Advanced Persistent Threats
Advanced Persistent Threats | News, how-tos, features, reviews, and videos
Telcos around the world hit by long-term intelligence gathering cyberattack
Operation Soft Cell saw telcos around the world lose over 100GB of call record data, but it could have been much worse. Attackers could have shut down cell networks if they wanted.
The growing demand for managed detection and response (MDR)
Threat detection/response is a high priority, but many organizations don’t have the staff or skills to perform these tasks alone. This translates into a growing managed detection and response (MDR) market.
Risk-based vulnerability management a better form of cyber defense
By consolidating vulnerability management tools and adding AI, risk-based vulnerability management protects the entire attack surface.
What is the cyber kill chain? Why it's not always the right approach to cyber attacks
The cyber kill chain breaks down each stage of a malware attack where you can identify and stop it, but be aware of how attack strategies are changing.
Cylance researchers discover powerful new nation-state APT
A new APT, dubbed White Company, is flexing its muscle on the world stage, and it has security researchers worried.
7 places to find threat intel beyond vulnerability databases
National Vulnerability Databases (NVDs) can be slow and miss things. Use these sources to supplement your threat and vulnerability intelligence efforts.
Defense, security and the real enemies
The end of the Cold War meant that the countries that threatened American democracy and our way of life didn’t go away. They adapted to use technology to attack us instead. Now that the extent of these attacks is being made known, we...
The Sony hacker indictment: 5 lessons for IT security
The recent indictment of North Korean hacker Park Jin Hyok contains valuable information from the FBI’s investigation that will help you defend against similar attacks.
It’s time to get off the treadmill: Why you should understand adversary playbooks
Flipping the equation on known adversaries by developing and deploying controls at locations on the intrusion kill chain designed specifically for these known playbooks will increase a company’s ability to block an attack. The...
Cato Networks adds threat hunting to its SD-WAN services
Cato Threat Hunting System includes algorithms and procedures to alert on threats -- without adding endpoint or network monitoring tools to the customer network.
SamSam explained: Everything you need to know about this opportunistic group of threat actors
The group behind the SamSam family of ransomware is known for recent attacks on healthcare organizations, but that's not its only target.
Symantec: Diverse threats remain a consistent problem online
A report published this evening by Symantec outlines the rocky year consumers and business owners had online in 2017, covering everything from coin mining attacks, problems in the supply chain, ransomware, BEC attacks, and more.
Insecure by design: What you need to know about defending critical infrastructure
Patching is useless most of the time, industrial control systems (ICS) security expert tells Senate committee.
Automation is the key to mitigation of today’s cyber threats
Organizations need to look at the real risk to its business and its data. When it comes to cybersecurity, one size definitely does not fit all.
North Korea hacking group is expanding operations, researchers say
A group of hackers from North Korea (DPRK), recently connected to the usage of an Adobe Flash zero-day vulnerability (CVE-2018-4878), has expanded its operations in both scope and sophistication, FireEye says.
How to automate threat hunting
The quest for hidden threats...
What is cyber security? How to build a cyber security strategy
Organizations face many threats to their information systems and data. Understanding all the basic elements to cyber security is the first step to meeting those threats.
The cybersecurity skills shortage acts as a root cause for security events
New research from ESG and ISSA reveals that a lack of training, inadequate cybersecurity staffing, and business apathy contribute to security events.
Acute cybersecurity skills shortage areas
Security analysts/investigators, application security specialists, and cloud security skills top a long list of skills deficits.
Research confirms the cybersecurity skills shortage is an existential threat
ESG research with ISSA shows that organizations don’t have the right levels of cybersecurity personnel, skills and ongoing training to keep up with cyber risk.
-
Video/Webcast
Sponsored -
White Paper
-
eBook
Sponsored -
Case Study
Sponsored -
Video/Webcast
Sponsored
