Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Latest Publications

The SolarWinds Vulnerability

Before the ink was even dry on the SUNBURST headlines, another threat campaign ("SUPERNOVA"), run by a different threat actor, was discovered. This paper addresses the SolarWinds authentication bypass vulnerability, how SUPERNOVA exploits that vulnerability, and one way organizations can protect themselves against attacks like SUPERNOVA.

Five Steps to a Modern Cyber Risk Management Team

A company-wide cybersecurity strategy is absolutely essential to combat today's evolving risk landscape. This means breaking down silos and encouraging the engagement of security experts throughout different business units. By leveraging collective understanding to expose unknown threats, you can amplify the effectiveness of your security program and technology stack. We call this "Modern Cyber Risk Management".

SANS 2020 MITRE ATT&CK

The Adversarial Tactics, Techniques & Common Knowledge (ATT&CK) project by MITRE is an initiative started in 2015 with the goal of providing a "globally-accessible knowledge base of adversary tactics and techniques based on real-world observations. Since its inception, ATT&CK has taken the information security industry by storm. Many vendors and information security teams the world over have moved to adopt it with blinding speed-and for good reason: It is one of the most exciting, useful and needed efforts within InfoSec in recent memory.

Safeguard Digital Journeys with Robust ID Verification

Even as COVD-19 slammed the brakes on in-person interactions across the globe, it simultaneously accelerated the virtualization of working models. Everything that was online was accessible; anything that was not, lagged behind. In response, companies have raced to support and retain their customers by providing digital capabilities and online experience at a speed that was previously unimaginable. As the digital economy amplifies on a global level, seamless online transactions are penetrating communities all over the world. But with this, there is a growing threat of probable frauds too.