes the specter of threats lurking behind our screens. Bombarded with…

Charles Henderson’s Cybersecurity Awareness Month Content Roundup

2022-10-26 13:10

A Day in the Life: Working in Cyber Incident Response

2022-10-25 13:10

What Drives Incident Responders: Key Findings from the 2022 Incident Responder Study

2022-10-24 12:10

Cyberattacks seldom happen when it’s convenient. In fact, it’s relatively common for them to occur on weekends or holidays — threat actors capitalize on the fact that there is fewer staff on site, and those who are there are focused…

The Dangerous Flaws of Web3 Security, According To a Former Hacker

2022-10-21 18:10

“New and improved” is the refrain of progress, but new technology doesn’t always turn out to be an improvement. In the case of the evolution from Web2 to Web3, a former hacker revealed how recent changes have created an all-new…

How to Keep Your Secrets Safe: A Password Primer

2022-10-21 18:10

There are two kinds of companies in the world: those that have been breached by criminals, and those that have been breached and don’t know it yet. Criminals are relentless. Today’s cyberattacks have evolved into high-level espionage perpetrated by robust…

How to Keep Your Secrets Safe: A Password Primer

2022-10-20 18:10

There are two kinds of companies in the world: those that have been breached by unethical hackers, and those that have been breached and don’t know it yet. Hackers are relentless. Today’s cyberattacks have evolved into high-level espionage perpetrated by…

The Dangerous Flaws of Web3 Security, According To a Former Hacker

2022-10-20 15:10

Threat Management and Unified Endpoint Management

2022-10-20 02:10

The worst of the pandemic may be behind us, but we continue to be impacted by it. School-aged kids are trying to catch up academically and socially after two years of disruption. Air travel is a mess. And all businesses…

Threat Management and Unified Endpoint Management

2022-10-18 15:10

Analysis of a Remote Code Execution (RCE) Vulnerability in Cobalt Strike 4.7.1

2022-10-17 22:10

Command & Control (C2) frameworks are a very sensitive component of Red Team operations. Often, a Red Team will be in a highly privileged position on a target’s network, and a compromise of the C2 framework could lead to a…

3 Ways EDR Can Stop Ransomware Attacks

2022-10-17 15:10

Ransomware attacks are on the rise. While these activities are low-risk and high-reward for criminal groups, their consequences can devastate their target organizations. According to the 2022 Cost of a Data Breach report, the average cost of a ransomware attack…

« 1 … 3 4 5 6 7 … 16 »


10.4K	8K	100+	500+