The Rise of Supply Chain Attacks
12.30.24Prevent supply chain attacks by securing third-party vendor access to your network and practicing routine patch management.
12.30.2412.30.2412.30.24
Ten Cybersecurity Predictions for 2025 That You Need to Prepare For
12.19.24Attackers Have Evolved – But Most Companies Have Not The greatest gift a cyber attacker gets during the holiday season is another year of largely unfettered access to company data. While we ring in 2025 with the renewed sense of promise a new year brings, threat actors are also celebrating – because while they’ve been… Read more »
Transitioning to Zero Trust Data Protection
10.24.24Companies are exploring zero trust data protection to insulate their networks against cyber attacks – but are these policies the best option?
Why Does Bob From HR Need Your Email Password? Because Bob’s Not Bob.
10.21.24Employees fall for phishing scams frequently, giving attackers an open door to your data. Get smart about these scams with our expert insights.
Proof of Compliance is in the Human Factor
10.17.24Automating your security can save time and effort – but for proof of cybersecurity compliance, you need the human factor.
A Blocked Security Alert Doesn’t Always Mean “Case Closed”
10.15.24Digging Deeper to Uncover a Fenix Botnet Targeting HR & Payroll Tax Employees in Mexico When a client’s EDR platform alerted that it had blocked a file being accessed through a non-domain address, that could have been “case closed” – the file was blocked and the activity was halted. Or so it seemed. Our… Read more »
Everyone Likes Money — Especially Cyber Criminals.
10.15.24It’s no secret that new cybercrime trends largely revolve around AI, but what may surprise you is how much attackers are willing to invest for bigger payouts.
Water Utilities Under Siege: Why Basic Cybersecurity is Still Lacking
10.03.24Last Wednesday, CISA issued an advisory two days after Arkansas City, Kansas, revealed that a Sunday morning cyberattack forced it to switch its water treatment facility to manual operations. In the alert, CISA urged OT/ICS operators in critical infrastructure sectors to apply the recommendations listed in Defending OT Operations Against Ongoing Pro-Russia Hacktivist Activity to… Read more »
Response to CrowdStrike Falcon Sensor Agent Issue Affecting Microsoft Devices
07.19.24As of 0409 UTC, a critical issue with CrowdStrike Falcon Sensor agents on Windows devices has caused significant global outages. This was not a security incident or cyberattack, and DirectDefense’s infrastructure was not affected by this outage. The root cause has been identified as an automatic content deployment applied to Windows hosts, which has resulted in… Read more »
Tales From the Road: Red Team Assessment Services to the Rescue
07.10.24Organizations with security maturity can greatly benefit from annual red team assessments to keep up with the ever-evolving cyber threat landscape. Major organizations that hold detailed and private information are prime targets for malicious attackers, regardless of industry. Bad actors will find ways to break through physical and cyber barriers to obtain and sell personal… Read more »
