Ransomware groups – who are they, what do they want and how do they do it?
Ransomware – a cybersecurity term that is now familiar to the general public as it has a detrimental impact on all areas of the economy.
Security Operations Center
White Hat journey to MXDR
Get to know more about White Hat’s journey in the Microsoft partnership evolution.
Developers in the crosshairs – why are there more and more cyber attacks against software vendors?
Why are there more and more cyber attacks on software development environments and how is software company security becoming a key issue in the supply chain?
Analysing a latent malware infection on a recently MDE-onboarded machine (Part 2)
Recently, an interesting latent malware infection was found on a newly onboarded machine at one of our clients (Client). Microsoft Defender for Endpoint (MDE) reported anomalies about the computer shortly after onboarding, but uncovering the inner workings of the malware and the infection methods required thorough investigation We present the ...
Analysing a latent malware infection on a recently MDE-onboarded machine (Part 1)
Recently, an interesting latent malware infection was found on a newly onboarded machine at one of our clients (Client). Microsoft Defender for Endpoint (MDE) reported anomalies about the computer shortly after onboarding, but uncovering the inner workings of the malware and the infection methods required thorough investigation, which anonymized version ...
UNLOCK THE POWER OF AN EXTERNAL SOC – BY TOMORROW MORNING!
A webinar on how and why outsourcing your security to an MSSP can help transforms your organization and create a 24/7 available and alert attack detection and reaction capacity instantly – to help you protect your data and infrastructure even when you’re on holiday. In case you missed it, let ...
SIEM, EDR, XDR, MDR – what do they mean and how do they effect the daily information security operation?
The information security profession is full of three- and four-letter acronyms. Those who just listen to a cybersecurity lecture are likely to lose the plot very quickly. But sometimes even those in the industry are not necessarily able to keep up with the incredibly fast pace of development dictated by ...
Artificial intelligence and cybersecurity – threat or opportunity?
Since ChatGPT has become available to all Internet users, major vendors have been announcing a series of AI-enabled products and services, including in the field of cybersecurity. We are undoubtedly entering a period of widespread use of AI, which will soon have a noticeable impact on the security of cyberspace. ...
The Ferrari incident and why the automotive industry is a favourite of cyber criminals
Ferrari’s recent incident shows yet again why the automotive industry is a prime target for cybercriminals and ransomware groups – joining a long line of similar attacks including Ferrari’s hit last year, the “Conti” incident of Volkswagen and Audi or Renault as collateral in the WannaCry campaign, to just name ...