Insights
Analysis, regulatory guidance and threat research for security and risk leaders.
Introduction: The MITRE ATT&CK framework is well known for being the most accomplished knowledge base of adversary tactics and techniques based on real-world observations and for its ability to accurately project possible steps the attackers would take in accomplishing goals. The framework is unique and robust...
Read the article
Phishing is one of the biggest challenges that organizations are facing today. This calls for every available and useful control to be implemented to minimize the phishing attack surface, and Microsoft Defender for Office...
Read the article
Introduction One of the interesting cases from the Talanos threat hunting team sessions was the discovery of the clear text credentials passed as parameters in the URL which belonged to the supplier’s website. This...
Read the article
Defenders should focus on those users who trigger multiple alerts rapidly. For example, a risky sign-in followed closely by indicators of persistence techniques, such as mailbox rule creation. Two detection sources are very helpful...
Read the article
An increasing number of cyber-attacks employ techniques to bypass multi-factor authentication (MFA) which allows criminals the ability to access corporate networks with limited ability by security teams to detect these threats.
Read the article
What is an Indicator of Compromise (IOC)? An Indicator of Compromise (IOC) is a piece of information that indicates a potential security breach or cyberattack. An IOC can be an IP address, domain name,...
Read the article
What is Business Email Compromise (BEC)? Business Email Compromise (BEC) is a type of targeted cybercrime attack where the attacker uses compromised email access and tailored email messages to trick someone into sending money...
Read the article
What is Threat Hunting? Many organisations today face unprecedented levels of cyber-attacks, and the trend keeps growing with each passing year. The Security Operations Center (SOC) is the first line of defence, with its...
Read the article
Organisations looking to improve their cybersecurity posture are faced with many buying decisions, terminology and technology. The terms SIEM and SOC are sometimes incorrectly used interchangeably so what is the difference between them and do...
Read the article
Having been fortunate enough to recently attend the Gartner Identity and access Management (IAM) conference in London, I was able to catch up on global trends and the latest technology offerings but most importantly,...
Read the articleThirty minutes with a Talanos consultant to work through where you actually stand — no obligation, no sales script.