Critical Start Blog

The Hidden Risks: Unmonitored Assets and Their Impact on MDR Effectiveness

In the realm of cybersecurity, the effectiveness of Managed Detection and Response (…

The Need for Symbiotic Cybersecurity Strategies | Part 2: Integrating Proactive Security Intelligence into MDR

In Part 1 of this series, The Need for Symbiotic Cybersecurity Strategies, we explor…

Finding the Right Candidate for Digital Forensics and Incident Response: What to Ask and Why During an Interview

So, you’re looking to add a digital forensics and incident response (DFIR) expert to…

The Need for Symbiotic Cybersecurity Strategies | Part I

Since the 1980s, Detect and Respond cybersecurity solutions have evolved in response…

Critical Start H1 2024 Cyber Threat Intelligence Report

Critical Start is thrilled to announce the release of the Critical Start H1 2024 Cyb…

Now Available! Critical Start Vulnerability Prioritization – Your Answer to Preemptive Cyber Defense.

Organizations understand that effective vulnerability management is critical to redu…

Recruiter phishing leads to more_eggs infection

With additional investigative and analytical contributions by Kevin Olson, Principal…

2024 Critical Start Cyber Risk Landscape Peer Report Now Available

We are excited to announce the release of the 2024 Critical Start Cyber Risk Landsca…

Critical Start Managed XDR Webinar — Increase Threat Protection, Reduce Risk, and Optimize Operational Costs

Did you miss our recent webinar, Stop Drowning in Logs: How Tailored Log Management …

Pulling the Unified Audit Log

During a Business Email Compromise (BEC) investigation, one of the most valuable log…

Set Your Organization Up for Risk Reduction with the Critical Start Vulnerability Management Service

With cyber threats and vulnerabilities constantly evolving, it’s essential that orga…

Announcing the Latest Cyber Threat Intelligence Report: Unveiling the New FakeBat Variant

Critical Start announces the release of its latest Cyber Threat Intelligence Report,…

Cyber Risk Registers, Risk Dashboards, and Risk Lifecycle Management for Improved Risk Reduction

Just one of the daunting tasks Chief Information Security Officers (CISOs) face is i…

Beyond SIEM: Elevate Your Threat Protection with a Seamless User Experience

Unraveling Cybersecurity Challenges In our recent webinar, Beyond SIEM: Elevat…

Navigating the Convergence of IT and OT Security to Monitor and Prevent Cyberattacks in Industrial Environments

The blog Mitigating Industry 4.0 Cyber Risks discussed how the continual digitizatio…

Critical Start Cyber Risk Peer Insights – Strategy vs. Execution

Effective cyber risk management is more crucial than ever for organizations across a…

Critical Start Named a Major Player in IDC MarketScape for Emerging Managed Detection and Response Services 2024

Critical Start is proud to be recognized as a Major Player in the IDC MarketScape: W…

Introducing Free Quick Start Cyber Risk Assessments with Peer Benchmark Data

We asked industry leaders to name some of their biggest struggles around cyber risk,…

Efficient Incident Response: Extracting and Analyzing Veeam .vbk Files for Forensic Analysis

Introduction Incident response requires a forensic analysis of available evidence fr…

Mitigating Industry 4.0 Cyber Risks

As the manufacturing industry progresses through the stages of the Fourth Industrial…

CISO Perspective with George Jones: Building a Resilient Vulnerability Management Program

In the evolving landscape of cybersecurity, the significance of vulnerability manage…

Navigating the Cyber World: Understanding Risks, Vulnerabilities, and Threats

Cyber risks, cyber threats, and cyber vulnerabilities are closely related concepts, …

The Next Evolution in Cybersecurity — Combining Proactive and Reactive Controls for Superior Risk Management

Evolve Your Cybersecurity Program to a balanced approach that prioritizes both React…

CISO Perspective with George Jones: The Top 10 Metrics for Evaluating Asset Visibility Programs

Organizations face a multitude of threats ranging from sophisticated cyberattacks to…

Critical Start CTO and Forbes Technology Council Member Publishes Benefits and Cautions of Aligning With Cybersecurity Frameworks

In his latest piece for Forbes, Benefits and Cautions of Aligning With Cybersecurity…

Establishing Provable Security Maturity with Managed Cyber Risk Reduction

A groundbreaking approach for cybersecurity professionals to demonstrate how they’re…

Unknown Risk Acceptance Is Unacceptable: The Danger Lurking Behind the Threat Signals Missed by Your MDR

Legacy MDR Fails to Validate Controls Are Working Recent data from the Ponemon Insti…

The Rise of AlphaLock: A New Era in Cybercrime as a Service?

Background The cybercrime landscape is undergoing a profound transformation, with cr…

Find Security Gaps Before Attackers Do with Critical Start Asset Visibility

No matter what security tools you use, your security team is only effective as the i…

Maximizing Microsoft Sentinel to Elevate Security and Control Costs

Optimizing Security Operations: The Backbone of Maximized Protection and Value Recen…

Navigating Rising Ingestion Costs: Leveraging Critical Start’s Managed SIEM Solution for High-Priority Detections and Coverage Gaps

Data volumes continue to increase exponentially, putting a strain on organizations g…

The Rise of the Cybercriminal

Critical Start CRU predicts the rapid evolution of cybercrime, along with the increa…

The Ongoing Impact of Malware-as-a-Service

Critical Start CRU predicts the sophistication of Malware-as-a-Service (MaaS) is exp…

AI Evolution in Cybercrime: Threats and Deceptive Tactics

Critical Start Cyber Research Unit (CRU) predicts a rise in AI-powered cyber threats…

Geopolitical Factors Shaping the Future of the Cyber Domain

Critical Start Cyber Research Unit (CRU) predicts a rise in cyber threats, driven by…

Cloud – Evolution of Malicious Traffic Concealment

Critical Start Cyber Research Unit (CRU) predicts the concealment of malicious traff…

2024 Cybersecurity Predictions: Navigating the Evolving Threat Landscape

CISO Perspectives As we step into the future, the role of Chief Information Security…

The State of Cybersecurity: 2023 Trends and 2024 Predictions

In response to the dynamic and evolving cybersecurity landscape, Critical Start invi…

Navigating Cybersecurity Challenges Amidst Black Friday and Cyber Monday Frenzy

Cyber Risks Over Black Friday and Cyber Monday Black Friday and Cyber Monday, synony…

Navigating the Digital Highway: Cyber Risks in Holiday Travel Transportation

Background Cybercriminals exploit weekends and holidays when organizations are under…

Defending Your Online Presence: Holiday Brand Impersonation and Web Skimming

Background During the holiday season, deceptive websites surge with nearly 78% of in…

Navigating Software Supply Chain Vulnerabilities During the Holiday Season

Background The holiday season ushers in celebration, joy, and heightened demand for …

Navigating Cybersecurity Challenges in the Hospitality Sector during the Festive Season

Background The hospitality sector, integral to holiday experiences, faces distinct c…

Cyber Tides: Recent DDoS Attacks and Holiday Implications

Background The digital age has transformed how we shop, communicate, and do business…

Understanding the Risks of Remote Monitoring and Management (RMM) Tools

Background Remote Monitoring and Management (RMM) tools have become indispensable fo…

Data Breaches Are on the Rise: Is Your Protection Keeping Pace?

How Critical Start Managed Detection and Response Services for Microsoft Defender fo…

Exposing the Covert Threat: RATs and the VenomRAT Deception

Background In the ever-evolving landscape of cybersecurity threats, Remote Access Tr…

The Landscape of Insider Risks

Background The realm of cybersecurity threats has experienced substantial transforma…

Securing the Ecosystem: Navigating the Risks of NPM Packages in Modern Software Development

Background In modern software development, Node Package Manager (NPM) stands as a co…

The Evolution of Cybercrime: Adapting to APT Techniques

Introduction The world of cybercrime is in a constant state of evolution. In recent …

Protecting Critical Infrastructure: Defending Against Threats to OT/ICS Systems

Background Operational Technology (OT) and Industrial Control Systems (ICS) are the …

Ransomware Attacks on ESXi Servers: A Looming Threat

Background In today’s digital age, data security is paramount, and one of the …

Default Configurations: A Common Gateway for Threat Actors

Background In our increasingly interconnected world, where technology is omnipresent…

Navigating the Shadows: A Deep Dive into Prolonged Cyber Intrusions

Background In recent years, the world has witnessed a disturbing trend – major organ…

Shrinking Timelines and Rising Costs: The Dynamics of Ransomware Attacks

Background The landscape of cybersecurity is undergoing rapid and dynamic changes, d…

Exploring Rhysida Ransomware: A Deeper Understanding of the New Cyber Menace

Background The digital landscape is in a constant state of flux, and with it, the ev…

Securing Mobile Devices in the Modern Era: Challenges and Mitigations

In the modern digital landscape, enterprises utilize communication platforms to faci…

Cyber Chameleons: Why Ransomware Groups like BlackByte Must Evolve to Survive

Overview BlackByte is a ransomware-as-a-service (RaaS) group that emerged in July 20…

Slack Security Challenges: Protecting Your Organization from Threats

In the modern digital landscape, enterprises utilize communication platforms to faci…

2023’s Digital Intruders: Unmasking the Year’s Top Malware So Far

Background The enduring and evolving threat of malware remains a predominant concern…

Zoom Securely: Navigating the Virtual Boardroom in the Digital Era

In the modern digital landscape, enterprises utilize communication platforms to faci…

Understanding the Resurgence of Kerberoasting Attacks in Today’s Threat Landscape

Recently, there has been a resurgence of Kerberoasting attacks, revealing a concerni…

Exploiting the Abandoned: Exposing Phishing Tactics Through Neglected Websites

Background of Abandoned Website Phishing The Critical Start Cyber Threat Intel…

The Biggest Cybersecurity Challenges for Credit Unions

Credit unions play a vital role in the financial sector, offering essential financia…

Teams Under Siege: Uncovering Microsoft’s Cyber Quirks

In the modern digital landscape, enterprises utilize communication platforms to faci…

Celebrating Women in Cybersecurity

Today is a special day in our industry, as we celebrate International Women in Cyber…

Understanding Business Email Compromise Attacks: A Growing Threat

In the modern digital landscape, enterprises utilize communication platforms to faci…

Surfing the Risks: Navigating Public Wi-Fi’s Hidden Threats

Threat Background Public Wi-Fi networks, while offering convenience, expose users to…

Unveiling the Shadows: Exploring Credential Harvesting Methods

Credential Harvesting Background A recent study reveals that so far in 2023, 4…

Securing the Future: Insights from a CISO on the Cyber Risk Landscape

As a security leader, there are plenty of challenges that stand between your team (o…

A New Cluster of Threat Activity: Cybercriminals, Friends, and Allies

Background of Cyber Cluster Activity Since the beginning of 2023, cyber threat…

Cybercriminals Attack Vectors within the Education Sector

Introduction As a follow-up to, “The Escalating Threat of Ransomware Att…

Unlocking the Power of Microsoft E5 with MXDR Services

In today’s ever-evolving threat landscape, organizations face immense challeng…

AI’s Dual-Edged Sword: Finding the Balance Between Security and Innovation

As dawn breaks over the world of artificial intelligence (AI), concerns and exciteme…

Navigating the Cyber Risk Conundrum: The Power of Managed Cyber Risk Reduction

We know what you’re facing. You are in a cyber risk conundrum, and it sucks. In toda…

Risk vs. Reality: Understanding Cyber Risk Confidence among Cyber Leaders

With ever-evolving cybersecurity threats and obstacles, many cybersecurity leaders f…

The Escalating Threat of Ransomware Attacks in the Education Sector

Ransomware Attacks on Educational Institutions are Increasing Ransomware attac…

The Next Evolution in Cybersecurity

George Santayana’s ominous warning of cyclical focus is seldom considered in foretho…

Volt Typhoon: Hiding in Plain Sight

What is Volt Typhoon? Volt Typhoon, a Chinese state-sponsored threat actor, is…

Why Threat Detection Shouldn’t Be Your Next DIY Project

We’ve all had that big home improvement project that didn’t turn out the way we plan…

Encoding: A Brief History and its Role in Cybersecurity

When it comes to using the Internet, chances are you’ve encountered different …

Threat Research: Ransomware Attacks on Software Supply Chains & Effective Mitigation

The recent wave of ransomware attacks targeting software supply chains, such as the …

Critical Start Releases First Half 2023 Cyber Threat Intelligence Report

As threat actors and their TTPs (tactics, techniques, and procedures) continue to ev…

Outsmarting Cyber Threats: The Roadrunner Approach to Cybersecurity with Managed XDR

You Deserve a Sound Cybersecurity Strategy The Roadrunner is like the Managed Extend…

Threat Research: RustBucket Malware Takes Aim at macOS

Summary A recently observed malware family dubbed “RustBucket” has been target…

The Importance of Understanding and Adopting a Cybersecurity Framework

You have your cybersecurity strategy and goals ready to go, including tools and tech…

Misconfigured Kubernetes Targeted by Extensive Crypto-Mining Campaign

Summary A large-scale cryptocurrency mining campaign called RBAC Buster has be…

LOBSHOT: The Latest Malware Delivered via Google Ads

What is LOBSHOT? A new malware was recently observed being distributed by mali…

CrossLock Ransomware

Summary: A New Strain of Ransomware In mid-April 2023, intelligence researcher…

Domino Malware Gains Traction with Multiple Threat Actors

Summary: What is Domino Malware? Domino (a.k.a. Minodo) is a new malware famil…

Threat Research: Typhon Reborn, Again.

Summary: What is Typhon? The creator of Typhon Reborn announced the release of…

Read-the-Manual Locker Upgraded for Linux Architecture

RTM Locker Summary Read-the-Manual (RTM) Locker is a private ransomware-…

Lazarus Group Updates Operation Dream Job Campaign

Summary North Korean threat actor, Lazarus Group, was observed shifting …

Threat Research: Legion Hacking Tool

What is the Legion Hacking Tool? Legion, a new Python-based credential harvester an…

Cybercrime: The World’s 3rd Largest Economy

How Big is the Cybercrime Economy? According to the World Economic Forum (WEF)…

Threat Research: Multiple Chinese Threat Actors Using New Mélofée Malware

Summary Mélofée, a new malware family, was recently discovered being use…

The Top 10 MDR Capabilities your Provider Needs (and the Biggest Mistakes to Avoid)

MDR services are gaining popularity as organizations seek more effective measures to…

The Rise of FusionCore: An Emerging European Cybercrime Group

FusionCore is a group that operates as both malware developers and threat actors, pr…

New IcedID Variants Surface in the Wild

The threat actors behind the IcedID (a.k.a. BokBot) banking trojan are making stride…

Threat Research: Cl0p Ransomware Increases Activity

Summary Cl0p ransomware, a Ransomware-as-a-Service (RaaS) model, has tar…

UNC4466 Exploits Multiple Vulnerabilities to Deliver ALPHV Ransomware

Summary An emerging ALPHV (a.k.a. BlackCat, Noberus) affiliate, tracked …

Tackling Cross-Domain Cyber Threats: Microsoft XDR & Critical Start MDR to the Rescue

Let’s face it, in our ever-growing digital world, cybersecurity is a big deal. A mul…

Dark Power Ransomware: A Nim-Programmed Threat

The Dark Power ransomware, a relatively new ransomware strain, was launched in early…

Threat Research: Beat the Heat

Overview: Highly Evasive Adaptive Threats, or HEAT attacks, are a new form of …

Tick, Tick, Tick…Boom: Chinese Tick APT Plays the Long Game

Summary Chinese-linked Tick advanced persistent threat (APT) group, a.k….

Warning: AlienFox Stealing Cloud-Based Email Credentials

Summary AlienFox, a new module toolkit, is allowing threat actors to steal aut…

Dev-0147 Expands Operations to South America with Naplistener

DEV-0147, a group believed to be state-sponsored by China, has been observed targeti…

Roadmap to Achieving the Full Potential of Your Investment in Microsoft Sentinel

Widely regarded as one of the most effective solutions in the security information a…

Is your SIEM security solution no longer enough? The imperative of increasing your security posture and optimizing costs in 2023

Cyberattacks continue to evolve, and you should expect the same from your MDR provid…

HinataBot and the Evolution of IoT Malware

How the Mirai botnet creators used Golang to make it even more sophisticated and dan…

Threat Research: Kimsuky APT Spear Phishing Campaigns

Summary North Korean advanced persistent threat (APT) actor, Kimsuky (a….

The Security Metrics that Matter and Why

According to CIO.com, 58% of organizations aren’t adequately measuring the effective…

YoroTrooper Threat Group Targets Commonwealth of Independent States Countries and Embassies

YoroTrooper is a newly discovered advanced persistent threat (APT) group that has be…

Threat Research: DarkCloud Malware

Introduction: What is DarkCloud? DarkCloud is an Information Stealer Malware t…

Threat Research: Clasiopa Threat Actor

In recent years, cyberattacks targeting research organizations have been on the rise…

Critical Start Warns of Newly Discovered Threat Group Targeting Organizations in Asia

Previously Unknown Threat Group: Hydrochasma Hydrochasma is a newly discovered cybe…

Threat Deep Dive: Exfiltrator-22 Post-Exploitation Tool

Summary A group of cyber criminals are advertising a new, fully undetect…

Mustang Panda and the Rise of Custom Malware Usage by Chinese State-Sponsored Actors

The rise of custom malware usage by Chinese state-sponsored advanced persistent thre…

Malware Targeting Linux Operating Systems

Summary A trend in malware being developed to specifically target Linux …

Threat Deep Dive: BlackLotus

What is BlackLotus? BlackLotus is a stealthy Unified Extensible Firmware Interface (…

Threat Research: New Framework Raising “Havoc”

Introduction: What is Havoc? Havoc, a new open-source repository command-and-c…

A Dive into the Soul: Analyzing Sharp Panda’s Latest Cyber Espionage Campaign

What is Sharp Panda? Sharp Panda, also known as APT19, Emissary Panda, or Iron Tiger…

Critical Start Warns of New Beep Malware

By: Critical Start Cyber Threat Intelligence (CTI) Team Summary: Deep Dive int…

Dark Pink: Emerging Threat Actor Overview

What is Dark Pink? An emerging campaign of advanced persistent threat (APT) at…

TrickGate: The Malware Master of Disguise

By: Critical Start Cyber Threat Intelligence (CTI) Team Summary: The TrickGate…

Applying the Biden-Harris Administration’s National Cybersecurity Strategy to your Organization in Five Steps

As cyber threats continue to evolve and grow, it is increasingly clear that a coordi…

Five Reasons Why Your Organization Needs a Managed SIEM Solution

Security Information and Event Management (SIEM): A Quick History Back in 2005, the…

Warning: Cybercriminals Use Phishing Scams Following Syria-Turkey Tragedy

Following the recent earthquakes in Syria-Turkey, security experts have warned of ph…

Merging Disparate Security Controls: Finding Your Perfect MDR Match

There is a lot of pressure out there in a busy cybersecurity world, and you’ve been …

Log4j: The Aftermath and Lessons Learned

A Look Back The Log4Shell vulnerability, discovered on the log4j logging library in …

Uncover More Attacks Faster with the New Vision One Platform: A Trend Micro Partnership

One of our core tenants since launching MDR services at Critical Start has always be…

Ghostin’ the Shell: A New Method of Obscuring Malicious Actor Activity

January 31, 2023 Critical Start has found a novel method malicious actors could use …

Three Steps to Increase Employee Data Privacy

Every day, your data is collected. Whether it’s on your laptop, smart phone, or even…

LockBit, Extortion, and Mis-Information Campaigns: 2023’s Biggest Threat Intelligence Predictions

Staying One Step Ahead of Emerging Threats 2022 will be remembered most notably for …

Seven Questions for Critical Start’s New CISO

George Jones, Critical Start’s new CISO (Chief Information Security Officer), wears …

New Year, New Cyber Resolutions (and Same Phishing Techniques)

The recent holiday season brought an uptick in well-crafted, targeted phishing attac…

What is a Threat Actor? Motivations, Targeting and Staying Ahead

Everywhere you turn, bad actors are lurking who want to steal your valuable data. At…

Brace Yourself: More Ransomware and Extortion in 2023

With 2022 wrapping up a year full of ransomware attacks and data leaks, we look ahea…

Palo Alto Ignite Takeaways: Attackers Never Rest, Retailers Can’t Either

It felt great to be back at Palo Alto Networks Ignite in Las Vegas, connecting with …

MXDR Verified – Raising the Bar on XDR

Collaboration drives innovation and improves outcomes Critical Start has a longstand…

Three Ways to Empower Employees on National Computer Security Day

Think of the last time you confirmed that all your passwords to every login were uni…

The Results Are In: Critical Start MDR Reports Adversary Activity Across All Steps of the MITRE ENGENUITY™ ATT&CK® Evaluations for Managed Services

The very first MITRE ENGENUITY ATT&CK Evaluations program for Managed Services r…

Staffing Shortage Hampering Your SIEM Deployment? It Might Be Time for Managed SIEM.

By: Steven Rosenthal | Critical Start Director, Product Management The skills shorta…

My Cortex XSIAM journey, from skepticism to deep conviction and admiration

By John Murray, Director, Product Management When Palo Alto Networks announced XSIAM…

How to be a Data Security OpportuNIST: Announcing Episode 1 of the Critical Start Domain Expert Series

It’s time to break down the barriers between data and cybersecurity professionals. E…

Black Hat 2022 Recap

Black Hat 2022 was in full effect this year with the tradeshow floor buzzing and man…

Three Ways to Protect Student Data in the Digital Age

Starting at the age of five and into early adulthood, students become the responsibi…

Q-Bot Ransomware Targeting Financial Services: What Is It and What to Do About It

One particularly virulent ransomware affecting the financial services industry is Qu…

How to Build a Solid Cybersecurity Foundation in Financial Services

It’s regulatory world we live in. From tax regulations to “you-need-to-be-this-tall-…

Protecting your free time – a 3-part plan to get more time away from the office

Time away from the office, sitting on a warm beach, toes in the sand. This is a comm…

A Design Collaboration with Microsoft

No Stone Left Unturned About 4 years ago, Critical Start received multiple requests …

MITRE Engenuity ATT&CK® Evaluations for Managed Services: Critical Start Participation

2022 marks MITRE’s first ever ATT&CK Evaluations: Managed Services – and Critica…

Beyond the Endpoint: Detect and Disrupt User Account Attacks

By: Chris Carlson, VP of Product Management “What’s in a name?” For Shakespeare, it’…

XDR 101: What is Extended Detection and Response?

Extended Detection and Response (XDR) is by far one of the hottest topics and trends…

Crypto-Mining Malware: The Canary in the Coal Mine

By: Callie Guenther, Cyber Threat Intelligence Manager Every month, cyber threat int…

Russian Cyber Attacks: Threat Actors and New Developments – Critical Start

CRITICALSTART has continuously monitored the evolving Russia-Ukraine cyber threat as…

Response to Risk of WhisperGate Cyber Attacks as Russia Ukraine Crisis escalates

By: Jordan Mauriello and Matthew Herring CRITICALSTART has been continuously mo…

The Human Element and Why it Matters More Than Ever in the Age of XDR

According to a recent Enterprise Strategy Group (ESG) survey, 38 percent of cybersec…

Not Your Average Coffee Break with Palo Alto Networks and Critical Start

By Donna Niemann, Senior Product Marketing Manager at CRITICALSTART Last month’s Cof…

Stronger Together: Why Critical Start MDR for Palo Alto Cortex XDR Makes the Best Better

Extended Detection & Response (XDR) is good. Really good. It’s a technology that…

Assessing Recent Cyber Threats as Russia-Ukraine Crisis Escalates

Critical Start continues to monitor opportunities for detection, focused on the tact…

Log4Shell: Information Security Teams Served Coal for Christmas

By now you’ve probably heard of Log4Shell, Log4j or LogJam – more formal…

Cybersecurity & the Modern Healthcare Landscape, Part 1: Data Breaches in Healthcare

A look at a few underlying issues affecting healthcare security, such as data breach…

Threat Detection and the Pyramid of Pain

By Matthew Herring, Director Cyber Threat & Detection Engineering Defense is har…

Zero-day Attacks are on the Rise: Managed Detection & Response Providers Can Help

With an average of 21 zero-day attacks, this year has seen more than double. What’s …

Shipping Firms’ Credentials for Sale on the Dark Web: November Threat Intelligence Report

It’s no secret that the shipping and logistics industries as well as many other glob…

Five Ways to Protect a Smart City from Cyberattacks

by: Grant Snowden, Critical Start DFIR Engineer and Jaccari Standifer, Critical…

Killware is Here, but so are the Tools to Defeat the Threat

Killware is increasing the stakes on the Ransomware-as-a-Service model. While global…

Cyber Threat Intelligence Summary – October 2021

By Callie Guenther, Critical Start Cyber Threat Intelligence Manager As a managed de…

IDC Survey Points to Value of MDR in Helping Companies Resolve Security Alerts

Companies of all sizes are failing to investigate an alarming number of security ale…

Identity is the New Perimeter

by Charlie Smith, Microsoft Solutions Principal, Critical Start Identity based attac…

Mayhem in Manufacturing, Part II: Best Practices for Third-Party Risk Management

by: Ross Williams, Critical Start DFIR Leader As I mentioned in Part I of my “M…

Support for Microsoft 365 Defender Extends Critical Start MDR Coverage Enterprise-wide

By Leonard Volling, Critical Start Microsoft Alliance Director As Mi…

SOC vs. CSIRT: What’s the Difference?

Years ago, organizations relied primarily on their IT department to manage security….

Ransomware: An Attacker’s Perspective

By Randy Watkins, Critical Start Chief Technology Officer Ransomware is rampant, wit…

Retailers, Why Not Give Consumers the Gift of Data Security This Holiday Season?

Consumers have historically been wary of disclosing their financial information over…

Critical Start Inaugural Cyber Threat Intelligence Report – September 2021

By Callie Guenther, Critical Start Cyber Threat Intelligence Manager As a managed de…

Three Reasons Companies Fall Victim to Ransomware – and One Big Way the Game is Changing

by Quentin Rhoads-Herrera, Critical Start Director, Professional Services Ransomware…

Transparency (Or Lack Thereof): What Your MDR Company Isn’t Telling You

By Alex Humphrey I recently discovered that one of my favorite memes comes from Sout…

CRITICALSTART SELECTED FOR THE DALLAS BUSINESS JOURNAL’S MIDDLE MARKET 50 LIST FOR 2021

Dallas, TX (September 20, 2021) — Critical Start, a leading provider of Managed Dete…

Mayhem in Manufacturing, Part I: Four Best Practices to Avoid Ransomware Attacks

by: Ross Williams, Critical Start DFIR Leader According to the CrowdStrike 2021…

Penetration Testing: Why is a Good Offense the Best Defense?

by: Quentin Rhoads-Herrera – Director, Professional Services I recently wrote about …

Azure DevOps Service security monitoring using Azure Sentinel

by: Ronald Prasad, Microsoft Services Principal With cyberthreats on the rise, teams…

How to Plan a Migration from SIEM Solutions to Microsoft Sentinel

by: Ronald Prasad, Microsoft Services Principal Migrating to Microsoft Sentinel can…

Understanding XDR – Learn from Industry Authorities

Rated XDR How XDR is Supercharging the MDR space to Reach Next-Level Detection and R…

Incident Response 101: What to expect before, during, and after a breach

Cyberattacks have become a daily occurrence, and it seems like no business is immune…

Cortex XDR and MDR: The right balance of applied machine learning and the humans that aid it.

By Chris Yates When I was young, and learning to appreciate classic cars, I learned …

Ransomware: Be a Victor, Not a Victim.

Ransomware attacks are not only becoming more sophisticated, but also more frequent….

Azure Sentinel: Notifications of New Detection Rules

The CRITICALSTART Cybersecurity Consulting Services for Microsoft Security team is d…

Is Your Cybersecurity Answering the Right Question?

by: Vasu Nagendra – Chief Product Officer I am a big fan of Doctor Who, the Br…

Women in Cybersecurity: Meredith Dishman

Meredith Dishman, Director of Distribution Channels for CRITICALSTART, believes in a…

Secure the Cloud—All Hands on Deck

The cloud is storming. There has been intense surge of cloud adoption in businesses …

Women in Cybersecurity: Katy Lietzau

Katy Lietzau, Director of Channel for the Central Region at CRITICALSTART, believes …

MOBILESOC: You’ll Take this Threat Alert to Go.

Smoked brisket, poached eggs, sliced tomatoes, and sourdough toast—it’s the brunch y…

Zero-day Targeting Exchange Servers: Steps to Evaluate the Risk to Your Organization

By: Charlie Smith & Travis Farral A zero-day has been announced targeting E…

The Top Three Issues Robbing You Of SIEM ROI

Upon inception, the function of the Security Information and Event Management (SIEM)…

Earning Your Business is Good. Earning Your Trust is Better.

The impact a company culture has on delivering value Company culture might fee…

Navigate Aftermath of SolarWinds Attack With On-Demand Resources

The SolarWinds cybersecurity breach, also known as Sunburst, has made glob…

Data Privacy Program from Zero to Hero

As I promised last week, here’s a short article on Developing and Implementing a Dat…

Balancing Act: How MOBILESOC can Ensure Cybersecurity while Protecting Time with Family

By Tommy Scott, Senior Security Consultant | CRITICALSTART Closing the laptop a…

Windows Security Event Logs – What to Monitor?

The following is a table of event codes that I’ve found to be extremely valuable to …

Second Round of Stimulus Provides New Opportunity for Online Scams

This week, Americans nationwide will begin receiving their second round of COVID-rel…

Sunburst: A Week in Review

2020 isn’t going down quietly, and what an awful week it has been for the security c…

Weighing the Value of Managed Security

A shortage of skilled personnel is one of the most serious issues affecting security…

Steps Educational Institutions Are Taking to Defend Their Infrastructures from Cyber Attackers

Just when we thought 2020 couldn’t get any worse, cyber attackers are finding new wa…

The Democratization of Security: Simplification and Direction for Content Management

Last week, we talked about how life could be made easier through the democratization…

The Democratization of Security

How Permissions Elevate both Transparency and Efficiency to Build Healthier Security…

CRITICALSTART & ePlus | National Cybersecurity Awareness Month Podcast

Full Transcript: LW: Welcome. Thanks for joining everyone, my name is Lee Waske…

How to Develop a Cybersecurity Playbook in 5 Steps

A well-organized cybersecurity playbook can be the difference between an incident th…

[2020 Updates] Gartner Endpoint Security Hype Cycle Insights

Gartner recently released their 2020 Hype Cycle for Endpoint Security, and the focus…

SIEM & MDR: What You Need to Know

A defense-in-depth security strategy is built upon the premise that no one tool or p…

Benefits of Security Orchestration, Automation, & Response (SOAR)

With threats to network security increasing in sophistication and expanding the rost…

A New MDR Managed SIEM Offering Powered by Devo

By Rob Davis, CEO of CRITICALSTART At CRITICALSTART, every idea begins with the ques…

Incident Response Teams: In-House vs Outsourced

How prepared is your organization for a security breach? That gap in time between fi…

Cyber Threat Concerns Grow as Schools Lean on Virtual Learning

With many school districts using distance learning due to the COVID-19 pandemic, con…

CRITICALSTART MDR Ranks 4.7/5 on Gartner Peer Insights

Recognizing the importance of peer reviews in an organization’s purchasing decisions…

EDR Tools: What They Are & Why You Need Them

EDR tools enable endpoint visibility and detection of threats via registry monitorin…

Threat Hunting: Proactive Incident Response

Organizations often don’t realize they’ve been breached, giving malicious actors the…

MDR vs MSSP: What are they? How do they work?

What are the advantages and limitations of each – MDR vs MSSP – and how do they func…

Outer Space Meets Cyberspace: What Space Travel Can Teach Us About Cybersecurity

February 20, 1962: An Atlas LV-3B launch vehicle lifts off from Launch Complex 14 at…

How Security Teams Eliminate Risk Acceptance with MDR

Recent data shows that 83 percent of IT security professionals are feeling…

Why a Proactive IR Strategy Is Critical

Breaches are a fact of life for every business. However, it is possible to stop brea…

Zero-Trust and Micro-Segmentation

Adoption of Zero-Trust and Micro-Segmentation as core design principles can help imp…

Weaponizing Public Breach Data Dumps for Red Teamers

Public password dumps have been an excellent way for attackers to gain access to acc…

What is EDR? And EDR vs. MDR vs. EPP – Security Compared

Proactive vs. Reactive Endpoint Security Really, there are two kinds of security pra…

NFL Draft: 5 Things Teams Need to Do Now to Guard Against Hackers

Ready or not, it’s NFL draft week. After much debate over how to hold the NFL draft,…

Cybersecurity Needs for the Remote Workforce

Chicken Little was always running around saying the same thing… until it really happ…

Free MOBILESOC and Endpoint Protection for Remote Security Teams until June 15

Like many other organizations, we have deliberated on how CRITICALSTART ca…

State Legislation May Drive Federal Security Compliance Regulations in 2020

State governments are taking the lead in developing cybersecurity regulations as cyb…

SOAR And MDR: Finding The Best Fit To Augment Security

The well-documented shortage of experienced cybersecurity practitioners is hindering…

4 Key Steps to Protect Your Organization Against Increased Cyber Threats

In today’s cyber threat landscape, it’s not just the military-industrial and defense…

Protecting Your Organization Against Ransomware Attacks

Attacks are increasing – a proactive approach to data protection can help you safegu…

Top 6 Cybersecurity Predictions for 2020

The pace of breaches and cybersecurity threats continues unabated. In 2019 alone, we…

That’s a Wrap: 2019 Cybersecurity Predictions Recap

As we close the books on 2019, we thought we’d take a look back at the predictions w…

Tips for Securing PowerShell

In 2020, system administrators will be using PowerShell. There is no tool more power…

The First Channel-Only MDR

When CRITICALSTART first opened for business in 2012, we pursued a service-led …

Retailers: Don’t Let Black Friday Cyberattacks Darken Holiday Shopping

Valentine’s Day, Mother’s Day, Independence Day, Back-to-School, and Halloween are d…

Cybersecurity 101: What to Look for in a Partner

The key to effective cybersecurity is to quickly stop an attack before it becomes a …

Testing a Flutter Application

As your app gets bigger, a good set of tests may help you save time, as tests can fi…

Research Report: The Impact of Security Alert Overload

CRITICALSTART conducted a survey of more than 50 Security Operations Center (SO…

SECURITY TOOLS

THREAT ANALYTICS SEARCH CHROME EXTENSION Current Version 5.0.3 – Updated on 5/10/202…

Cybercriminals Going after K-12? Yep, It’s a Thing.

Louisiana Governor John Bel Edwards has issued a state of emergency due to a malware…

Mid-Year Check-In: 2019 Cybersecurity Predictions

Back in early January, I teamed up with my colleague, Jordan Mauriello, to write fiv…

Tackling the Cybersecurity Talent Shortage, One Alert at a Time

Reducing alert overload by integrating zero-trust technology as part of your securit…

The Industry’s First – and Only – MOBILESOC App Just Got Better

Instant triage and response to security alerts? We’ve got an app for that. We’re cha…

The Threat of Systematic Cybersecurity Risk in Financial Services

It’s obvious that criminals follow the money, making financial services firms a top …

Drowning in Alerts? CRITICALSTART, Microsoft Defender ATP Collaboration Will Reduce Alerts by 99%

The rapidly changing threat landscape poses numerous challenges for all enterprise o…

Law Firms Beware: Data Breaches on the Rise

If your law firm hasn’t been breached, chances are very high it will. Cybersecurity …

The Last Watchdog Talks to CRITICALSTART About Radical Transparency

At CRITICALSTART, we’ve made the concept of “radical transparency” a cornerstone of …

The Boy Who Cried “Alert”

Later, he saw a REAL wolf prowling about his flock. Alarmed, he leaped to his feet a…

#BalanceForBetter: International Women’s Day 2019

This year’s International Women’s Day 2019 theme is #BalanceforBetter…

Data is the New Source Code

The role of data in today’s business world cannot be overstated. Competitive intelli…

Five Cybersecurity Predictions for 2019

2018 was another year of change in the cybersecurity industry. We’ve had some intere…

Naughty or Nice: Cybercriminals’ Latest Targeting Strategies During the Holiday Season

Economics of Christmas: The Joy of Shopping Retailers solicit most fervently on a ha…

Supporting Our Family: In Memory of Ricki Bateman

Today being the National Day of Giving, we come together to celebrate the gift of ge…

Cryptojacking Attack: Everyone is a Target

An evolution has occurred with the preferred attack method among hackers. With its h…

Putting the NEXT in Next Generation Firewall: Tales From the Field

You’ve purchased a next-generation firewall. You understand the why, but h…

Spectre and Meltdown: Why No One Should Implicitly Trust Hardware

Everyone should be wary of downloading, installing, or running unknown scripts or so…

Bluetooth Blues

The proliferation of wireless devices in the world is astounding, and one of the mos…

Security Automation and Orchestration: An Analyst Perspective

Security Automation and Orchestration (SAO) Platforms are the newest players in the …

The New Ransomware that Makes WannaCry Wanna Cry

Today, 27 June 2017, a new malware has begun attacking networks around the world. Pe…

The Devil’s in the Subtitles

Widespread malware affecting media players On May 23rd, 2017, Checkpoint f…

WannaCry Recap

Friday could not have come sooner for some last week. For the rest of us, we may hav…

WannaCry? You Might.

Urgent Information Regarding WanaCrypt/WannaCry/WCry Ransom-ware Outbreak Today, 12 …

WannaCry IOCs and Technical Details

Technical Details It is currently unclear whether this payload is delivered via mali…

Picking the Right Silver Bullet

With the current state of cybersecurity, the market has become inundated with “solut…

What Are the Mistakes That Get Hackers Arrested?

At CRITICALSTART, we use a concept called the Defendable Network and map&n…

Critical Start Blog

The Hidden Risks: Unmonitored Assets and Their Impact on MDR Effectiveness

The Need for Symbiotic Cybersecurity Strategies | Part 2: Integrating Proactive Security Intelligence into MDR

Finding the Right Candidate for Digital Forensics and Incident Response: What to Ask and Why During an Interview

The Need for Symbiotic Cybersecurity Strategies | Part I

Critical Start H1 2024 Cyber Threat Intelligence Report

Now Available! Critical Start Vulnerability Prioritization – Your Answer to Preemptive Cyber Defense.

Recruiter phishing leads to more_eggs infection

2024 Critical Start Cyber Risk Landscape Peer Report Now Available

Critical Start Managed XDR Webinar — Increase Threat Protection, Reduce Risk, and Optimize Operational Costs

Pulling the Unified Audit Log

Set Your Organization Up for Risk Reduction with the Critical Start Vulnerability Management Service

Announcing the Latest Cyber Threat Intelligence Report: Unveiling the New FakeBat Variant

Cyber Risk Registers, Risk Dashboards, and Risk Lifecycle Management for Improved Risk Reduction

Beyond SIEM: Elevate Your Threat Protection with a Seamless User Experience

Navigating the Convergence of IT and OT Security to Monitor and Prevent Cyberattacks in Industrial Environments

Critical Start Cyber Risk Peer Insights – Strategy vs. Execution

Critical Start Named a Major Player in IDC MarketScape for Emerging Managed Detection and Response Services 2024

Introducing Free Quick Start Cyber Risk Assessments with Peer Benchmark Data

Efficient Incident Response: Extracting and Analyzing Veeam .vbk Files for Forensic Analysis

Mitigating Industry 4.0 Cyber Risks

CISO Perspective with George Jones: Building a Resilient Vulnerability Management Program

Navigating the Cyber World: Understanding Risks, Vulnerabilities, and Threats

The Next Evolution in Cybersecurity — Combining Proactive and Reactive Controls for Superior Risk Management

CISO Perspective with George Jones: The Top 10 Metrics for Evaluating Asset Visibility Programs

DarkGate Malware Campaign: New Threat Intelligence Report

Tim Bandos on Elevating MDR: How Critical Start Enhances Security Operations

The Role of Expert Teams in MCRR: A Human-Centric Approach

Spend Smarter, Risk Less: Cybersecurity ROI Strategies for Security Leaders

Looking Forward: The Future of Exposure Management

Vulnerability Prioritization Strategies for Effective Exposure Management

Leading the Charge in AI-Driven Cybersecurity: Microsoft Co-Pilot for Security

Navigating the New Era of Cybersecurity with NIST CSF 2.0

Two Sides of the Same Coin: Vulnerability Detection and Exposure Management

Critical Start CTO and Forbes Technology Council Member Publishes Benefits and Cautions of Aligning With Cybersecurity Frameworks

Establishing Provable Security Maturity with Managed Cyber Risk Reduction

Unknown Risk Acceptance Is Unacceptable: The Danger Lurking Behind the Threat Signals Missed by Your MDR

The Rise of AlphaLock: A New Era in Cybercrime as a Service?

Find Security Gaps Before Attackers Do with Critical Start Asset Visibility

Maximizing Microsoft Sentinel to Elevate Security and Control Costs

Navigating Rising Ingestion Costs: Leveraging Critical Start’s Managed SIEM Solution for High-Priority Detections and Coverage Gaps

The Rise of the Cybercriminal

The Ongoing Impact of Malware-as-a-Service

AI Evolution in Cybercrime: Threats and Deceptive Tactics

Geopolitical Factors Shaping the Future of the Cyber Domain

Cloud – Evolution of Malicious Traffic Concealment

2024 Cybersecurity Predictions: Navigating the Evolving Threat Landscape

The State of Cybersecurity: 2023 Trends and 2024 Predictions

Navigating Cybersecurity Challenges Amidst Black Friday and Cyber Monday Frenzy

Navigating the Digital Highway: Cyber Risks in Holiday Travel Transportation

Defending Your Online Presence: Holiday Brand Impersonation and Web Skimming

Navigating Software Supply Chain Vulnerabilities During the Holiday Season

Navigating Cybersecurity Challenges in the Hospitality Sector during the Festive Season

Cyber Tides: Recent DDoS Attacks and Holiday Implications

Understanding the Risks of Remote Monitoring and Management (RMM) Tools

Data Breaches Are on the Rise: Is Your Protection Keeping Pace?

Exposing the Covert Threat: RATs and the VenomRAT Deception

The Landscape of Insider Risks

Securing the Ecosystem: Navigating the Risks of NPM Packages in Modern Software Development

The Evolution of Cybercrime: Adapting to APT Techniques

Protecting Critical Infrastructure: Defending Against Threats to OT/ICS Systems

Ransomware Attacks on ESXi Servers: A Looming Threat

Default Configurations: A Common Gateway for Threat Actors

Navigating the Shadows: A Deep Dive into Prolonged Cyber Intrusions

Shrinking Timelines and Rising Costs: The Dynamics of Ransomware Attacks

Exploring Rhysida Ransomware: A Deeper Understanding of the New Cyber Menace

Securing Mobile Devices in the Modern Era: Challenges and Mitigations

Cyber Chameleons: Why Ransomware Groups like BlackByte Must Evolve to Survive

Slack Security Challenges: Protecting Your Organization from Threats

2023’s Digital Intruders: Unmasking the Year’s Top Malware So Far

Zoom Securely: Navigating the Virtual Boardroom in the Digital Era

Understanding the Resurgence of Kerberoasting Attacks in Today’s Threat Landscape

Exploiting the Abandoned: Exposing Phishing Tactics Through Neglected Websites

The Biggest Cybersecurity Challenges for Credit Unions

Teams Under Siege: Uncovering Microsoft’s Cyber Quirks

Celebrating Women in Cybersecurity

Understanding Business Email Compromise Attacks: A Growing Threat

Surfing the Risks: Navigating Public Wi-Fi’s Hidden Threats

Unveiling the Shadows: Exploring Credential Harvesting Methods

Securing the Future: Insights from a CISO on the Cyber Risk Landscape

The Role of Expert Teams in MCRR: A Human-Centric Approach