Next generation intrusion detection systems (IDS) are now integrating detection, investigation and response capabilities. It’s a step in the right direction, but still present a sizable and insurmountable gap in effective attack detection ... Read More

How did the recent Colonial Pipeline cyber attack happen? What could have been done to prevent it? A closer look at the most recent—and potentially most devastating—cyberattack ... Read More

While past blogs focused on the initial cyberattack involving Microsoft Exchange Server, this follow-up article takes a much closer look at what really happened--and how similar attacks can be avoided ... Read More

Most everyone agrees that 2020 was a loss-leader of a year.  ... Read More

Today at GTC NVIDIA announced their NVIDIA Morpheus cybersecurity application framework, as well as the general availability of their NVIDIA BlueField-2 DPU (data processing unit) and a converged BlueField-2 A100 that combines an NVIDIA Ampere A100 GPU with a BlueField-2 DPU on a single card. These provide ARIA Cybersecurity a ... Read More

It’s been approximately 100 days since the disclosure of the attack on the SolarWinds Orion platform, and we are in a better place to understand what happened.  It’s been pretty eye-opening to learn how ill-equipped prominent industry players, including cybersecurity experts, were when it came to finding, preventing and defending ... Read More

As we’ve previously discussed, traditional threat detection tools and resources can’t reliably identify cyber attacks. This is partly due to how modern cyber-attacks are constantly evolving, making zero-day attacks more frequent and have proven to be the most devastating – SolarWinds and the Microsoft Exchange Server attacks are just two ... Read More

In the fall of 2020, a joint advisory from the Cybersecurity and Infrastructure Security Advisory (CISA), FBI, and Department of Health and Human Services (HHS) placed a startling spotlight on the tactics, techniques, and procedures used by cybercriminals to target the healthcare and public health sector, especially related to ransomware.  ... Read More

To provide effective data protection and application defense and remain in compliance, organizations today need to protect their most critical data as it is created, transmitted, and stored. This requires companies to successfully encrypt this data, a process that raises its own challenges related to encryption key management and effectively ... Read More

While many cybersecurity professionals have come to believe adding more tools to their security stack gives more protection, we think a single tool is more effective—and provides much better ROI ... Read More