Expanding Knowledge by Sharing Intrusion Realities Security practitioners faced a series of challenges in this past year which forced organizations into uncharted waters. As ransomware operators were attacking state and municipal networks alongside hospitals and schools, a global pandemic response to COVID-19 necessitated a move to remote work for a significant portion of the economy.
Foreword Before joining Palo Alto Networks, I served 35 years in the US military, with the last 10 of those years devoted to cyber-related assignments. During my tenure, I was able to see firsthand how ransomware was a major threat to national security—and we’re still seeing it today. Ransomware is one of the top threats
Cybercriminals have always been opportunists, and the 2020 COVID-19 pandemic offered more proof of this than perhaps any other event before it. Threat actors are becoming more powerful, more aggressive and more numerous, increasingly abandoning the tendency to look for the biggest quarry in favor of attacking the least defended. And 2020 was rife with
The year 2020 was without a doubt one of the most consequential and transformational in recent memory: A global pandemic, economic turmoil impacting millions of people’s lives, and social and political unrest. The reverberations from these events affected businesses in profound ways, with many making a major shift to distributed workforces. In the cyber realm,
OVERVIEW For nearly 30 years, VPNs (Virtual Private Networks) have been central to providing remote users with access to the corporate network. Now the digitally transformed world, where zero trust is a must and applications have moved outside the traditional perimeter, has changed that reality. “Corporate VPN is an aging technology as organizations shift to
Businesses face a near-constant threat of destructive malware, ransomware, malicious insider activities, and even honest mistakes that can alter or destroy critical data. These types of adverse events ultimately impact data integrity (DI). It is imperative for organizations to be able to detect and respond to DI attacks. The National Cybersecurity Center of Excellence (NCCoE)
Executive Summary Since 2018, we estimated that the cost of global cybercrime reached over $1 trillion. We estimated the monetary loss from cybercrime at approximately $945 billion. Added to this was global spending on cybersecurity, which was expected to exceed $145 billion in 2020. Today, this is $1 trillion dollar drag on the global economy.
Executive Summary In the third quarter of 2020, Recorded Future observed major expansions in the tactics, techniques, and procedures (TTPs) of prominent ransomware operators, including the targeting of educational institutions and a continued increase in new ransomware operators using extortion tactics. Between July and October 2020, we identified the development of five new ransomware extortion
Active Directory Security – A modern approach to avoid exploitation 10:00am AWST | 1:00pm AEDT See live demo attacks! How is Active Director (AD) being used today and why is it important: The AD Threat Landscape The AD and ransomware relationship Common vulnerabilities in AD being exploited Best practices on how to avoid a compromise
Active Directory Security – A modern approach to avoid exploitation Read More »
EXECUTIVE SUMMARY The Sophos 2021 Threat Report covers topic areas into which Sophos has gained insight from the work over the past 12 months by SophosLabs on malware and spam analysis, and by the Sophos Rapid Response, Cloud Security, and Data Science teams. These aspects of our daily work protecting customers provide insight into the
