Threat Intelligence

Management / Security Operation Center / Threat Intelligence

The MITRE ATT&CK Framework is powerful if …

Management / Threat Intelligence / Vulnerability Management

Running an effective and efficient Enterprise Vulnerability Management program

2024

Security Operation Center / Threat Intelligence

Increasing SOC’s effectiveness with well-defined use cases

The SOC is pivotal in protecting an organization’s digital assets, acting as the nerve center for detecting, investigating, and responding to cybersecurity threats. However, the SOC’s effectiveness is drastically improved with well-defined use cases to guide its operations. A use case provides the SOC with a focused, structured scenario or specific problem to address, ensuring its activities align with the organization’s unique threat landscape and security priorities.

September 15, 2024
Management / Threat Intelligence

Which type of CISO are you?

As technology proliferates, adversaries’ capabilities escalate exponentially. While adversaries can concentrate on mastering a specific technology, defenders are burdened with safeguarding against all potential attack vectors. This equilibrium has long been disrupted, leaving us to grapple with its consequences. In light of this reality, the pertinent question arises: where do we go from here?

March 24, 2024
Management / Threat Intelligence

Risk Management — It might be more complex than you think

In the dynamic landscape of cybersecurity, the continuous influx of vulnerability disclosures and the rapid dissemination of the latest TTPs through various channels pose a significant challenge for CTI specialists. In cybersecurity risk management, identifying and assessing relevant cyber threats are critical tasks, and effective strategy must be employed to navigate this constant flow of information.

March 17, 2024
Architecture / Management / Security Operation Center / SOAR / Threat Intelligence

Establishing a Cybersecurity Citadel: Forging a Digital Fort Knox

In an era dominated by digital landscapes, where technological advancements continue to reshape how we live and work, the paramount importance of cybersecurity cannot be overstated. As organizations and individuals become increasingly interconnected, the threat landscape evolves in tandem, necessitating a robust and adaptive defense strategy.

February 23, 2024

2023

Security Operation Center / Threat Intelligence

When was the most recent instance in which you performed OSINT on yourself?

In our ever more interconnected and digital world, it might, at first, appear counterintuitive to champion the practice of conducting OSINT on the very company you are entrusted to safeguard. However, this seemingly paradoxical notion underscores a fundamental truth in the realm of cybersecurity and corporate defense — if you can access information about your organization through OSINT techniques, so too can malicious actors with potentially nefarious intent.

November 5, 2023
Architecture / Management / Security Operation Center / SOAR / Threat Intelligence / Vulnerability Management

Hey data scientist, are you really listening to the security data?

Protecting your company against the evolving landscape of both current and past threats is a formidable challenge, one that some consider insurmountable. However, it’s crucial to remember that while it may be a daunting task, it should not be perceived as impossible. In fact, it’s imperative to recognize that modern security strategies need to adapt to the ever-changing nature of cyber threats. This adaptation relies on the effective utilization of data generated by security controls, a process that transforms raw data into actionable events.

October 29, 2023
Architecture / Management / Security Operation Center / SOAR / Threat Intelligence / Vulnerability Management

The ‘lazy’ SOC model

In the contemporary landscape, the paramount importance of security is becoming increasingly evident, casting a spotlight on the escalating workload of the SOC. This burgeoning workload is characterized not only by a surge in the sheer volume of requests and inquiries but also by the growing intricacy of security challenges. In this dynamic environment, when a security incident unfolds, there is an implicit expectation for the SOC to respond promptly and with pinpoint accuracy. Simultaneously, the SOC grapples with a persistent conundrum exacerbated by a global shortage of highly skilled security professionals — recruitment and retention.

October 22, 2023
Architecture / Data Science / Threat Intelligence

The importance of having a data scientist team in Cyber Security Center

Numerous parallels exist between the strategic board game ‘Stratego’ and the operation of a Cyber Operation Center. In ‘Stratego,’ you engage in one-on-one gameplay, but within the Cyber Security Center, you’re navigating multiple games simultaneously. Your objective remains steadfast: safeguard the flag for as long as possible, while adversaries relentlessly pursue its conquest. The distinguishing factor lies in the dynamics of these engagements. While you’re simultaneously managing multiple fronts, your adversaries can opt to focus on one game at a time. At first glance, this might appear unequal, almost like an unfair contest. However, it shouldn’t be.

October 16, 2023