Collaborate Disseminate
Phishing is more successful than ever. Daniel Spicer, CSO of Ivanti, discusses emerging trends in phishing, and using zero-trust security to patch the human vulnerabilities underpinning the spike. Continue reading Real Big Phish: Mobile Phishing & Managing User Fallibility
It’s not about buying security products! Joseph Carson, chief security scientist from ThycoticCentrify, offers practical steps to start the zero-trust journey. Continue reading Here’s REALLY How to Do Zero-Trust Security
Expect many more zero-day exploits in 2022, and cyberattacks using them being launched at a significantly higher rate, warns Aamir Lakhani, researcher at FortiGuard Labs. Continue reading What the Rise in Cyber-Recon Means for Your Security Strategy
Jason Kent is Hacker-in-Residence at Cequence Security. Continue reading Threat Advisory: E-commerce Bots Use Domain Registration Services for Mass Account Fraud
Casey Ellis, CTO at Bugcrowd, outlines how international relations have deteriorated into a new sort of Cold War, with espionage playing out in the cyber-domain. Continue reading Global Cyberattacks from Nation-State Actors Posing Greater Threats
Yaron Kassner, CTO and co-founder of Silverfort, discusses why using all-seeing privileged accounts for monitoring is bad practice. Continue reading Time to Ditch Big-Brother Accounts for Network Scanning
Oliver Tavakoli, CTO at Vectra AI, takes us inside the coming nexus of ransomware, supply-chain attacks and cloud deployments. Continue reading Convergence Ahoy: Get Ready for Cloud-Based Ransomware
If 2021 was the Year of Supply Chain Pain, 2022 will be the Year of Supply Chain Chronic Pain (or something worse than pain). This past year, the pain was felt in two significant ways: through the supply chain disruptions caused by COVID-19, and throug… Continue reading In 2022, Expect More Supply Chain Pain and Changing Security Roles
Malicious email attachments with macros are one of the most common ways hackers get in through the door. Huntress security researcher John Hammond discusses how threat hunters can fight back. Continue reading Next-Gen Maldocs & How to Solve the Human Vulnerability
DoH! Nate Warfield, CTO of Prevailion, discusses new stealth tactics threat actors are using for C2, including Malleable C2 from Cobalt Strike’s arsenal. Continue reading Not with a Bang but a Whisper: The Shift to Stealthy C2