Tips & Tricks

Managed Detection and Response: A Cure for Cyber Alert Fatigue and Scalability Challenges 2024-03-04 at 16:02 By Alert fatigue is a long-standing problem in cybersecurity that only increases in severity as a company grows. In that sense, alert fatigue is inextricably tied to another challenge: the need for scalability in cybersecurity. Quite often, the remedy […]

Defending Healthcare Databases: Strategies to Safeguard Critical Information 2024-02-23 at 20:01 By The healthcare sector continues to be a primary target for threat actors, with 2023 seeing a record number  of data breaches and compromised records. While successful attacks are inevitable, it’s incumbent upon healthcare organizations to limit their exposure, and minimize the likelihood of

Lessons to be Learned: Attacks on Higher Education Proliferate 2024-02-15 at 16:02 By Trustwave SpiderLabs is wrapping up a multi-month investigation into the threats facing the education sector, across higher education, primary and secondary schools. Trustwave will post the 2024 Education Threat Landscape: Trustwave Threat Intelligence Briefing and Mitigation Strategies report on February 22, but

10 Key Steps to Enhance Mobile Application Security in 2024 2024-02-09 at 16:02 By Therese Mendoza In today’s digital landscape, ensuring robust security for your mobile applications is paramount.  This article is an excerpt from Trustwave Blog View Original Source

Let’s Get Physical with Security Requirements 2024-01-23 at 16:01 By Jason Whyte Not every criminal illegally entering a business is looking to steal cash, equipment, or merchandise; some are looking to take something a bit more ephemeral. This scenario is particularly true for organizations, such as offices, insurance offices, or law firms not traditionally targeted

How a Managed Detection and Response Service Helps Get the Most out of Microsoft Defender XDR 2024-01-12 at 15:01 By For years, Microsoft has been making significant inroads in the security space, earning number-one rankings from top industry analyst firms  IDC and Forrester for its endpoint and extended detection and response (XDR) security tools. Taking full advantage of these

Tabletop Exercises: The Key to Recovering From a Devastating Cyberattack 14/12/2023 at 17:03 By The exploitation of the CitrixBleed vulnerability in Netscale by a variety of ransomware groups has led to a widespread disruption of services across several industry sectors, including financial services, healthcare and real estate. This article is an excerpt from Trustwave Blog

Defending Against ChatGPT-Enhanced Phishing with Managed Detection and Response 13/12/2023 at 17:02 By Phishing, already a serious, ever-present threat, is getting even more pernicious thanks to ChatGPT, which enables threat actors to craft more realistic emails. Clearly, organizations need a way to fight back that recognizes the depth of the threat, including by employing managed

Managing Risk Appetite: Balancing Cybersecurity and Business Growth 07/11/2023 at 06:47 By Ed Williams Determining, dealing with, and accepting a certain level of risk will always be a top priority for the members of any C-Suite. This article is an excerpt from Trustwave Blog View Original Source

Final Cybersecurity Awareness Month Thoughts: Don’t Get Hooked By a Phishing Email 31/10/2023 at 08:02 By We close out Cybersecurity Awareness Month for 2023 with a few final points that show that a company’s security is a team sport, one in which everyone must participate. This article is an excerpt from Trustwave Blog View Original

10 Dynamic Principles for Crafting a Robust Database Security Strategy 05/10/2023 at 00:02 By The digital world relies on data, which because of its considerable value, is constantly targeted by skilled cybercriminals who have spent years developing methods and tools to gain access to even the most secure databases. This article is an excerpt from

The Beauty of a Red Team Exercise: When One Discovery Leads to Potentially Saving Lives 27/09/2023 at 23:19 By What started out as a standard Red Team test designed to check the security capabilities of several Australian hospitals, led to a chain of events that eventually uncovered serious security flaws in remote-capable insulin pumps that,