There’s a pattern that shows up in incident response work that nobody talks about in the vendor briefings. You bring in forensics after something goes wrong, and somewhere in that process, you find a tool — already deployed, already licensed, […]
What the Breach Reveals That the Budget Never Did Read More »
Okay, so this is all going to sound a bit dramatic, but it’s with good reason. I manage a cybersecurity response team for a top-level MSSP. If there’s one thing I know, in the fast-paced world of cybersecurity, there’s a
48 Hours in the Trenches: The High-Stakes World of Incident Response Read More »
Achieving a holistic view of security operations performance is essential for organizations to make informed decisions and demonstrate the impact on business outcomes. Most cybersecurity metrics available come from individual security tools. The data remains isolated within respective silos, restricting
How to Achieve Holistic Security Measurement in Detection, Investigation, and Response Read More »
It seems we can’t go more than a couple of days without seeing ransomware in the headlines. New attacks launched, new variants discovered, new victims reporting their losses. Despite the prevalent coverage of ransomware, there are a number of significant
Under the Radar: Three Ransomware Stories You Probably Didn’t See Read More »
Take a close look at how most companies have approached information security, and you’ll notice a recurring theme. We’ve become experts at building castles, with towers, drawbridges, moats, sentries, and ever-more-complex locks. We secure our organizations like fortresses, building layers
4 Major Blind Spots In Your Security (and How to Fix Them) Read More »
“You take the blue pill, the story ends. You wake up in your bed and believe whatever you want to believe. You take the red pill, you stay in wonderland, and I show you how deep the rabbit hole goes.”
Choose effective security over incident response Read More »
A recent study from Kaspersky Lab found that it costs significantly more to protect a virtual infrastructure. The survey determined that virtual servers are more likely to run mission-critical applications or contain sensitive data–making a successful attack against the virtual
Securing a virtual infrastructure can be costly Read More »
The seemingly endless barrage of attacks on government and enterprise networks has made it clear that organizations need to be much more proactive when it comes to security. Deploying perimeter defenses like firewalls and antivirus, and expecting them to keep
The 7 deadly sins of incident response Read More »
All one has to do is check their Twitter account to witness the constant stream of reported cyber security incidents happening globally. I explicitly say “reported” because individuals, supply chain partners, and businesses everywhere are at some point realizing they
On the virtues of Continuous Response Read More »
