Cybersecurity’s Hiring Spree Requires a Recruiting Rethink
Look for people with key traits like a willingness to learn, an analytical ‘hacker mindset’ when discovering the unknown, creativity, and attention to detail.
-
-
Microsoft Investigating Exchange Zero-Day
LockBit is now the #1 ransomware gang worldwide. LockBit 3.0 — aka ‘LockBit Black’ — delivers advanced features such as disabling Defender to evade detection.
-
SOC Analyst: A Good Way to Enter the Cybersecurity Field
How to get started? Demonstrate the ability to think through problems and explain how you arrive at possible solutions.
-
CardinalOps Expands Detection Posture Management Platform
Enables MITRE ATT&CK operationalization via CrowdStrike Falcon LogScale support, in addition to current support for Splunk, Microsoft Sentinel, IBM QRadar.
-
How Detection Posture Management Can Help CISOs Track the Right Metrics
In a recent SC Media column, Michael Mumcuoglu – CEO of CardinalOps, writes that instead of manually identifying gaps in MITRE ATT&CK coverage, it should be automated so that security teams always have a clear
-
Researchers Warn of ‘Rosy’ Security Reports in Wake of Twitter Whistleblower Case
Mudge has a ton of credibility as a former ethical hacker and cyber expert at Google and DARPA. Boards should be wary of rosy reports about security controls.
-
Twitter Lacks Cybersecurity Best Practices: Leaders Across the Industry React
Deficiencies include uncontrolled internal access to privileged accounts, inability to control bots and disinformation, and lack of a secure SDLC.
-
Human Error Blamed for Leak of 1 Billion Records of Chinese Citizens
Organizations should establish processes to continuously identify, prioritize, and remediate gaps in their security monitoring to detect anomalous activity.
-
Tips to Bolster Cybersecurity, Incident Response this 4th of July Weekend
Have SOC personnel monitoring 24×7 for suspicious activity. Patching can’t protect against a supplier being compromised or stolen privileged credentials.
-
Cybersecurity Experts: July 4th Weekend Ripe for Ransomware
Apart from being up to date on patching, backups, and MFA — monitor 24×7 in the SOC so you can quickly shut down an attack before it reaches your crown jewels.
-
CardinalOps Advances to Final Round of 2022 SINET16 Innovator Awards
Automation and MITRE ATT&CK address complexity headaches that SOC teams have in managing their SIEMs – including Splunk, Microsoft Sentinel, and IBM QRadar.
-
China-Backed RedAlpha APT Builds Sprawling Cyber-Espionage Infrastructure
China performs industrial espionnage to obtain technology expertise and also has targeted PII in two of the largest data breaches in history ― OPM and Anthem.