May 30 Webinar | SOC Talk: Automating Threat Response
Reduce Alert Noise and False Positives
Boost your team's productivity by cutting down alert noise and false positives.
Automate Security Operations
Boost efficiency, reduce burnout, and better manage risk through automation.
Dark Web Monitoring
Online protection tuned to the need of your business.
Maximize Existing Security Investments
Improve efficiencies from existing investments in security tools.
Beyond MDR
Move your security operations beyond the limitations of MDR.
Secure with Microsoft 365 E5
Boost the power of Microsoft 365 E5 security.
Secure Multi-Cloud Environments
Improve cloud security and overcome complexity across multi-cloud environments.
Secure Mergers and Acquisitions
Control cyber risk for business acquisitions and dispersed business units.
Operational Technology
Solve security operations challenges affecting critical operational technology (OT) infrastructure.
Force-Multiply Your Security Operations
Whether you’re just starting your security journey, need to up your game, or you’re not happy with an existing service, we can help you to achieve your security goals.
Detection Investigation Response
Modernize Detection, Investigation, Response with a Security Operations Platform.
Threat Hunting
Locate and eliminate lurking threats with ReliaQuest GreyMatter
Threat Intelligence
Find cyber threats that have evaded your defenses.
Model Index
Security metrics to manage and improve security operations.
Breach and Attack Simulation
GreyMatter Verify is ReliaQuest’s automated breach and attack simulation capability.
Digital Risk Protection
Continuous monitoring of open, deep, and dark web sources to identify threats.
Phishing Analyzer
GreyMatter Phishing Analyzer removes the abuse mailbox management by automating the DIR process for you.
Integration Partners
The GreyMatter cloud-native Open XDR platform integrates with a fast-growing number of market-leading technologies.
Unify and Optimize Your Security Operations
ReliaQuest GreyMatter is a security operations platform built on an open XDR architecture and designed to help security teams increase visibility, reduce complexity, and manage risk across their security tools, including on-premises, clouds, networks, and endpoints.
Blog
Company Blog
Case Studies
Brands of the world trust ReliaQuest to achieve their security goals.
Data Sheets
Learn how to achieve your security outcomes faster with ReliaQuest GreyMatter.
eBooks
The latest security trends and perspectives to help inform your security operations.
Industry Guides and Reports
The latest security research and industry reports.
Podcasts
Catch up on the latest cybersecurity podcasts, and mindset moments from our very own mental performance coaches.
Solution Briefs
A deep dive on how ReliaQuest GreyMatter addresses security challenges.
White Papers
The latest white papers focused on security operations strategy, technology & insight.
Videos
Current and future SOC trends presented by our security experts.
Events & Webinars
Explore all upcoming company events, in-person and on-demand webinars
ReliaQuest ResourceCenter
From prevention techniques to emerging security trends, our comprehensive library can arm you with the tools you need to improve your security posture.
Threat Research
Get the latest threat analysis from the ReliaQuest Threat Research Team. ReliaQuest ShadowTalk Weekly podcast featuring discussions on the latest cybersecurity news and threat research.
Shadow Talk
ReliaQuest's ShadowTalk is a weekly podcast featuring discussions on the latest cybersecurity news and threat research. ShadowTalk's hosts come from threat intelligence, threat hunting, security research, and leadership backgrounds providing practical perspectives on the week's top cybersecurity stories.
May 01, 2024
About ReliaQuest
We bring our best attitude, energy and effort to everything we do, every day, to make security possible.
Leadership
Security is a team sport.
No Show Dogs Podcast
Mental Performance Coaches Derin McMains and Dr. Nicole Detling interview world-class performers across multiple industries.
Make It Possible
Make It Possible reflects our focus on bringing cybersecurity awareness to our communities and enabling the next generation of cybersecurity professionals.
Careers
Join our world-class team.
Press and Media Coverage
ReliaQuest newsroom covering the latest press release and media coverage.
Become a Channel Partner
When you partner with ReliaQuest, you help deliver world-class cybersecurity solutions.
Contact Us
How can we help you?
A Mindset Like No Other in the Industry
Many companies tout their cultures; at ReliaQuest, we share a mindset. We focus on four values every day to make security possible: being accountable, helpful, adaptable, and focused. These values drive development of our platform, relationships with our customers and partners, and further the ReliaQuest promise of security confidence across our customers and our own teams.
More results...
On 23 Feb 2022, Russian forces started a military operation targeting Ukraine. Reporting indicates that shelling in several Ukrainian cities has occurred, and footage from Kharkiv’s border shows Russian vehicles moving into Ukraine. In a fiery televised address, President Vladimir Putin has threatened dire consequences to any nations seeking to prevent this, labeling his offensive as a “special military operation in the Donbas”. We’re continuing to monitor the situation, and our sympathies extend to those at risk in Ukraine.
Malicious cyber-action has coincided with Russia’s military forces entering Ukraine. On 23rd Feb 2022, it was reported that a wave of DDoS attacks had occurred against Ukrainian government websites and banks. In addition, new data wiping malware was discovered on hundreds of devices on Ukrainian networks. In some instances, researchers found that the malware had been compiled in December 2021, indicating that the attack had been prepared in advance; other research identified that the malware—which has been named “HermeticWiper” by researchers—was deployed directly from Windows domain controllers, indicating it realistically possible that attackers may have had prolonged access prior to execution.
Yesterday’s developments have incited significant sanctions from multiple NATO member-states including the UK and the US. Additionally, Germany has halted operations relating to the Nordstream 2 pipeline stemming from Russia to Germany. It is almost certain additional sanctions against Russia will be announced in the immediate future.
The conflict in Ukraine has multiple historical factors that have all driven towards the current situation. The Euromaiden protests in 2013 resulted from then Ukrainian president Viktor Yanukovich postponing the signing of the EU-Ukraine association agreement, and instead choosing closer ties with Russia and the Eurasian economic union. This enraged many of Ukraine’s population who wanted to see the country move towards EU and NATO membership, with Yanukovich ousted following other claims of corruption, abuse of power and human rights violations. The subsequent Ukrainian governments—who have taken a far more favorable view towards the west—have widely been rejected by Moscow as being illegitimate.
This shift towards NATO and/or EU membership has enraged Putin, who has suggested that such a move would threaten Russia. Several recent speeches given by President Putin also have emphasized an outdated and archaic view of Ukraine; Putin has alleged that Ukraine had no history and is not a true country. The guise of “peacekeeping” for separatists in the regions of Donetsk and Luhansk also likely provides his decisions with a sense of legitimacy.
Germany’s decision to halt operations related to the Nordstream 2 pipeline is, among other decisions, noteworthy. Some critics assessed that Germany would be more cautious, given its reliance on Russian natural gas; this represents around 65% of current natural gas imports in Germany. In terms of sanctions, more are promised, but for now, they do not seem to be extensive or extreme. Financial punishments are likely to be proportionate to Russia’s actions; as it moves further west into Ukraine, the sanctions will likely increase.
Politicians and journalists alike have hinted at the potential exclusion of Russia from the “SWIFT” banking system. This would represent a dramatic increase in severity, and in direct response to Russia’s escalation. In the UK, Westminster politicians have declared support for further action against oligarchs based in London, and for further scrutiny towards the government’s “Golden Visa” program. The US has also targeted larger Russian banks with sanctions, and the EU has sanctioned 27 individuals.
Malicious cyber-action coming from Russia is likely to continue targeting Ukraine. Cyber-attacks could extend out of Ukraine, and impact NATO and EU member states; this has already been observed with Hermetic Wiper impacting networks in Latvia and Lithuania. NotPetya, notorious for its global spread in 2017, immediately springs to mind. It is also realistically possible that the financial services, energy, and oil & gas sectors in particular are under an increased risk from Russian aligned threat actors. Targeting oil & gas in Europe, for example, could serve to cause concern among nation-states dependent on Russian energy.
Russia-based cybercriminals may also be emboldened or otherwise encouraged by Russia’s actions. This week, the FBI warned organizations of an increased threat from ransomware operations; it is realistically possible that, despite recent Russian crackdowns against cybercriminals, they may deem NATO-based targets, or organizations based in NATO countries, as viable.
Digital Shadows (now ReliaQuest) will continue to monitor and update accordingly; for further insights, we have released a special edition of ShadowTalk discussing the wider geopolitical issues at play during these troubling times. Digital Shadows (now ReliaQuest)’ SearchLight (now ReliaQuest’s GreyMatter Digital Risk Protection) service features a constantly-updated threat intelligence library, providing insights on the unfolding situation within eastern Europe and other trends that might impact your organization. Digital Shadows (now ReliaQuest)’ clients can use Shadow Search (now ReliaQuest GreyMatter Digital Risk Protection)™ queries for further details, and view the event profile created to monitor developments.