Blog | Jigsaw Security

Search

Why most companies WANT you to get breached

Anonymous Contributor

Jul 30, 2019
5 min

Why most companies WANT you to get breached

Over the last 5 years Jigsaw Security has grown from a small shop of individual researchers working toward a common goal to a powerhouse in the intelligence industry. Our cyber security solutions literally stop millions of malware infections every single day by providing data that renders attackers unable to infect networks. We do this by denying the threat actor access to their own payloads, C2 and other resources using DNS RPZ and similar technologies. In short we redirect

16 views0 comments

How hackers are defeating Government defenses

Jun 11, 2019
2 min

How hackers are defeating Government defenses

Over the last several years we have been watching as technology has been evolving, but standard models of defense have remained static in Government. The Government strategy has been to make it costly for threat actors to stay active by chasing them and reporting their indicators as the sources of attacks evolve. By doing so, this makes threat actors have to change their attack methods and sources often, thereby making it harder to impact infrastructure and targeted entities.

7 views0 comments

Threat Intelligence - Old Habits Die Hard

Kevin Wetzel CEO Jigsaw Security

May 31, 2019
6 min

Threat Intelligence - Old Habits Die Hard

As we move through 2019 at a fast pace, one thing is certain. Breaches, intellectual property theft and other attacks are happening at an alarming rate and even though technology is improving, we still cannot fix many of the very humanistic issues that cause breaches and security incidents in the first place. It is not a surprise why Kevin Mitnick was so successful in getting into computer systems without authorization by exploiting the human side of the equation. Even with p

17 views0 comments

MSS News: How the adversary is targeting US businesses in the tech sector

Security Operations Team

Jun 13, 2018
5 min

MSS News: How the adversary is targeting US businesses in the tech sector

Regardless of whether or not US based companies want to admit it, 3 out of every 10 end users has had their mail credentials exposed by malicious actors, malware, viruses or through the use of insecure networks. Why then are these companies so bold as to think that they have not been breached? A recent review of malicious actors has shown that in many cases companies will not even know that they have been breached. During a recent review of a server that was compromised and u

10 views0 comments

The Death of Github, could it be?

Jigsaw Development Team

Jun 8, 2018
1 min

The Death of Github, could it be?

Image Courtesy of Vladimir Tasev (Twitter): First of all lets start by stating the obvious. Everything that Microsoft touches ends up being bent and twisted into a Microsoft product. While we embrace open source software, we also don't trust Microsoft with our proprietary private code repositories. We all know how open Microsoft is with their own software source code so it's not hard to imaging a world in which Microsoft would be scouring the 80+ million developers code on Gi

160 views0 comments

MSS News: Getting Serious About Protection

Security Operations Team

May 8, 2018
4 min

MSS News: Getting Serious About Protection

Over a year long review of managed security provider trends has shown us one thing. MSS providers want to provide protection to their customers as cheaply as possible so that much of the services being provided are returned to the MSS as profit. An alarming trend in the industry is to not acknowledge breaches because if the companies acknowledge them, they have to deal with them and subject themselves to possible regulatory or costly fines from the FTC. What we have been hear

6 views0 comments

Facebook Issues? - Why we don't use Facebook ThreatExchange

Security Operations Team

Mar 21, 2018
3 min

Facebook Issues? - Why we don't use Facebook ThreatExchange

With the recently reported security issues with Facebook we have fielded several questions as to whether or not we utilize Facebook ThreatExchange for any of our threat intelligence. The short answer is no, the long answer is more complicated. In short in 2015 when we first started providing security related services one of our feeds was Facebook threat exchange. Upon ingesting the data we started noting that the service was being "poisoned" with invalid data. Thousands of re

52 views0 comments