George V. Hulme

Some immediate lessons for security teams to heed.

Recent attempted ransomware attacks shine a light on effective defenses.

The bad guys are taking full advantage of AI to improve the production and effectiveness of their phishing attacks. Here’s how security practitioners can fight fire with fire.

The technical controls that provide the most anti-ransomware capabilities for the dollar are not necessarily expensive or require much in the way of staff to manage, such as multi-factor authentication, regular data backups, and enforcing good access policies, such as the principle of least privilege.

If there’s one thing previous transformation waves of technology have taught us, it’s that the companies that are successful in managing this new technology won’t be those that attempt to ban it outright. Enterprises with sensible AI policies will succeed.

By taking these actions, individuals and organizations can preemptively reduce their risk and chances of costly and embarrassing security incidents such as falling victim to ransomware, having data exposed, or being fined for non-compliance as a business.

MDR services can most certainly help organizations improve their detection and response capabilities.

Once attackers penetrate Active Directory, they can move laterally from system to system through the network, steal data, access applications and servers, plant backdoors and ransomware, and cause other types of disruption.

The promise and peril of AI will dominate RSA Conference 2023

In the previous post, we focused on IDS/IPS to monitor network traffic. Here, we focus on the modern security technologies that extend and enhance the capabilities of network IDS/IPS: network traffic analysis (NTA), network detection and response (NDR), and sandboxing.