What We Know (and Don't Know) So Far About the 'Supernova' SolarWinds Attack A look at the second elusive attack targeting SolarWinds software that researchers at Secureworks recently cited as the handiwork of Chinese nation-state hackers.
Publicly Available Data Enables Enterprise Cyberattacks Adversaries scour social media platforms and use other tactics to gather information that facilitates targeted enterprise attacks, research shows.
Security on a Shoestring? More Budget Means More Detection Companies that spend the smallest share of their IT budget on security see fewer threats, but that's not good news.
Beyond MITRE ATT&CK: The Case for a New Cyber Kill Chain The Cyber Kill Chain and MITRE ATT&CK are popular reference frameworks to analyze breaches, but amid the rise of XDR, we may need a new one.
Watch Out for These Cyber-Risks It's difficult to predict what will materialize in the months ahead in terms of cyber-risks, which is why it's wise to review your organization's security posture now.
In the Rush to Embrace Hybrid Cloud, Don't Forget About Security Cloud service providers typically only secure the infrastructure itself, while customers are responsible for their data and application security.
White Ops Renames Company 'Human' The company first confirmed plans to change its name in October 2020.
Ghost Users Haunt Healthcare Firms Data security hygiene severely lacking among healthcare firms, new research shows.