6 Signs of Successful Threat Hunting

When a threat hunting program is established by an organization, their goal is to proactively hunt threats, with a focus on newer, more sophisticated attacks for which reliable signatures or indicators are not yet available. Bonus: Check out the "Top 5 Threat Hunting Myths" However, without an...

The Many Paths To A Cybersecurity Education

Ask a room full of cybersecurity professionals about their educational background and how they got started on their career path and you’re going to get a myriad of different answers. From one perspective, that’s frustrating. It’s hard to confidently recommend a path for people starting out when...

The Gartner CISO Playbook: Leveraging Effective Control in the Cloud

For as long as we can remember, the concept of control has rested comfortably in physical location and ownership. It’s simple, if you could see something or you knew exactly where it was, it would be easier to assume that you’d have some measure of control over its security. With the move to the...

Unfiltered Endpoint Data: Tilting The Advantage Back To The Defenders

Mike Viscuso founded Carbon Black following a 10-year career in offensive security for the NSA and CIA. Carbon Black was Mike’s first time on the defensive side of cybersecurity. He came to the job with more than just a mastery of the tools and techniques used by attackers; Mike brought a state o...

10 Tips for Effective Threat Hunting

Editor’s Note: The text appears in the free eBook: “Threat Hunting for Dummies.” Consider the fact that attackers don’t think of their success as optional. Given that, effectiveness and success of a threat hunting program are critical. Organizations that start a threat hunting program have succes...

Defenders Need to Embrace Offensive Computer Security Skillsets

MIAMI—Defense may win football championships, but it gets steamrolled in computer security arenas. “A dollar of offense beats a dollar of defense,” said Nate Fick, CEO of Endgame Inc., on Thursday during his keynote address at Infiltrate Conference. Fick’s talk in front of an audience of exploit...

Threat to U.S. Government and Businesses 'Deep and Broad', Expert Says

LAS VEGAS–It’s not difficult to find people here who are excited about security. There are roughly 10,000 of them in town this week. But there’s a smaller group of people who are on a different level, who are so passionate and amped up about their ideas that they can’t stop themselves from talkin...

Cryptosystems Showing Signs of 'Wear and Tear'

SAN FRANCISCO– It’s been an interesting year in the cryptography world, with new attacks on several algorithms, continued problems with hash functions and the recent research on weak RSA keys. With all of that as a backdrop, some of the brightest minds in the field, gathered here for the RSA...

Dino Dai Zovi: Attacker Math

In his keynote address at the SOURCE Boston conference this year, independent security researcher Dino Dai Zovi discussed the attacker mentality and they way that defenders can adopt it to better protect their networks...

Rethinking Black Hat: Building, Rather Than Breaking, Security

No doubt breaking things is fun. I remember back when I was 10 years old when I took apart a squirrel cage fan, flipped some wires and so forth, and then attempted to plug it back in. Good thing my mom stopped me seconds before I was about to get a literal jolt of reality. These days, I still kee...

It's Time to Move Away From the Build or Break Mentality

SAN FRANCISCO–The vulnerability disclosure and patching arms race that has developed in the last decade or so in the security industry has made life extremely difficult not just for the developers writing code, but also for the folks who are interested in helping to fix broken applications. A new...

Dave Aitel, Immunity

Dave is one of the four or five smartest people I’ve ever interviewed, and not just on matters related to security or technology in general. His posts on the Daily Dave mailing list are always thoughtful and often funny and he has a knack for explaining insanely complex exploitation techniques,...