Why MTTR is Bad for SecOps
Kerry Matre, senior director at Mandiant, discusses the appropriate metrics to use to measure SOC and analyst performance, and how MTTR leads to bad behavior.
Mean time to resolution (MTTR)...
Indexsinas SMB Worm Campaign Infests Whole Enterprises
The self-propagating malware’s attack chain is complex, using former NSA cyberweapons, and ultimately drops cryptominers on targeted machines.
The Indexsinas SMB worm is on the hunt for vulnerable environments to...
[Webinar] How Cyber Attack Groups Are Spinning a Larger Ransomware Web
By: The Hacker News
Organizations today already have an overwhelming number of dangers and threats to look out for, from spam to phishing attempts to new infiltration and ransomware tactics....
Babuk ransomware builder leaked following muddled “retirement”
Heads are being scratched after the Babuk ransomware builder appears on VirtuTotal, adding to the gang's reputation for confusion.
In the last days of April 2021, the operators...
NIST defines “critical software” with a broad range of security functions
A significant part of the Biden administration's wide-ranging cybersecurity executive order (EO) mandates that the National Institute of Standards and Technology (NIST) define what constitutes "critical software," a deliverable...
Here’s what the US-Russia cyber ceasefire will mean for cybersecurity
The SolarWinds attack last year was a clear example of the rise in state-sponsored cybercrime, with attackers using the breach to spy on a huge number of organizations, including...
Microsoft Refining Third-Party Driver Vetting Processes After Signing Malicious Rootkit
Rogue driver was distributed within gaming community in China, company says.Microsoft is refining its policies and processes for certifying drivers through its Windows Hardware Compatibility Program (WHCP) after a...
