Blog & News
Recent developments, analysis, and updates from the world of cybersecurity and AI safety.
The hardest attacks to catch sometimes involve no malware at all, just the tools already sitting on every system, used the way they were designed to be used.
You do not need a room full of monitors to get most of what a SOC actually does. Here is a scaled-down version that works.
Passive security waits for an alarm to go off. Active defence goes looking for trouble before the alarm fires, on purpose, on a schedule.
One of the oldest ideas in security. Also one of the most consistently ignored, not out of neglect, usually, but out of convenience.
Our data is encrypted gets treated as a complete answer to is our data secure. It is a necessary layer, not a sufficient one, and the gap has caused real breaches.
Data classification sounds like a large-enterprise exercise with thirty categories and a governance team. A three-tier version works fine for a team of five.
The rule predates both modern ransomware and cloud storage as most people use it. It still holds up, and the reason why has not changed.
Nobody grants excessive access on purpose. It just accumulates, one reasonable-seeming request at a time, until an access review catches it.