News, analysis and guidance on incident response, from breach post-mortems to plan-building. Written by the community, added to as we publish.
Cyber security is one of the direst threats facing modern businesses today. Global cyber-crime damages were set to exceed six trillion dollars each year by 2021. An incident response plan gives you th...
Read the post →With cyber-attacks reaching tens of millions a day, cyber security should be top of mind for nearly every modern business. A report released by Experian shows that this is not the case, especially for...
Read the post →Sophisticated monitoring tools can identify a breach before it gets out of hand. Advanced diagnostics classify how critical the attack could become. Semi-autonomous measures can execute a proven respo...
Read the post →More than 4,000 ransomware attacks happen every day. 1 million new malware threats daily. Over three quarters of organisations have been targeted by phishing in 2016. 1. Vary up your logins 63 percent...
Read the post →While the most sensational headlines involve infiltrating ironclad security systems, the truth of how hackers penetrate your system is more boring: it is your employees. The overwhelming majority of b...
Read the post →Odds are, your business is going to be hit by a cyber-attack. Cybercrime is booming and does not show any signs of slowing. IT workforce shortage Cybersecurity will have more than 1.5 million unfilled...
Read the post →Modern cyber terrorists are not as discriminating as they used to be. About half of all cyberattacks now end up with small businesses in the crosshairs. 1. A seriously compromised security staff By 20...
Read the post →The government sector has been notoriously slow to adopt modern cyber security measures. A Netwrix report found that only 14 percent of government organisations believe they are well-prepared to face ...
Read the post →IoT is rapidly changing how consumers and manufacturers interact with the world. Over 34 billion devices were expected connected to the internet by 2020, with 24 billion IoT. The threat of IoT today T...
Read the post →As CISO it is your responsibility to safeguard your company. The role is rapidly changing across the board. The Internet of Things In H1 2017, IoT attacks rose by 280 percent. Conduct regular audits, ...
Read the post →One Ponemon Institute study found 90 percent of businesses that suffer a data loss close their doors within two years. 80 percent fail within 13 months. Develop a "when not if" mindset Cybercrime will...
Read the post →Data breaches and cyber attacks have become commonplace in the news. The average cost of a data breach is 3.62 million dollars. 43 percent of all cyber attacks are on small businesses, many of whom go...
Read the post →Greenbelt, Md., August 16, 2017. Cybrary, the open-source cyber security and IT online learning and certification preparation platform, today announced that Co-Founder Ryan Corey has been named to the...
Read the post →IR17 was a conference for cyber security practitioners to learn and develop playbooks to improve incident response in their organisations. The infographic accompanying this post laid out why practitio...
Read the post →The purpose of a security playbook is to give all members of an organisation a clear understanding of their responsibilities before, during, and after a security incident. Key action steps include: In...
Read the post →The role of security analysts has evolved. With a substantial influx of complex data for human operators to process, automation is becoming common in the cybersecurity environment. Computers are incre...
Read the post →It is amazing how much data people put on the internet. Credit card information, online shopping, personal information on social media, emails between colleagues, chat in apps like WhatsApp. There is ...
Read the post →The main concern of a business executive is profitability. Every day they decide where to invest money by comparing costs and benefits, seeking return on investment. Finding ways to keep costs down wh...
Read the post →With a gigantic number of security alerts and threat intelligence to manage, it can feel impossible for managers to get a complete view of cyber attacks. There is simply too much information to collec...
Read the post →A devastating wave of ransomware known as WannaCry spread to over 200 countries. Russia was hit hardest by infection volume. The United Kingdom, Spain and other countries saw damage to their national ...
Read the post →An important first step in improving the nation's cyber security was taken by the President last week. On Thursday, President Trump signed an executive order on strengthening the cyber security of fed...
Read the post →If you work in cybersecurity, you have heard of SOCs and CSIRTs. Which is better? It depends on the needs of your organisation. Security Operations Center The SOC is the brain. It performs prevention,...
Read the post →An incident response (IR) plan is just books on a shelf if it is not maintained. These written guides, which show how organisations should detect, respond to and limit the effects of a security incide...
Read the post →Small and medium-sized enterprises (SMEs) are vital to their communities. Small in stature, important to the global economy. SMEs typically do not have the resources or a dedicated cyber security team...
Read the post →Who would have thought 20 years ago that our phones could be used to steal passwords, money, email accounts and personal details like fingerprint and heart rate data? Besides computers and cell phones...
Read the post →Companies and organisations keep getting hacked. Every hack becomes a marketing opportunity for cyber-related companies and investors. The stock market kept climbing through 2017, and cyber security s...
Read the post →A Security Operations Centre (SOC) is a well-structured department dedicated to responding quickly to alerts and solving incidents. If you have ever visited or worked at a SOC, you understand how diff...
Read the post →Some believe CERT and CSIRT are interchangeable. They are not. CERT Computer Emergency Response Team. Found in major computer security organisations across government, commerce, and academia. Staffed ...
Read the post →Through extensive research and technological development, the guidelines for trustworthy cyber security operations have evolved. Secure systems advanced and now provide capabilities, functions and ser...
Read the post →The exponential rise in attacks has made executives more proactive. Firewalls, antivirus, IPS and IDS will not prevent every intrusion. It is not if, it is when. 1. Not on the lookout You cannot prote...
Read the post →We hear about cyber security attacks in the news all the time. We know they exist in our daily lives and some people fear them. How dangerous are they actually? More than half of organisations lack th...
Read the post →We all know socks are comfy. What about the other SOC, the Security Operations Centre? This post is about how to develop one successfully. Most likely the SOC is in the basement of your company and yo...
Read the post →You did everything you could to land the CISO role. You built your network, kept your training fresh, logged the hours in other infosec roles. You are ready to rock. Boards and business executives wil...
Read the post →Cyber security has been in the headlines more than ever. The reason is that our society's progress is now developing hand in hand with technology and data. We are becoming more vulnerable in digital s...
Read the post →Most companies have adopted the monitor-and-response strategy via SOC or NOC. The two complement each other but should stay separate. The NOC Handles performance and availability. Meets SLAs and reduc...
Read the post →The RSA conference attracted the biggest crowd of vendors and attendees since its beginning. It was a particularly busy time for companies in the security automation and orchestration space. Disruptio...
Read the post →Incidents are the first indication that there is a problem in the network. They are often precursors to a much more serious disaster, if not responded to. If incident response (IR) is not planned and ...
Read the post →We have just upgraded our new SOC brick and block kit. The idea behind the kit is to provide a fun way to look at the cyber security industry. The desk-size SOC system shows two workers analysing diff...
Read the post →In our last post we covered the benefits, functions and tasks of the Security Operations Centre (SOC). This part continues with the benefits of a well-developed SOC. The SOC's main job is to find indi...
Read the post →An increasing number of high-profile cyber security incidents, from Sony Pictures to Apple App Store hacking, has encouraged enterprises to invest in and develop their Security Operations Centres (SOC...
Read the post →According to major cyber security readiness reports, 62 percent of organisations have acknowledged that they were breached. Being prepared for a cyber security breach is not about if but when . Given ...
Read the post →By Leland Bettis, VP CyberSponse Inc. Defence is not enough: plan for the breach A strong defence is not only important, it is critical. Without a focused defensive posture, including adaptation to em...
Read the post →By Chris Coriale, VP of Technology, CyberSponse. It has been said that perception is reality. In a world where cyber attacks and data breaches are daily news, an incorrect perception can create a terr...
Read the post →Short video commentary from the legacy IRC blog.
Read the post →Short video commentary from the legacy IRC blog.
Read the post →Short video commentary from the legacy IRC blog.
Read the post →Short video commentary from the legacy IRC blog.
Read the post →Short video commentary from the legacy IRC blog.
Read the post →Short video commentary from the legacy IRC blog.
Read the post →Short video commentary from the legacy IRC blog.
Read the post →Short video commentary from the legacy IRC blog.
Read the post →Short video commentary from the legacy IRC blog.
Read the post →Short video commentary from the legacy IRC blog.
Read the post →Short video commentary from the legacy IRC blog.
Read the post →Short video commentary from the legacy IRC blog.
Read the post →Short video commentary from the legacy IRC blog.
Read the post →Short video commentary from the legacy IRC blog.
Read the post →Short video commentary from the legacy IRC blog.
Read the post →Short video commentary from the legacy IRC blog.
Read the post →Short video commentary from the legacy IRC blog.
Read the post →Short video commentary from the legacy IRC blog.
Read the post →Short video commentary from the legacy IRC blog.
Read the post →Short video commentary from the legacy IRC blog.
Read the post →Short video commentary from the legacy IRC blog.
Read the post →Short video commentary from the legacy IRC blog.
Read the post →Short video commentary from the legacy IRC blog.
Read the post →Short video commentary from the legacy IRC blog.
Read the post →Short video commentary from the legacy IRC blog.
Read the post →Short video commentary from the legacy IRC blog.
Read the post →Short video commentary from the legacy IRC blog.
Read the post →Short video commentary from the legacy IRC blog.
Read the post →Short video commentary from the legacy IRC blog.
Read the post →Short video commentary from the legacy IRC blog.
Read the post →Short video commentary from the legacy IRC blog.
Read the post →Short video commentary from the legacy IRC blog.
Read the post →Short video commentary from the legacy IRC blog.
Read the post →Short video commentary from the legacy IRC blog.
Read the post →Short video commentary from the legacy IRC blog.
Read the post →Short video commentary from the legacy IRC blog.
Read the post →Short video commentary from the legacy IRC blog.
Read the post →Short video commentary from the legacy IRC blog.
Read the post →Short video commentary from the legacy IRC blog.
Read the post →Short video commentary from the legacy IRC blog.
Read the post →Short video commentary from the legacy IRC blog.
Read the post →Incident response is an organised approach to addressing and managing the aftermath of a security breach or attack. The goal is to limit damage and reduce recovery time and costs. The original post in...
Read the post →There were many breaches in 2014 from security holes such as the Heartbleed bug and tampering with credit card machines. The infographic on the original post displays the top 10 breaches. The Home Dep...
Read the post →Community calls coming up, new resources published, and what we're seeing across the membership.
One email a month. Unsubscribe any time. Read our privacy notice.
