In the ever-evolving realm of cybersecurity, where threats loom large and breaches are a constant concern, the practice of granting always-on or standing privileges to user accounts presents an alarming vulnerability for any organization. This vulnerability is underscored by findings from Verizon’s 2023 data breach incident report, which states that 74% of all data breaches occur due to privilege misuse or stolen credentials.

What monitoring coverage do we have of our infrastructure, people, data, and suppliers?

Initial access brokers (IABs) form a key part of the cybercriminal ecosystem. They facilitate access for ransomware groups, data leakers, and advanced persistent threat groups (APTs) into corporate networks. They are highly specialised, and professional, and operate in an established, lucrative market often characterised by rigid rules and conventions. Every ransomware attack or data breach begins with initial access, following the reconnaissance phase of an attack.

Kubernetes (K8s) is a key platform for deploying and managing containerized applications. As more and more businesses use Kubernetes, it’s clear that there’s a need for robust data protection strategies. A crucial element of these strategies is the automation of procedures to backup K8s to prevent data loss, which could otherwise result in significant operational disruptions and financial consequences.

In today's rapidly evolving cyber landscape, modern adversaries constantly advance their methods to circumvent traditional defenses. At Trustwave, recent observations have unveiled the resurgence of the BlackCat group following its disruption by the US Justice Department on December 19, 2023.

Self-attestations are an increasingly popular tool for cybersecurity compliance frameworks such as the National Institute of Standards and Technology (NIST) Cybersecurity Framework and the Cybersecurity and Infrastructure Security Agency (CISA) directives. The idea is that organizations attest to meeting specific security controls and requirements without third-party validation.