You are here

Cybersecurity

Cyber Resilience – The Importance of Proper Communication During an Incident

While cybersecurity teams tend to focus on the technical aspects of preventing and responding to incidents, an often overlooked, yet crucial feature of incident response is the importance of crisis communication. Effective communication during a cyber attack can help maintain customer trust, mitigate further damage to the brand, and ultimately lead to a smoother recovery process. Three key elements to building a foundation for successful crisis management include: creation of a crisis communication committee, developing a crisis communication plan, and conducting breach simulations.

CISA Cybersecurity Advisory – Red Team’s Operations Against a Federal Civilian Executive Branch Organization Highlights the Necessity of Defense-in-Depth

CISA released a Cybersecurity Advisory (CSA) today, “CISA Red Team’s Operations Against a Federal Civilian Executive Branch Organization Highlights the Necessity of Defense-in-Depth.” This CSA details key findings and lessons learned from a 2023 assessment – which was performed as a no-notice, long-term simulation of nation-state cyber operations – along with the red team’s tactics, techniques, and procedures (TTPs) and associated network defense activity.

NSA Cybersecurity Information Sheet: Advancing Zero Trust Maturity Throughout the Automation and Orchestration Pillar

The NSA published another Cybersecurity Information Sheet (CSI) today, its final zero-trust report, focusing on the Automation and Orchestration pillar of the Zero Trust (ZT) framework. The CSI is intended to help organizations better detect cyber threats and respond to common threats faster. It provides recommendations for automating routine tasks to better focus resources on investigating anomalies associated with advanced tactics, techniques, and procedures.

Partner Report - CISA and FBI Release Secure by Design Alert on Eliminating OS Command Injection Vulnerabilities

Yesterday, CISA and the FBI released a Secure by Design Alert, Eliminating OS Command Injection Vulnerabilities, in response to recent well-publicized threat actor campaigns that exploited OS command injection defects in network edge devices to target and compromise users.

Pages

Subscribe to Cybersecurity