Guarding against DCSync attacks

Gaining access to domain admin credentials is part of the endgame in many sophisticated attacks where threat actors are trying to maintain persistence. One of the ways that adversaries accomplish this is through DCSync attacks. What is a DCSync attack?… Continue reading Guarding against DCSync attacks

New infosec products of the week: October 8, 2021

Here’s a look at the most interesting product releases from the past week, featuring releases from Abnormal Security, Pradeo, Qualys, Semperis and Swimlane. Pradeo’s mobile application security suite extends its coverage with new app shielding service … Continue reading New infosec products of the week: October 8, 2021

Semperis Directory Services Protector 3.6 monitors for cyber threats in hybrid AD environments

Semperis announced the preview release of Directory Services Protector 3.6, which simplifies managing identity security in hybrid environments that use both on-premises Active Directory and Azure Active Directory. DSP’s new capabilities for detecting a… Continue reading Semperis Directory Services Protector 3.6 monitors for cyber threats in hybrid AD environments

Semperis extends its Active Directory protection to businesses in APAC market

Semperis announced new investments in the Asia-Pacific region as it extends its Active Directory protection, response, and recovery solutions to businesses in APAC. To support this expansion, the company is building out its team in the region and bring… Continue reading Semperis extends its Active Directory protection to businesses in APAC market

Finding and using the right cybersecurity incident response tools

Unpacking the layers of a cyberattack is rarely a simple task. You need to analyze many potential entry points, attack paths, and data exfiltration tactics to reveal the scope of what took place—all while the culprits are potentially taking steps to co… Continue reading Finding and using the right cybersecurity incident response tools

How to improve your organization’s Active Directory security posture

Active Directory (AD), a directory service developed by Microsoft for Windows domain networks, is most organizations’ primary store for employee authentication and identity management, and controls which assets / applications / systems a user has… Continue reading How to improve your organization’s Active Directory security posture

How to convince your boss that cybersecurity includes Active Directory

Preparing for and defending against a cyberattack demands Active Directory (AD) be part of a company’s overall strategy. But AD often gets overlooked in security discussions because addressing AD vulnerabilities requires executive buy-in to allocate fo… Continue reading How to convince your boss that cybersecurity includes Active Directory

New infosec products of the week: May 7, 2021

Assessing third-party security controls with Panorays Smart Questionnaires Unlike manual security questionnaires, Smart Questionnaires include only the questions that are relevant for each supplier based on the business relationship context. Customers … Continue reading New infosec products of the week: May 7, 2021

Semperis DSP 3.5 provides automated security assessments of Microsoft AD

Semperis announced the general availability of Directory Services Protector (DSP) 3.5, which includes DSP Intelligence, a new module that provides automated security assessments of Microsoft Active Directory (AD). DSP Intelligence proactively uncovers … Continue reading Semperis DSP 3.5 provides automated security assessments of Microsoft AD