For providers

Combining a malware sandbox with threat intelligence feeds improves security detection, analysis, and response capabilities.

Does your security operation center's performance meet the 5/5/5 benchmark for cloud threat detection and incident response?

This year marks the tenth anniversary of the Microsoft Bug Bounty Program, an essential part of our proactive strategy to protect customers from security threats. Since its inception in 2013, Microsoft has awarded more than $60 million to thousands of security researchers from 70 countries. These individuals have discovered and reported vulnerabilities under Coordinated Vulnerability Disclosure, aiding Microsoft in navigating the continuously evolving security threat landscape and emerging technologies.

Shocking as it was to see ALPHV/BlackCat report a ransomware case to the SEC, with the new SEC regs about to go into effect December 15, we’ll likely see more of this tactic.

While reviewing one of my honeypots to convert some of the JSON data, I noticed some of my files were much larger than I expected. That leads to the question, how large should these files normally be and why are some of them so large? To help summarize this data a bit easier, it seemed like a good idea to make another python script.

CISA expects to extend this program to include up to 100 critical infrastructure entities in its first year.

CISOs and vendors must work together to keep up with emerging threats and find solutions, says a group of CISOs and security entrepreneurs.

The Known Exploited Vulnerabilities (KEV) catalog is a high-quality source of information on software flaws being exploited in the wild, but updates are often delayed, which means companies need other sources of threat intelligence.