The Problem: Modern attacks are a complex and often automated series of processes, steps and interrelated events that penetrate the cybersecurity perimeter. They combine automated attacks at scale with more targeted attacks both simultaneously and continuously. Additionally, the toolsets for achi … READ MORE

The foundation of Security B-Sides was predicated on individuals within the information security community who wanted to participate within their industry, sharing thoughts and ideas with other passionate InfoSec professionals, while creating a sense of community and stewardship for their collec … READ MORE

CISOs have become leaders in their businesses rather than just experts in their departments. As a result, they face three new requirements: To educate their peers on the scope, scale, severity and solutions for cybersecurity and how emerging threats affect each aspect of the business. To eleva … READ MORE

Metrics are tangible values that quantify progress towards a goal. An analytic system combines metrics from numerous sources to assist CISOs and their peers to understand trends and patterns. Metrics play a key role in a larger analytics system. As integral as cybersecurity is to business operat … READ MORE

Introduction On July 19, 2017 we wrote about the incorporation of a spreader component into the popular Emotet downloader. Just a short while later, a volume spam campaign was initiated that delivered Emotet with further modifications from the samples that we had analyzed. This post documents th … READ MORE

This is part of a Black Hatinterview with Hardik Modi, Vice President Threat Intelligence thatoriginally ran on https://www.blackhat.com/sponsor-interview/05262017.html#fidelis Question: Organizations are under increasing pressure to improve incident detection and to reduce dwell-times. What are … READ MORE

This is part of a Black Hatinterview with Hardik Modi, Vice President Threat Intelligence thatoriginally ran on https://www.blackhat.com/sponsor-interview/05262017.html#fidelis Question: There's been a push to encrypt everything on the Internet in recent years. How are threat actors exploiting t … READ MORE

Introduction: The recent Wannacry and Petya outbreaks have demonstrated the potency of ransomware coupled with a propagation component (spreader). While typical ransomware infections lead to the denial of access of data on a single victim system, it becomes an enterprise threat when it can propa … READ MORE

Recently, our partner Exatel published its latest research project outlining its investigation following an alert from Fidelis Network, which identified a RIG exploit kit traffic traversing a network. This isn’t interesting, per se, as exploit kit traffic is common in most environments. What ma … READ MORE