Threat hunting has become an important cybersecurity practice. Building on the presumption that sophisticated attackers have already successfully penetrated many enterprise networks, threat hunting seeks to uncover evidence of these compromises, enabling a rapid response. While few of the organizations I work with are conducting threat hunting activities, many of them are talking about it….

In December 2015, more than 200,000 Ukrainians found themselves without power during a blackout cause by a cyberattack launched from within the Russian Federation. The attack was carried out by a spear-phishing campaign that was used to install malware on energy company computers. The malware, dubbed BlackEnergy, was specifically designed for use against industrial control…

Just how bad is the security landscape in healthcare? In 2017, the Department of Health and Human Services Office for Civil Rights reported that 358 breaches of 500 or more records impacted more than 5 million individuals, according to HIMSS Analytics. What’s more, a 2018 Ponemon report focusing on the financial impact of breaches notes…

Next-generation firewalls and other advanced security tools can be a double-edged sword. They’re great at ferreting out and thwarting attacks that get past older technologies. But they also generate far more alerts and logs, which overload IT staff. No wonder one of the first things IT departments do after deploying next-gen security tools is minimize…

With next-generation firewalls, there has been a lot of confusion in the market about what makes for a good solution. Organizations want a solution that will protect their gateway and business-critical applications. They also want something that will protect the perimeter, data centers and their cloud deployments — all under one central management interface. A…

When you think of next-generation firewalls, you probably think they are only used to help secure the network. They have features like user identification, URL filtering, intrusion prevention systems (IPS), malware prevention and application identity and control. All those items are directly related to security and controlling what users and systems can and cannot do,…