The new generation of cybersecurity defenses must protect against never-seen-before attacks even before they are devised by the attackers. In early December 2023, a security researcher at SafeBreach presented a paper (Alon Leviev Security Researcher, SafeBreach - December 6, 2023 Blackhat UK) at BlackHat Europe describing new process injection techniques utilizing Windows thread pools ... Read More

New SEC rules demand full disclosure of material cybersecurity incidents 4 days after they happen – are your OT security tools able to help stop “material” breaches? ... Read More

CrowdStrike CEO George Kurtz was recently interviewed on CNBC. He declared that instances of cybercrime instigated by organized criminal gangs have been “rampant” this year, a result of hostile nation states launching an increasing number of attacks and the rise of “dark AI” being used to exploit new vulnerabilities at ... Read More

Cyberattacks on critical production processes and applications are on the rise. Clorox recently filed an 8K that the ongoing attack on their production system’s critical applications has hindered production output significantly into the current quarter.Clorox warned that sales would be down as much as 28% for the quarter ending Sept ... Read More

  Last week, cybersecurity firm Mandiant published the details of a disruptive cyberattack in which the Russia-sponsored hacker group, Sandworm, targeted the critical infrastructure of a Ukrainian utilities organization. This incident was a multi-event cyberattack that leveraged a novel technique for taking down industrial control systems (ICS) and operational technology ... Read More

Ransomware attacks are one of the biggest cyber threats of 2022 and allorganizations need to ensure they are adequately protected against them. This is howcompanies can protect themselves from attacks while staying within their budget ... Read More

Cybersecurity insurance is an absolute necessity for any business operating in the modern world. However, increasing demand and threats of attacks have made insurance companies much more hesitant to offer claims. Here are some of the most common reasons claims are rejected, and how organizations can ensure they receive the ... Read More

MITRE ATT&CK is built around the premise that the best way to find attacks is by their behaviors. It provides a guide on how to manually track 100s to find attacks at various stages in the kill chain (lifespan). It’s been lauded as the best way to find attacks across ... Read More

In this blog, we’ll review the details of the most recent breach against the Microsoft Exchange Server. However, this blog’s point is that these forms of cyber attacks will continue and could likely accelerate. Trying to react after the fact is not the way to do business. If your toolsets ... Read More

In this first article in a three-part series,  we look at machine learning and artificial intelligence and show how it can help modern cybersecurity solutions such as ARIA ADR detect and stop cyberattacks. Stay tuned for future articles that highlight specific machine learning and AI use cases ... Read More