Jede neue Entdeckung – etwa mit Blick auf das Einfallstor für den Angriff, seinen Scope oder die von den Angreifern verwendeten Tools, könnten die Untersuchungsziele des Teams verändern, so Leverett: “Was als Containment-Vorhaben beginnt, kann schnell zum umfänglichen Recovery-Projekt ausarten.… Read More "So geht Post-Incident Review | CSO Online"
ESET Chief Security Evangelist Tony Anscombe highlights some of the key findings from the latest issue of the ESET APT Activity Report 07 Nov 2025 Yesterday, the ESET research team released the latest issue of its APT Activity Report that summarizes… Read More "The who, where, and how of APT attacks in Q2 2025–Q3 2025"
One of the most frustrating challenges of vendor risk management is chasing outstanding security questionnaires. But with some clever operational strategies, you’ll never need to worry about delayed risk assessments impacting your SLAs again. To learn how to encourage your… Read More "How to Make Vendors Respond to Risk Assessments (Faster)"
Former colleagues and friends remember the cybersecurity researcher, author, and mentor whose work bridged the human and technical sides of security 07 Nov 2025 • , 7 min. read The cybersecurity community lost one of its luminaries with the passing… Read More "In memoriam: David Harley"
.jpeg?w=1140&resize=1140,855&ssl=1 "Evidence Analysis: Unlocking Insights for Stronger Security Posture")
Navigating the maze that is vendor-supplied evidence is one of the most time-consuming and frustrating tasks security teams face during the risk assessment process. Imagine spending countless hours chasing down security information from a vendor only to receive a mountain… Read More "Evidence Analysis: Unlocking Insights for Stronger Security Posture"
ESET researchers provide insights into how PlushDaemon performs adversary-in-the-middle attacks using a previously undocumented network implant that we have named EdgeStepper, which redirects all DNS queries to an external, malicious hijacking node, effectively rerouting the traffic from legitimate infrastructure used… Read More "PlushDaemon compromises network devices for adversary-in-the-middle attacks"
Often regarded as the Californian version of the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA) aims to protect the personal information rights of Californian-based employees, contractors, customers, and vendors. The inclusion of third-party vendors means your… Read More "Free CCPA Vendor Questionnaire Template (2025 Edition)"
