Vendor News

The differences between the surface web, deep web, and dark web, as well as how to protect a company from cyber threats. In Today’s Digital World, Three Words are Guaranteed to Sow Fear and Confusion: the Dark Web. It’s the domain of everything from illicit drugs and weapons dealing, to stolen ...

Stepping in 2024, the dynamics of open source vulnerability management are shifting. Rapid changes to software development demand a more nuanced approach to open source security from practitioners. From redefining risk to the cautious integration of auto-remediation, here are the pivotal recommen...

Not all log management tools are created equal. Here’s what to look for. Log management and log analysis tools provide real-time visualization of how users interact with your apps and systems. Many of these log management tools include a sophisticated visual dashboard to immediately analyze data...

In May 2023, attackers exploited a SQL injection vulnerability in MOVEIt – a widely used file transfer service. Organizations across the public and private sectors were impacted, with highly sensitive PII, including health information about newborn babies. The ongoing proliferation of software vu...

To enable communications between components like intelligent electronic devices (IEDs), substations and remote terminal units (RTUs), electric utility environments in North America use very unique protocols, including DNP3, Modbus and IEC 61850. Because these protocols are proprietary, traditiona...

The insider threat is a multifaceted challenge that represents a significant cybersecurity risk to organizations today. Some are malicious insiders such as employees looking to steal data or sabotage the organization. Some are unintentional insiders such as employees who make careless mistakes or...

The “Security Spotlight” blog series provides insight into emerging cyberthreats and shares tips for how you can leverage LogRhythm’s security tools, services, and out-of-the-box content to defend against attacks. In this Security Spotlight, we’ll be talking about a technique attackers use to di...

Actionable guide to hunting for the Windows Services abuse by using Group-IB MXDR.Part 2: Execution of Windows Services When discussing Windows services and how to hunt for their abuse, it is worth mentioning that several threat hunting hypotheses can be leveraged. This is common in threat hunti...

The Holidays, like new IT & OT network projects, requires planning to ensure all stakeholders are happy. But often, things don’t as planned. This blog discusses common snags the Garland engineering team hears from customers in the field and highlights potential solutions. Intro Maximizing t...

As 2023 draws to a close, it’s a good time to consider how security leaders may need to shift their cyber strategies in the new year. One thing that’s certain: threat actors will continue trying their hardest to exploit any cyber weaknesses they can find, so ensuring your organization’s cyber hyg...