Page 14 - White Papers in Next-Generation Technologies & Secure Development

Security Pros and Cons on Different Cloud Types: SANS Analysis

As cloud computing services evolve, the cloud opens up entirely new ways for potential attacks. Cloud systems and images have operating system and component vulnerabilities just like those in the enterprise. For example, Heartbleed, Shellshock and other major bugs can affect cloud systems, and there are new issues to...

Implement a Security Strategy Without Gaps: Identify, Prioritize and Address Risks

As global enterprises tackle the complexities of cloud-first deployments, changing threat and regulatory landscapes, and merging IT and operational technology (OT) networks, implementing a security strategy without any gaps has become an overwhelming challenge. As such, organizations are increasingly automating...

Keeping Pace of Growing Networks and New Attack Surfaces: SANS Report

As the threat landscape evolves in today's networks, information security teams are scrambling to keep up. Attackers are using new and stealthy methods to infiltrate organizations and steal data, and the complexity of most environments makes it easier than ever for attackers to compromise assets and send malicious...

Mistake or Malice? No Other Data Breach Source Compares to Accidental Loss

As a general rule, negligent incidents are far more common than malicious ones. Negligent insiders are employees that unintentionally jeopardize security, often through well-intentioned ignorance, laziness, or simple human error. While many security teams make the mistake of focusing exclusively on would-be malicious...

This Year's Global Threat Report: What to Know for 2019

The year's CrowdStrike® Global Threat Report offers one of the industry's most comprehensive reports on today's most damaging cyberattacks and dangerous adversaries. It contains valuable insights into the evolving threat landscape and includes recommendations that will help you be better prepared for the security...

Stop an Impending Attack: Use a Threat Graph to Analyze Cyber Events

One of the biggest challenges in stopping data breaches lies in sifting through vast amounts of data to find the proverbial "needle in the haystack" - the subtle clues that indicate an attack is imminent or underway in your organization. As modern computer systems generate billions of events daily, the amount of data...

2018 Threat Landscape Report

Our goal with this report has always been to track the ever-shifting contours of the cyber-threat landscape and communicate what we're seeing to our readers. Generally speaking, the TLI is based on the premise that if organizations are seeing more threats more frequently, then things are getting worse. If the...

The Evolution of the Targeted Attack

As the threat landscape evolves, it becomes a game of survival of the fittest. Only the best attacks and attackers remain standing, and the result is a series of targeted ransomware attacks that now cost global enterprises millions of dollars per year. This is among the important findings of the Sophos 2019...

2018 Insider Threat Solution Buyers Guide

The modern enterprise is relentlessly challenged by the number of insider-related variables and risk factors when building an enterprise security defense. Even with an established program, factors like technological innovation, shifting business priorities and public discourse can quickly force the need to re-examine...

Advanced Threat Detection Empowered By AI: Three Real World Examples

There has been so much hype around AI that seeing concrete examples of how the use of this technology can impact real world problems is often lost in the noise. This document takes a look at three scenarios from the Verizon Data Breach Report that have happened at specific organizations and details how AI can be...

How to Understand and Implement a Threat Hunting Program On a Tight Budget

Companies want to understand and implement threat hunting practices, but in reality - and with a limited budget - it is not always feasible to do so in-house, given the demand for resources and skills. That's where managed threat hunting enters.

The 2018 Insider Threat Intelligence Report

Despite increasing investment in security tools, organizations are still getting breached - and so many of those breaches, whether organizations realize it or not, are ultimately due to the human element. The 2018 Insider Threat Intelligence Report collects findings from Dtex's User Threat Assessments across the...

The New Malware Cyber Defense Paradigms

Malware continues to routinely evades organizations' cyber defenses. It lurks inside networks waiting to execute attacks that can cause significant damage. Automated Static Analysis of binary files enables security teams to unlock an array of new threat intelligence, hunting, analysis, and rapid response...

Deploying a Local Threat Intelligence Infrastructure

Threat intelligence analysts understand the near impossibility of searching global intelligence feeds to find the relevant threat information. the underlying problem is the lack of visibility and context across internal files. Having more visibility to these risks and vulnerabilities makes global threat...

SANS 2018 Threat Hunting Survey

This survey report reveals that for many organizations, threat hunting is still new and poorly defined from a process and organizational standpoint. Most are still reacting to alerts and incidents instead of proactively seeking out the threats. While the act of threat hunting cannot be fully automated, it heavily...