Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Latest posts

CISA KEV's Known Ransomware Attribution

This past week, Patrick Garrity, Security Researcher at Nucleus, spent a lot of time exploring Cybersecurity and Infrastructure Security Agency's update the Known Exploited Vulnerabilities catalog, which now includes attribution to vulnerabilities associated with ransomware campaigns. In this short video, he explores this new addition and walks through the data visualizations he created to provide broader visibility into this new addition.

Snyk: A Day in the Life of... DevSecOps Teams

Join this webinar to gain insights into the life of a secure developer. Discover how developers leverage Snyk to incorporate security practices into their daily workflow and collaborate with DevOps and security teams to efficiently produce high quality, secure code. Explore secure coding, dependency management, choosing secure containers, and avoiding cloud misconfigurations.

Windows Defender Firewall misconfigurations and GPOs: Connecting the dots

Many enterprises have a variety of aspects that make up their networks, like Windows Defender Firewall, GPOs, and an AD infrastructure. Vulnerabilities in any part of the network can have a domino effect; once the first domino falls, the entire trail will go down with it, which can cause irrevocable damage to your network.

SIEM Logging for Enterprise Security Operations and Threat Hunting

Today’s enterprise networks are diverse and complex. Rather than the simple network perimeter of old, bad actors can attack through multiple entry points, including cloud-based applications. Not to mention, these networks generate massive amounts of transactional data. Because enterprise networks have become larger, they’re more difficult to secure and manage.

Threat Informed Defense: Making ATT&CK Your Own

The MITRE ATT&CK framework is one of the most commonly used resources within the SafeBreach platform. At SafeBreach’s 2023 Validate Summit—an event that brings security experts together to discuss challenges and best practices in proactive cybersecurity—SafeBreach Co-Founder and CTO Itzik Kotler sat down with Frank Duff, the Chief Innovation Officer at Tidal Cyber, to discuss threat informed defense and MITRE ATT&CK.

The Biggest Takeaways From SOC Analyst Appreciation Day 2023

SOC Analyst Appreciation (SAAD) Day 2023 has come and gone. With great speakers and great sessions, it was a can’t-miss event for SOC analysts and anyone else looking to better appreciate their SOCs and see what’s on the horizon for cybersecurity. But hey, we realize that despite your best efforts, some SOC teams and leaders couldn’t make it the day of.