fbpx

Details
Category: Cybersecurity PRISM
What is URL Filtering?
 
You and other employees in your company carry out a lot web/internet activities on daily basis, e.g., surfing your favorite websites, clicking on the links in the emails, accessing a number of web/cloud-based applications for your personal or business usages, etc. Each time you do any such thing, you are practically inviting a large number of threats to your corporate networks.

Read more: What is URL Filtering? How Does URL Filtering Work?

Details
Category: Cybersecurity PRISM
Quarterly Threat Insights Report of HP (March 2021) reported that approx. 29% of cyber-threats they observed were 'Unknown' cyber-threats, means, were not known before.
 
This post is intended to shift your attention to Unknown cyberthreats...

Read more: What are UNKNOWN Cyber-Threats? How Can They Challenge Your Cyber-Resiliency?

Details
Category: Cybersecurity PRISM
What is An Exploit Kit?
 
Let us first understand what an exploit is...
 
An exploit in most situations are some programs, files, or codes that are developed by threat-actors to take advantage of some vulnerabilities in a 'Software' or OS, to bypass your computers or network safeguards to infect your device.

Read more: What is An Exploit Kit? Why do Cyber-Criminals use Exploit Kits?

Details
Category: Cybersecurity PRISM
DNS is a critical and foundational protocol of the internet and it is often described as the 'Phonebook of the internet'. The primary purpose of DNS is to mapping domain names to IP addresses. DNS will translates human-friendly URLs, such as www.firstlook.com, into machine-friendly IP addresses, such as 192.167.82.137. Without DNS, it would be nearly impossible for us to find anything on internet. Right?

Read more: What is DNS Tunneling? How Does DNS Tunneling Happen?

Details
Category: Cybersecurity PRISM
Let yourself think from the perspective of a hacker...
 
You won't be happy or content with infecting just a machine of the targeted network. Will you? Of course not. Once you have gained an initial foothold, then you would want to pivot, infect and control other machines of the network too. This is when you would need a robust C&C communication with all those infected machines (called Zombies or bots). Your C&C would help you to maintain a persistent presence and to exfiltrate some valuable data later. You can control all zombie-machines via remote C&C.

Read more: What is C&C? How Do Command And Control Operate?

Details
Category: Cybersecurity PRISM
Every time whenever you walk to a private doctor or into a private hospital, you are leaving behind a large information about yourself there. This set of information is quite important and you do not want this information to be disclosed. Sometime, you may make some personal disclosure to your private doctors, which you don't want to share with anybody else.

Read more: What is PHI? What are 18-Identifiers of PHI?

Details
Category: Cybersecurity PRISM
When you decide to use any cloud storage service, you and your employees will be able to log in from anywhere using internet, to upload and retrieve their data.
 
But all cloud storage providers don't offer the same level of data protection options to you including cloud encryption...

Read more: What is Cloud Encryption? Why Does it Deserve Special Considerations?

Details
Category: Cybersecurity PRISM
The idea behind writing this post is to differentiate the Information's Security and Cybersecurity.
 
I have found that people are still struggling to make a good distinction between these too.

Read more: Information Security vs Cybersecurity . What is the Difference?

Details
Category: Cybersecurity PRISM
Let me be a little specific here...
 
Cyber criminals actually prefer to go after companies' SHADOW IT ecosystem. Because it is where they find more entry-points to your network. They target more into the software and applications used or installed by your employees, without the approval and/or knowledge of your IT department.

Read more: What is Shadow IT? Why is Shadow IT a growing Risk ?

Details
Category: Cybersecurity PRISM
You always want to ensure that only authorized users are allowed to access your systems & resources. Before the issue of authorized access is handled, you have to tackle the issue of 'Authentication'.

Read more: What is Tokenization? How Tokenization is Different from Encryption ?

Details
Category: Cybersecurity PRISM
👉 How Can You Leverage Threat Intelligence Best?
 
Threat intelligence is knowledge if you have it would allow you to prevent or mitigate a large number of cyber-attacks on your organisation. It is a special form of data that is great in giving you the CONTEXT of:

Read more: How Can You Leverage Threat Intel BEST?

  1. What is Patch Management? Why is Patch Management Damn Important?
  2. What is Triage in Cybersecurity?
  3. What is a Cybersecurity Audit? 5 Best Practices for a Cybersecurity Audit
  4. What are CIS Controls? What was the need for CIS Controls - Version 8 ?
  5. What are Malicious Macros?
  6. What is Threat Modelling?
  7. What is CASB? What are 4-Pillars of CASB?
  8. What is Deep Packet Inspection? How Can You Use DPI in Security?
  9. DDoS Mitigation - How Can You Mitigate DDoS Attacks?
  10. Requirement #10 of PCI-DSS . Why does it Matter a lot ?

Page 6 of 27