rgray805
The Endpoint Gap in Corporate Security
Why Managed Service Providers Should Focus on Cybersecurity
Potential Attack Paths in Operational Technology
Excerpt below from full article posted here: https://mixmode.ai/blog/operational-technology-risk-attack-paths-challenges-and-protection-for-vital-industrial-systemsWhat is Operational Technology? OT is defined as the hardware and software that keeps power plants running, manages factory process lines, and works together to achieve an industrial objective such as manufacturing, transportation of...
Re:Quest Diagnostics says nearly 12M patients may have had data breached
on Tuesday June 04, 2019 @01:48PM (#20097431)
Curious - who are are the possible "third party forensics firms" that would investigate this?
How to Modernize Your MSSP Security Monitoring Program
How to Move from Honeynets to “Deception Networks”
This is a follow up article to Dr. Stephenson's introduction of the Deception Network a next generation security stack that lets you alert on potential malicious activity while protecting your enterprise and capturing forensic evidence at the same time.https://mixmode.ai/blog/sc-magazine-beefing-up-your-next-generation-security-tool-setHe describes a Deception Network as the following:"The idea...
Wire Data: Why Should I Care When I Already Have Log Files?
Re:Baltimore city government computer network hit by ransomware attack
on Friday May 17, 2019 @12:54PM (#19941381)
What stuck out to me was the part that said, "A similar attack affected the city’s phone system last year, shutting down automated dispatches for 911 and 311 calls." Clearly what they had didn't catch it (twice) and that's a problem with SIEMs - usually not configured correctly or to log the right things.