Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Scanning the Matrix: SIEM Best Practices

(A thought from The Matrix: Neo likely used a SIEM before he took the red pill and could see the matrix without one...) One of the best ways to monitor security-related activities for your organization is to collect audit logs from every network device and analyze those logs for activities which violate acceptable behavior. This is precisely the role of a SIEM or Security Information and Event Manager. Let me simplify your life by providing some best practice suggestions for deploying and using a SIEM.

How Can CISOs Elevate Their Contribution Within the C-suite?

Businesses manage a series of balancing acts every day—between innovation and reliability, for instance, investment or profit, speed or security. Each leader contributes to how decisions are weighed and made, and traditionally CISOs have been expected to operate at one end of that scale, as the chief protector of the business.

Achieving High Organizational Security Scores Using Microsoft Secure Score

As businesses engage in increasingly complex and interdependent relationships, ensuring all parties maintain high cybersecurity standards becomes essential. One method to achieve this is using security scores, which are similar to personal credit scores, and assessing the efficacy of an organization's cybersecurity program. However, there are certain changes and additions that should be made to how scoring is conducted that will ensure a more accurate scores, which will benefit stakeholders at all levels.

Business Email Compromise (BEC): Tracking a Threat Actor's Funny Business

In a recent LevelBlue incident response engagement, an analyst in our managed detection and response (MDR) security operations center (SOC) responded to an alarm that was triggered by a suspicious email/inbox rule. The rule aimed to conceal responses to an internal phishing attempt from the account user, so the attacker could solicit funds from the company's users.

What is a CDN (Content Delivery Network) and How does a CDN Work?

In this video, we explain what a Content Delivery Network (CDN) is and how it works to improve your website’s performance. If you've ever experienced a slow website, you know how frustrating it can be for both you and your visitors. A slow website can lead to losing customers and lower rankings on search result pages. That's where a CDN comes in. A CDN improves your website's loading times by serving content from the server closest to your visitors. By caching content at various data centers, a CDN reduces the distance data must travel, leading to faster load times and lower bandwidth costs.

What is a DNS (Domain Name System) and How Does a DNS Work?

Explore the essential role of DNS (Domain Name System) in the internet ecosystem with this detailed video. Whether you're navigating the web or managing websites, understanding DNS is vital for optimizing website loading speeds and bolstering cybersecurity.. In this video, we cover: Whether you're a beginner curious about internet infrastructure or a tech enthusiast seeking deeper insights, join us as we unravel the mechanics of DNS. This video provides invaluable knowledge to empower you in navigating the digital world effectively.

Configuring Policies | JumpCloud University Tutorial (2024)

In this tutorial, we'll go over how to configure policies for your JumpCloud managed devices. You can use JumpCloud policies to remotely manage devices in your organization. To discover more resources checkout JumpCloud University where you’ll find courses, tutorial videos, engaging guided simulations, and end user content.

Unintentional Insider Threats: The Overlooked Risk

Could your employees be unintentionally putting your business at risk? While companies prioritize protection against external cyber threats, the often-overlooked unintentional insider threats can lead to significant financial and reputational risks for your business. These threats can come from simple human errors, such as accidental data sharing, misconfigurations, or falling victim to phishing attacks.