Learn misattribution lessons from the capture of Guccifer 2.0 who accidentally leaked their identities, ruining an entire mission and resulting in arrests, all due to a lack of consistency with their operational security (OPSEC).
We are proud to announce that Info Security Products Guide, the industry's leading information security research and advisory guide, has named Ntrepid a winner in the 14th Annual 2018 Info Security PG’s Global Excellence Awards® in two categories. Nfusion 2, our secure virtual desktop, was named the Gold Winner of...
Don't keep data that you don't need on your network. It seems simple, yet it is not put into practice by many organizations worldwide. By regularly purging unnecessary information you can greatly reduce the relative degree of the toxicity within your network. If you don't need immediate access to your...
The internet is now part of almost all investigations, bringing significant new complexity to gathering evidence or conducting covert activity. Consequently, internet-based investigations create a whole new category of risks. Just as detectives work in plain clothes and drive unmarked cars, it is often important to avoid identification as a...
Situational awareness is important when engaging online - especially when hunting for threats outside the organization's firewalls. This requires the skills and tools to protect your identity by remaining anonymous. Additionally, un-patched systems and poor configurations could potentially allow an attacker to get through to your internal network.
While mergers and acquisitions (M&A) are generally known for bringing economic growth and opportunity, people are beginning to realize that the process also brings serious cybersecurity risks. For example, along with the acquired company’s valuable assets, buyers also inherit all previous and current vulnerabilities and breach history. But there are...
Last month I traveled to Las Vegas to meet with some colleagues and analysts that attended Black Hat USA 2017, the world’s leading information security event.
In May 2018, the new General Data Protection Regulation (GDPR) will take effect, applying to the vast majority of organizations across the world and signaling one of the most significant changes in data protection regulation to date. The GDPR, focused on notice, consent, control, and security, will mean that websites...
Effective managed attribution (MA) is critical for successful cyber investigations and can be achieved by leveraging the right technologies and practicing proper OPSEC online.
In a recent webinar, I discussed my journey of discovering the lesson that avoiding a fight in the first place is also the right choice when it comes to cybersecurity. One reason is that blocking attacks has several drawbacks. If you miss, you get hit; and even if you block...
