A lot of enterprise networks are under attack or they already have been attacked by the adversaries. Red teamers or attackers tend to compromise the environments with new ways and rely on legitimate tools with sophisticated techniques based on their skill levels. On the other hand, the job of the blue teamers becomes more challenging and difficult as the attacker only needs to be successful once to gain access. (more…)

To make the best use of dark web intelligence, you want to be alerted only when new and relevant information emerges and be able to quickly determine what requires further investigation or escalation. Recorded Future enables you to automate the identification of proprietary data or lost credentials on dark marketplaces as well as mentions of your company, brands, or infrastructure.

(more…)

SANS Instructors have built more than 150 open source tools that support your work and help you implement better security. Search the lists on the following pages for the free tools that will help you get the job done.

(more…)

Businesses are undergoing a digital transformation demanding rapid migration to the cloud and expanded adoption of web, mobile, and social platforms. These initiatives, which expand organizations’ digital presence far across the internet, were already exposing the limitations of network security controls like firewalls, DLP, and network monitoring. According to the Verizon Data Breach report, external-facing web applications, into which network security tools lack visibility, comprised the vector category most commonly exploited in hacking-related breaches.

(more…)

The Cyber Security Skills in the UK Labour Market 2021 report explores the nature and extent of cyber security skills gaps (people lacking appropriate skills), skills shortages (a lack of people available to work in cyber security job roles) and job vacancies in the UK.

The research uses a mixture of:

• Representative surveys with cyber sector businesses and the wider population of UK organisations (businesses, charities and public sector organisations – with a focus on businesses)
• Qualitative research with training providers, cyber firms and large organisations in various sectors
• A secondary analysis of cyber security job postings using the Burning Glass Technologies database.

Click to download