Active adversary report: Ransomware hit a ceiling, but security teams at risk for more pain
Despite a pause in the rise of ransomware, organizations are failing to take the steps necessary to adequately defend themselves against the increase in attacks to come.
The CVE's They are A-Changing!, (Wed, Apr 17th)
The downloadable format of CVE's from Miter will be changing in June 2024, so if you are using CVE downloads to populate your scanner, SIEM or to feed a SOC process, now would be a good time to look at that. If you are a vendor and use these...
Multiple LastPass Users Lose Master Passwords to Ultra-Convincing Scam
CryptoChameleon attackers trade quantity for quality, dedicating time and resources to trick even the most diligent user into handing over their high-value credentials.
Rethinking How You Work With Detection and Response Metrics
Airbnb's Allyn Stott recommends adding the Human Maturity Model (HMM) and the SABRE framework to complement MITRE ATT&CK to improve security metrics analysis.
In memoriam: Steven Young, respected CISO and former Cybersecurity Collaborative VP
As VP and CISO of Advantage Solutions, Cybersecurity Collaborative, Blue Shield of California, and Kellogg’s, Young set new standards for excellence in the field.