Advanced Persistent Threats
Advanced Persistent Threats | News, how-tos, features, reviews, and videos
Risk-based vulnerability management a better form of cyber defense
By consolidating vulnerability management tools and adding AI, risk-based vulnerability management protects the entire attack surface.
What is the cyber kill chain? Why it's not always the right approach to cyber attacks
The cyber kill chain breaks down each stage of a malware attack where you can identify and stop it, but be aware of how attack strategies are changing.
Cylance researchers discover powerful new nation-state APT
A new APT, dubbed White Company, is flexing its muscle on the world stage, and it has security researchers worried.
7 places to find threat intel beyond vulnerability databases
National Vulnerability Databases (NVDs) can be slow and miss things. Use these sources to supplement your threat and vulnerability intelligence efforts.
Defense, security and the real enemies
The end of the Cold War meant that the countries that threatened American democracy and our way of life didn’t go away. They adapted to use technology to attack us instead. Now that the extent of these attacks is being made known, we...
The Sony hacker indictment: 5 lessons for IT security
The recent indictment of North Korean hacker Park Jin Hyok contains valuable information from the FBI’s investigation that will help you defend against similar attacks.
It’s time to get off the treadmill: Why you should understand adversary playbooks
Flipping the equation on known adversaries by developing and deploying controls at locations on the intrusion kill chain designed specifically for these known playbooks will increase a company’s ability to block an attack. The...
Cato Networks adds threat hunting to its SD-WAN services
Cato Threat Hunting System includes algorithms and procedures to alert on threats -- without adding endpoint or network monitoring tools to the customer network.
video
Defending against mobile technology threats | Salted Hash Ep 24
What are the current dangers in mobile technology and what are the strategies to keep yourself protected? Join host Steve Ragan from the show floor at RSA 2018, where he talks with Will LaSala, director of Security Solutions and...
video
Honeypots and the evolution of botnets | Salted Hash Ep 23
Host Steve Ragan reports from the show floor at RSA 2018, talking with guest Israel Barak, CISO at Cybereason, about his firm's recent honeypot research, which gathered information showing how the bot landscape is evolving.
SamSam explained: Everything you need to know about this opportunistic group of threat actors
The group behind the SamSam family of ransomware is known for recent attacks on healthcare organizations, but that's not its only target.
Symantec: Diverse threats remain a consistent problem online
A report published this evening by Symantec outlines the rocky year consumers and business owners had online in 2017, covering everything from coin mining attacks, problems in the supply chain, ransomware, BEC attacks, and more.
Insecure by design: What you need to know about defending critical infrastructure
Patching is useless most of the time, industrial control systems (ICS) security expert tells Senate committee.
Automation is the key to mitigation of today’s cyber threats
Organizations need to look at the real risk to its business and its data. When it comes to cybersecurity, one size definitely does not fit all.
North Korea hacking group is expanding operations, researchers say
A group of hackers from North Korea (DPRK), recently connected to the usage of an Adobe Flash zero-day vulnerability (CVE-2018-4878), has expanded its operations in both scope and sophistication, FireEye says.
How to automate threat hunting
The quest for hidden threats...
What is cyber security? How to build a cyber security strategy
Organizations face many threats to their information systems and data. Understanding all the basic elements to cyber security is the first step to meeting those threats.
The cybersecurity skills shortage acts as a root cause for security events
New research from ESG and ISSA reveals that a lack of training, inadequate cybersecurity staffing, and business apathy contribute to security events.
Sponsored Links