Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

CISA KEV's Known Ransomware Attribution

This past week, Patrick Garrity, Security Researcher at Nucleus, spent a lot of time exploring Cybersecurity and Infrastructure Security Agency's update the Known Exploited Vulnerabilities catalog, which now includes attribution to vulnerabilities associated with ransomware campaigns. In this short video, he explores this new addition and walks through the data visualizations he created to provide broader visibility into this new addition.

Windows Defender Firewall misconfigurations and GPOs: Connecting the dots

Many enterprises have a variety of aspects that make up their networks, like Windows Defender Firewall, GPOs, and an AD infrastructure. Vulnerabilities in any part of the network can have a domino effect; once the first domino falls, the entire trail will go down with it, which can cause irrevocable damage to your network.

SIEM Logging for Enterprise Security Operations and Threat Hunting

Today’s enterprise networks are diverse and complex. Rather than the simple network perimeter of old, bad actors can attack through multiple entry points, including cloud-based applications. Not to mention, these networks generate massive amounts of transactional data. Because enterprise networks have become larger, they’re more difficult to secure and manage.

Threat Informed Defense: Making ATT&CK Your Own

The MITRE ATT&CK framework is one of the most commonly used resources within the SafeBreach platform. At SafeBreach’s 2023 Validate Summit—an event that brings security experts together to discuss challenges and best practices in proactive cybersecurity—SafeBreach Co-Founder and CTO Itzik Kotler sat down with Frank Duff, the Chief Innovation Officer at Tidal Cyber, to discuss threat informed defense and MITRE ATT&CK.

The Biggest Takeaways From SOC Analyst Appreciation Day 2023

SOC Analyst Appreciation (SAAD) Day 2023 has come and gone. With great speakers and great sessions, it was a can’t-miss event for SOC analysts and anyone else looking to better appreciate their SOCs and see what’s on the horizon for cybersecurity. But hey, we realize that despite your best efforts, some SOC teams and leaders couldn’t make it the day of.

The Essential Cheatsheet to Troubleshooting ImagePullBackOff with Examples

Imagine you have a perfectly working Kubernetes cluster, and when everything seems on course, you get an “ImagePullBackOff” error. Although this is a popular issue in Kubernetes, understanding and troubleshooting the root cause can be a real headache. Kubernetes is an open-source container orchestration platform originally developed by Google.