Regardless of whether or not US based companies want to admit it, 3 out of every 10 end users has had their mail credentials exposed by malicious actors, malware, viruses or through the use of insecure networks. Why then are these companies so bold as to think that they have not been breached? A recent review of malicious actors has shown that in many cases companies will not even know that they have been breached. During a recent review of a server that was compromised and u

One of the most often discussed items in our security consulting revolves around the use of IOC (Indicator of Compromise) information. These IOC's are provided in feeds in most cases and are indicators for attacks that have occurred IN THE PAST. What is problematic with this approach is 3 fold. The reasons we do not really like utilization of IOC's if because of the following: IOC data is from attacks that have occurred in the past IOC data is stale by the time it is dissemin