TLDR; * Exploit prediction scoring system which is also known as EPSs is a better way to understand and prioritize vulnerabilities as it uses data driven approach to determine the likelihood or probability of a vulnerability to be exploited. * As part of vulnerability management programs document the process design playbooks for
April 14, 2023
TLDR; * Credential Stuffing is a massive problem. Attackers have already found workarounds to MFA with techniques like Evil Proxy. Use of Hardware keys is recommended. * Understand your exposure and cyber crime value. Cyber crime value is what can an attacker benefit by attacking you or your organization. * Humans are the
April 07, 2023
TLDR; * Incident Response Plan is a must in order to fight phishing or social engineering attacks. * Security is the responsibility of the entire and not just of the security team to bring awareness. Security awareness training should be conducted with other teams in the organization. * Whenever possible, implement MFA across
March 24, 2023