What Goes Into the Cost of a SIEM?

As we've covered before, SIEMs are an expensive tool. The average enterprise-level SIEM deployment costs over £15 million a year, and operating a small, 100 to 1000-seat SIEM will still run up bills of over £10k monthly. SIEMs create spiralling costs that eat security budgets. Without a skilled team operating them, they can also make organisations less secure despite receiving more information about their digital estates. But where do these SIEM costs come from?

Going Beyond Network Detection and Response Tools

Are most network detection and response tools missing something? We think so. Network detection and response (NDR) is an incredible technology. With it, you can analyse network packets for malicious behaviour, spot insider threats, and even find connected devices you don’t own. However, if you want to implement NDR in your environment, you typically need to install proprietary hardware or run your NDR on a dedicated server.

Unlocking Success: Neerja Bajaj's Data-Driven Revolution at Brivo

Dive into the heart of Brivo's innovation with Neerja Bajaj, the visionary behind our data-driven solutions. 🛠️🌟 In this exclusive video, we explore how Brivo's commitment to data collection and insights has been a game-changer in developing successful solutions for smart spaces technology. 🚀🌐 From the drawing board to real-world applications, discover the strategies and tools that have positioned Brivo as a leader in the industry for over two decades. 🌟📈

Choosing Attack Surface Visibility Software in 2024

There’s one major between organizations that fall victim to a data breach and those that don’t - attack surface awareness. Even between those who have implemented an attack surface management solution and those who haven’t, the more successful the cybersecurity programs more likely to defend against a greater scope of cyber threats are those with greater attack surface visibility.

Stages of Burnout in Cybersecurity: Recognising the Signs | Razorthorn Security

Unpack the stages of burnUnpack the stages of burnout in the demanding field of cybersecurity out in the demanding field of cybersecurity with this detailed analysis from the Razorwire Podcast. Explore how high energy and engagement initially characterize effective work, but can degrade into ineffectiveness, overextension, and ultimately, disengagement. This episode delves into the psychological progression of burnout, emphasizing the critical point where professionals feel they can no longer manage alone, highlighting the importance of seeking help.

Cisco Duo Third-Party Compromise

On April 16, 2024, Cisco Duo informed affected customers of a breach involving their SMS and VOIP multi-factor authentication (MFA) service provider. The breach occurred on April 1st due to a phishing attack, allowing unauthorized access to the provider’s systems, including SMS and VoIP MFA message logs for specific Duo accounts between March 1st and March 31st, 2024. Though the threat actor accessed message logs, they did not obtain message content.

Critical Authentication Bypass Vulnerability in Delinea Secret Server Disclosed Along With PoC

On April 12, 2024, Delinea issued an advisory to address a critical authentication bypass vulnerability identified in the SOAP API component of its Secret Server product, available in both Cloud and On-Premises solutions. A threat actor could exploit this vulnerability to bypass authentication, gain administrative access, and extract sensitive information.
Featured Post

How threat intelligence can improve vulnerability management outcomes

It might surprise you to know that more than 70 new vulnerabilities are published every day. And despite their risk-reducing value in helping SOC teams address these, vulnerability management solutions have drawbacks. Often, they only provide a snapshot of an organization's vulnerabilities at a point in time. In fact, owing to their nature, vulnerabilities identified today may not exist tomorrow, or they may appear and disappear intermittently. This leaves security teams scrambling to understand not only what the risk is, but how it affects them and where they should start first with any remediation.