Phishing is everywhere. Couple that with a new remote workforce, video conferencing, and corporate messaging, now phishing and vishing are everywhere. Why? There are many reasons, including: Increased use of personal computers and phones to conduct our work remotely Increase in phishing emails targeting remote workers Increase in vishing calls to our personal phones targeting […]
In the world of cybersecurity, we talk about a lot of capabilities and tools. But if we think about what the hackers want, it’s our data. Why do we focus so much time and effort on the network and endpoint, but not the data? I get it, data security is hard (or at least it […]
Influential Podcast and Video Company Joins Growing Portfolio of Cybersecurity Brands New York, NY, September 8, 2020 – CyberRisk Alliance (CRA) , a business intelligence company serving the cybersecurity and information risk management marketplace, has acquired Security Weekly, an authoritative podcast network serving the cybersecurity community, from Defensive Intuition, LLC, its founder, Paul Asadoorian and […]
We’ve all heard the term Immutable Infrastructure, especially with cloud deployments, but what does it really mean? What are the security and compliance impacts of Immutable Infrastructure? Let’s start with a quick overview of Immutable Infrastructure. Simply defined, Immutable Infrastructure means that the state of networks, servers, applications, etc. are not subjected to change in […]
In one of my previous roles, I had the great opportunity to travel around the world meeting customers to understand their challenges in vulnerability management. The two biggest challenges they wanted solved were: Help me prioritize which of these vulnerabilities are most critical, and Help me close the loop with my patching solutions to remediate […]
There are numerous security use cases where the integration of network packet data provides additional contextual information for better actionability. Free and open source packet capture tools do a great job capturing packets, but how do you collect, aggregate, and analyze that data at scale? Let’s start with a quick review of packet capture tools, […]
Data breaches are becoming more costly. According to the 2019 Cost of a Data Breach Report, the average total cost of a data breach is $3.92 million, up 12% over the past five years. The average size of a data breach is 25,575 records, up 3.9% from the previous year. With these continued increases, how […]
We’re all familiar with the Open Web Application Security Project (OWASP) Top 10 Web Application Security Risks. Not only have organizations used this list to adopt new development practices to produce more secure code, but security vendors have built products to detect and prevent these top attacks. But what happens when an attacker uses your […]
We’ve all heard the phrase “the network never lies”, but as more organizations adopt cloud computing, getting access to the network in the cloud has been challenging. Initially, cloud services, such as AWS CloudWatch and AWS CloudTrail, allowed you to collect logs, events, and metrics from your cloud environment, but not network packets or flows. […]
We’ve been scanning for vulnerabilities for a very long time (over 20 years for me), but the shift away from device vulnerabilities to application vulnerabilities creates some new challenges. Applications in the modern, digitally transformed world are much more complex. They include open source components and custom code, are deployed in containers, and run in […]
