Portfolio

When cyber attackers managed to shut down the Colonial Pipeline – one of the largest oil pipelines in the United States – in 2021, it quickly prompted the widespread modernization and strengthening of cybersecurity for critical infrastructure across the nation. As these types of cyber attacks become more frequent and more severe, it begs the question: Is there too much “trust” in most organization’s cybersecurity architecture? And, should IT teams implement Zero Trust architecture to prevent these security lapses in the future?

Ransomware may be making more headlines, but cyber criminals are reaping far more rewards through Business Email Compromise (BEC). Also known as Email Account Compromise (EAC), BEC netted at least 17 times more profit per incident than ransomware, costing organizations around $2.4 billion in 2021 alone. In the first quarter of 2022 alone, BEC cases doubled from 17% of all incident response cases to 34%. Although a relatively low-tech form of financial fraud, BEC/EAC yields high returns for scammers with minimal risk. So how do BEC scams work? And how can organizations defend against them?

Short for 'robot network,' botnets are a serious issue facing enterprise security today. In June 2022, a botnet dubbed “Mantis” targeted cybersecurity company Cloudflare, executing a widespread HTTPS Distributed Denial of Services (DDoS) attack affecting over 1,000 of the company’s customers.

From AV to EPP to EDR and now XDR (extended detection response), these changing technologies reflect an ever-present truth: cyber threat actors are always evolving, and defenders should stay one – or more – steps ahead. Today, the dynamic threat landscape coupled with fast-paced business innovations has prompted most organizations to move from an on-prem world bound by a manageable network perimeter to a distributed cloud-powered infrastructure. Further complicated by remote working environments and nearly 5 billion monthly teleconferences, ensuring business continuity and operational security has arguably never been more complex. The number of threat actors, successful cyberattacks, and offensive toolsets is increasing exponentially.

Cyber attacks occur every 39 seconds and affect 1 in 3 Americans per year. Basic cybersecurity tips like encrypting data and using unique passwords aren’t enough. Your organization needs something more powerful to stay safe, think cyber threat intelligence. Threat intelligence involves collecting and analyzing information about past, current, and future cybersecurity threats. Your SOC, CSIRT, and other partners can use this data to prevent and respond to attacks.

"Cyber threats are frequently changing, as are defense and prevention tactics. Today, an increasing number of organizations implement a layered approach to cybersecurity that encompasses administrative, technical and physical security controls..."

Cybercrime is growing in volume and sophistication, and security breaches are becoming more destructive, yet both are becoming increasingly difficult for organizations to detect. Ensuring networks and systems are safe and secure is of the utmost importance, but many organizations can fall short in one key area: their endpoints.

Any account or identity can provide a digital attack path for adversaries – from an IT administrator, to HR admin, to a third-party vendor or even a customer. This is why, in identity security, organizations should be able to protect the identities of their users and the systems that manage them.