Over the last 5 years Jigsaw Security has grown from a small shop of individual researchers working toward a common goal to a powerhouse in the intelligence industry. Our cyber security solutions literally stop millions of malware infections every single day by providing data that renders attackers unable to infect networks. We do this by denying the threat actor access to their own payloads, C2 and other resources using DNS RPZ and similar technologies. In short we redirect

Over the last several years we have been watching as technology has been evolving, but standard models of defense have remained static in Government. The Government strategy has been to make it costly for threat actors to stay active by chasing them and reporting their indicators as the sources of attacks evolve. By doing so, this makes threat actors have to change their attack methods and sources often, thereby making it harder to impact infrastructure and targeted entities.

As we move through 2019 at a fast pace, one thing is certain. Breaches, intellectual property theft and other attacks are happening at an alarming rate and even though technology is improving, we still cannot fix many of the very humanistic issues that cause breaches and security incidents in the first place. It is not a surprise why Kevin Mitnick was so successful in getting into computer systems without authorization by exploiting the human side of the equation. Even with p

Regardless of whether or not US based companies want to admit it, 3 out of every 10 end users has had their mail credentials exposed by malicious actors, malware, viruses or through the use of insecure networks. Why then are these companies so bold as to think that they have not been breached? A recent review of malicious actors has shown that in many cases companies will not even know that they have been breached. During a recent review of a server that was compromised and u

Image Courtesy of Vladimir Tasev (Twitter): First of all lets start by stating the obvious. Everything that Microsoft touches ends up being bent and twisted into a Microsoft product. While we embrace open source software, we also don't trust Microsoft with our proprietary private code repositories. We all know how open Microsoft is with their own software source code so it's not hard to imaging a world in which Microsoft would be scouring the 80+ million developers code on Gi

Over a year long review of managed security provider trends has shown us one thing. MSS providers want to provide protection to their customers as cheaply as possible so that much of the services being provided are returned to the MSS as profit. An alarming trend in the industry is to not acknowledge breaches because if the companies acknowledge them, they have to deal with them and subject themselves to possible regulatory or costly fines from the FTC. What we have been hear

With the recently reported security issues with Facebook we have fielded several questions as to whether or not we utilize Facebook ThreatExchange for any of our threat intelligence. The short answer is no, the long answer is more complicated. In short in 2015 when we first started providing security related services one of our feeds was Facebook threat exchange. Upon ingesting the data we started noting that the service was being "poisoned" with invalid data. Thousands of re