Cybersecurity Resource Center | Blog | CRITICALSTART
Our new MOBILESOC UI makes alert resolution and collaboration on the go more efficient and intuitive.
Learn More
Learn real world attack and defense strategies with Adversarial Emulation and Active Defense training from TEAMARES
Learn More
TEAMARES launches Breach Attack as a Service for quick testing whenever your environment changes.
Learn More
Webinar Series | Once More unto the Breach | Lessons Learned from Billion Dollar Breaches
Learn More

Balancing Act: How MOBILESOC can Ensure Cybersecurity while Protecting Time with Family

    By Tommy Scott, Senior Security Consultant | CRITICALSTART Closing the laptop and mentally disconnecting from work is a critical component of work-life balance. But there’s one problem: There ...
Continue Reading

Windows Security Event Logs – What to Monitor?

The following is a table of event codes that I’ve found to be extremely valuable to log and monitor in an environment. Some trend more towards general environment health and activity monitoring, ...
Continue Reading

How To Reverse Engineer the SolarWinds Hack

While there is a lot more functionality to this malware, we hope this basic reverse engineering overview and examples can help you get started reversing the binaries. These techniques are not unique ...
Continue Reading

Second Round of Stimulus Provides New Opportunity for Online Scams

This week, Americans nationwide will begin receiving their second round of COVID-related stimulus checks. And just like with the first round, online scammers and malicious actors will no doubt be ...
Continue Reading

Sunburst: A Week in Review

2020 isn’t going down quietly, and what an awful week it has been for the security community. If you were lucky enough to be on vacation, let’s catch up. Recap Heading into the weekend on Friday ...
Continue Reading

Weighing the Value of Managed Security

  A shortage of skilled personnel is one of the most serious issues affecting security managers today. Add in challenges in maintaining a complete Security Operations Center (SOC) and the result can ...
Continue Reading

Death to Vulnerability Management As We Know It

Vulnerability Management concepts are changing. The idea that vulnerability management is limited to scanning alone is being replaced with a wider and more comprehensive view. [...]Read More...
Continue Reading

Steps Educational Institutions Are Taking to Defend Their Infrastructures from Cyber Attackers

Just when we thought 2020 couldn’t get any worse, cyber attackers are finding new ways to capitalize on our highly technology-dependent society. They’ve always looked to industries like medical ...
Continue Reading

4 Holiday Shopping Tips That Retailers Can Provide to Customers

By Callie Guenther |  CYBERSOC Data Scientist, CRITICALSTARTNovember 20, 2020 Retailers have the opportunity to boost consumer trust by making security a top priority. The ...
Continue Reading

How Retailers Can Be Ready for Black Friday and Cyber Monday 

By Callie Guenther |  CYBERSOC Data Scientist, CRITICALSTARTNovember 20, 2020 Black Friday. You love it, you hate it, you love to hate it. Coronavirus has canceled many things in 2020, but Black ...
Continue Reading

Multiple Vulnerabilities Discovered in Aviatrix

Versions Tested: Aviatrix Cloud Controller UserConnect-5.3.1516 Aviatrix VPN Client 2.8.2 Product: https://aviatrix.com/cloud-network-platform/ Security Advisories: ...
Continue Reading

The Democratization of Security: Simplification and Direction for Content Management

  Last week, we talked about how life could be made easier through the democratization of security permissions and access.  In particular, we discussed how Microsoft Azure Active Directory (AAD) ...
Continue Reading

The Democratization of Security

How Permissions Elevate both Transparency and Efficiency to Build Healthier Security Relationships [...]Read More...
Continue Reading

Local Privilege Escalation Vulnerability Discovered in VMware Fusion

VMware Fusion contains a local privilege escalation vulnerability that allows an attacker to inject a malicious path into the system-wide PATH environment variable. [...]Read More...
Continue Reading

Electronic Voting: 3 Ways to Strengthen Election Security

Electronic voting is the future - but our security processes are stuck in the past. In this post, we discuss 3 measures to ensure the integrity of all votes cast. [...]Read More...
Continue Reading

How to Develop a Cybersecurity Playbook in 5 Steps

A cybersecurity playbook is essential for any organization's SOC team. In this post, we cover 5 things to consider when developing a security playbook. [...]Read More...
Continue Reading

Exploiting Enterprise Passwords

  No matter how much you think you’ve done to safeguard your data and systems against breaches, common vulnerabilities continue to wreak havoc on enterprises. The top of the list of these ...
Continue Reading

[2020 Updates] Gartner Endpoint Security Hype Cycle Insights

Learn what's changed with Gartner's 2020 updates to their endpoint security hype cycle: UES, XDR, BYOPC security, BEC protection, SASE, & more! [...]Read More...
Continue Reading

Attorney-Client Privilege and Cybersecurity: What’s Changed and How to Adapt

Learn how a recent court decision has impacted attorney-client privilege for existing incident response contracts - and what this means for your business. [...]Read More...
Continue Reading

SIEM & MDR: What You Need to Know

A defense-in-depth security strategy is built upon the premise that no one tool or process is enough to ensure the protection of an organization’s entire technology infrastructure. [...]Read More...
Continue Reading
1 2 3 4 … 7