Blog

Building a Security Operations Center (SOC) requires strategic thinking. Here are 8 steps to follow to ensure a robust and resilient cybersecurity operation.

See how OT compliance frameworks and the right solution could have helped improve resiliency in three real industrial cybersecurity attacks

Our cybersecurity research team Vedere Labs examines today’s threats and targets. VPN vulnerabilities are easy prey for today’s attackers.

Breakthrough innovation arises primarily in response to two conditions. One, when new technology emerges that creates new demand by fulfilling needs customers didn’t know they had. Think smartphones. A generation ago, people didn’t know they needed to be tethered to a phone the size of their palm that was also a camera, a bank, an […]

Over the past three years, the second Tuesday of each month has turned into a hectic period of planning and remediation, driven by a 25% average annual growth rate in CVEs. Just last Tuesday, Microsoft revealed a critical TCP/IP remote code execution (RCE) vulnerability in the IPv6 stack, which has a CVSS score of 9.8 […]

The stereotype of IT security as the ‘gatekeeping’ department has run its course. Here are five ways to shift how cybersecurity teams are perceived. In a never-ending effort to do their job and secure their environments, cybersecurity teams often bear the brunt of negative perceptions, labelled as the department of ‘No.’ “No” to admin privileges, […]

We examine the new NIST Zero Trust draft guidance with links to review. See how to contribute during the comment period.

The current state of OT/IOT security is being repainted with a new coat of risk. The shade of color? Cellular routers and the vulnerabilities within firmware. In our new report with Finite State, our joint research explores the risks organizations face within the software supply chains of OT/IoT routers. Hardware has firmware – operational software […]

In the last few weeks, there have been a few announcements made about a new malware threat known as FrostyGoop or BUSTLEBERM (as it was originally tracked by Mandiant). It is being recognized as the first custom malware to integrate Modbus for the purpose of causing physical damage. An associated incident has been reported where […]