CISOs, Security Leaders Eyeing Other Job Options
CISOs and SOC personnel take pride in being cyber defenders for their organizations and feel the pain of information overload and constantly being on call.
News & Updates
-
-
CardinalOps Hosts Black Hat Webinar with Google’s Dr. Anton Chuvakin on “SOC Modernization – Where Do We Go From Here?”
Why SOC modernization extends beyond technology alone, providing an opportunity to incorporate human creativity and innovation as a strategic force multiplier.
-
CardinalOps Selected as Finalist for Cyber Defense Black Unicorn Awards
The awards showcase companies with game-changing potential. Past winners and finalists include Armis, Siemplify, Checkmarx, Ermetic, and Attivo.
-
‘Text4Shell’ vulnerability is Not a Sequel to Log4Shell
No matter what words are used, it has a CVSS score of 9.8 because it lets a threat actor open a reverse shell simply via a specially-crafted payload.
-
Cybersecurity’s Hiring Spree Requires a Recruiting Rethink
Look for people with key traits like a willingness to learn, an analytical ‘hacker mindset’ when discovering the unknown, creativity, and attention to detail.
-
Microsoft Investigating Exchange Zero-Day
LockBit is now the #1 ransomware gang worldwide. LockBit 3.0 — aka ‘LockBit Black’ — delivers advanced features such as disabling Defender to evade detection.
-
SOC Analyst: A Good Way to Enter the Cybersecurity Field
How to get started? Demonstrate the ability to think through problems and explain how you arrive at possible solutions.
-
CardinalOps Expands Detection Posture Management Platform
Enables MITRE ATT&CK operationalization via CrowdStrike Falcon LogScale support, in addition to current support for Splunk, Microsoft Sentinel, IBM QRadar.
-
Researchers Warn of ‘Rosy’ Security Reports in Wake of Twitter Whistleblower Case
Mudge has a ton of credibility as a former ethical hacker and cyber expert at Google and DARPA. Boards should be wary of rosy reports about security controls.
-
Twitter Lacks Cybersecurity Best Practices: Leaders Across the Industry React
Deficiencies include uncontrolled internal access to privileged accounts, inability to control bots and disinformation, and lack of a secure SDLC.
-
Human Error Blamed for Leak of 1 Billion Records of Chinese Citizens
Organizations should establish processes to continuously identify, prioritize, and remediate gaps in their security monitoring to detect anomalous activity.
-
Tips to Bolster Cybersecurity, Incident Response this 4th of July Weekend
Have SOC personnel monitoring 24×7 for suspicious activity. Patching can’t protect against a supplier being compromised or stolen privileged credentials.