Threat hunting has become an important cybersecurity practice. Building on the presumption that sophisticated attackers have already successfully penetrated many enterprise networks, threat hunting seeks to uncover evidence of these compromises, enabling a rapid response. While few of the organizations I work with are conducting threat hunting activities, many of them are talking about it….

Cybersecurity — one word that can inspire many different tactical approaches depending on its definition. If you feel overwhelmed by the idea of defining cybersecurity and developing a plan for its inclusion within your environment, then you’re not alone. Many organizations have started down the path of addressing exposure points, defining red and blue teams,…

The cybersecurity threats that government agencies — and all organizations, really — face today are vastly different from those of just a decade ago. Cybercriminals are more organized than ever, and state-sponsored adversaries can draw on vast financial, human and technical resources as they carry out their attacks. Plus, the origin of many threats that…

In years past, cybersecurity professionals approached their work with a strong focus on the network perimeter. Everything inside the network was presumed to be trusted, while everything outside the corporate firewall was a potential threat. This approach has not withstood the test of time, and organizations now find themselves operating in a threat landscape where…

Last week, I spent two hours with the technology leadership team of an organization in a heavily regulated industry. We’ve gotten to know each other well in recent years as we worked together on a comprehensive technology refresh that included the modernization of the organization’s network, the redesign of its data centers and the adoption…

The organizations I work with are undergoing a major shift in how they think about security tools. For the past decade, many CISOs and CIOs have voiced a familiar refrain: “We want to use best-of-breed security solutions.” Conventional wisdom said that the best way to reduce risk was to use the absolute best product in…