All Posts

Show
2.3 billion files exposed across online file storage technologies
May 30, 2019 read more

Leaky SMB File Shares – So Many Bytes!

June 19, 2019

Everyone loves a sequel. If you’re an avid Marvel fan, you’re probably sitting on the edge of your seat waiting …

read more

Managing Digital Risk: 4 Steps to Take

June 18, 2019

Organizations are finding it increasingly difficult to know where their data is stored and shared in today’s technology-forward, connected world. …

read more

ShadowTalk Update – XMRig Cryptocurrency Mining, FIN8 Backdoor, and Attacks Against Office 365

June 17, 2019

This week Harrison is joined by Travis and Alec to discuss the security stories of the week including a fileless malware …

read more

Managing Infosec Burnout: The Hidden Perpetrator

June 10, 2019

The secret of the burnout epidemic lies in how we feel about our stress, not the things that stress us …

read more

ShadowTalk Update – “HiddenWasp” and “BlackSquid” malware, TA505 and Turla actvity, and Too Much Information:The Sequel

June 7, 2019

Alex and Christian join HVR this week to discuss the Linux malware “HiddenWasp” (along with HVR’s hatred of the insect), …

read more

BlueKeep: Cutting through the hype to prepare your organization

May 24, 2019

Over the last week we have all been tuning into our news feeds and listening to the security folks chatting …

read more

Automating 2FA phishing and post-phishing looting with Muraena and Necrobrowser

May 21, 2019

Phishing remains one of the most pervasive threats to enterprise, the simple but effective technique of tricking unassuming users into …

read more

Partnering with SecureLink to help organizations minimize their digital risk

May 15, 2019

Today we announced that SecureLink, one of Europe’s most respected independent cybersecurity and managed service providers, has partnered with Digital …

read more

Mapping Iran’s Rana Institute to MITRE Pre-ATT&CK™ and ATT&CK™

May 15, 2019

The internet has been aflame with discussions around three leaks of internal information from APT groups attributed with the Islamic …

read more

Cyber Talent Gap: How to Do More With Less

May 14, 2019

The challenge facing us today is twofold: not only is the digital footprint of the organizations we want to protect …

read more

ShadowTalk Update – 5.06.19

May 13, 2019

Kacey and Alex join HVR this week to talk through the key stories this week including a new threat group …

read more

Enabling Soi Dog’s Digital Transformation: A Case Study

May 8, 2019

At the beginning of this year I was introduced to Spencer Hardy, the IT manager for an animal charity called …

read more

Announcing Digital Shadows’ ISO27001 certification

May 7, 2019

I’m pleased to announce that Digital Shadows has recently achieved an important compliance milestone for our customers. After a concerted …

read more

ShadowTalk Update – 5.06.19

May 6, 2019

Phil and newcomer Benjamin Newman join Harrison for another edition of the Weekly Intelligence Summary. The guys cover two distinct …

read more

ShadowTalk Update – 4.29.19

April 29, 2019

Jamie and Alex are back with Harrison this week to talk about the leak of information related to APT34 on …

read more

FBI IC3: Cybercrime Surges in 2018, Causing $2.7 Billion in Losses

April 23, 2019

This week, the Federal Bureau of Investigation released its 2018 Internet Crime Complaints Center (IC3). In 2018, the IC3 responded …

read more

ShadowTalk Update – 4.22.19

April 22, 2019

This week the team discusses an unidentified threat actor that has obtained data from various personal Outlook, MSN, and Hotmail …

read more

ShadowTalk Update – 4.15.19

April 15, 2019

Christian and Jamie join Harrison for another week of ShadowTalk to discuss the FIN6 threat actor reportedly widening its range …

read more

Reducing your attack surface

April 9, 2019

What is an attack surface According to OWASP, an attack surface “describes all of the different points where an attacker could …

read more

ShadowTalk Update – 4.8.19

April 8, 2019

Jamie, Alex and Zuko sit down with Harrison to talk about a story that flew a little under the radar …

read more

Easing into the extortion game

April 3, 2019

One of the main ideas which flowed through Photon’s most recent research report, A Tale of Epic Extortions, was that cyber …

read more

Predator: Modeling the attacker’s mindset

April 2, 2019

Author: Richard Gold  The phrases “attacker’s mindset” or “think like an attacker” are often used in cyber security to encourage …

read more

Making Some Noise in the Channel

April 1, 2019

Digital Shadows Channel REV Partner Program shifts into 5th gear and earns the CRN 5-Star Partner Program Guide Award It’s …

read more

ShadowTalk Update – 4.1.19

March 29, 2019

Christian and Jamie sit down with Harrison to talk about the compromised Asus server used to distribute backdoor malware to …

read more

Cyber Risks and High-frequency Trading: Conversation with an Insider

March 26, 2019

Research from the Carnegie Endowment for International Peace published this week focused the attention on how financial systems around the …

read more

ShadowTalk Update – 3.25.19

March 25, 2019

Harrison chats with Jamie and Alex this week on an attack on Norwegian aluminum and renewable-energy company Norsk Hydro ASA. …

read more

Dark Web Typosquatting: Scammers v. Tor

March 21, 2019

Time and time again, we see how the cybercriminal ecosystem often mirrors what happens in the business world. This can …

read more

How to Secure Your Online Brand

March 20, 2019

What is online brand security? As we outlined in our Practical Guide to Reducing Digital Risk, the integrity of brand …

read more

ShadowTalk Update – 3.18.19

March 18, 2019

Harrison sits down with Rose and Christian for a quick chat about APT40 targeting educational maritime research, as well as …

read more

Detecting Exposed Company Data: The What, Why, and How

March 12, 2019

What is data loss detection? A fundamental responsibility for any IT security professional is to secure their information assets, be …

read more

ShadowTalk Update – 3.11.19

March 11, 2019

This week Jamie and Alex join Harrison to look at Fin6, who has begun regularly targeting card-not-present data on e-commerce …

read more

Purple Teaming with Vectr, Cobalt Strike, and MITRE ATT&CK™

March 6, 2019

Authors: Simon Hall, Isidoros Monogioudis   Here at Digital Shadows we perform regular purple team exercises to continually challenge and …

read more

ShadowTalk Update – 3.04.19

March 4, 2019

This week Rose and Phil join Harrison to discuss a three-stage cryptocurrency mining attack using Mimikatz and Radmin in tandem. …

read more

Don’t Take Our Word for It: See for Yourself Why Forrester Named SearchLight a Leader….For Free!

February 27, 2019

Every day cyber security professionals are bombarded with marketing messages from 3,000+ security vendors. It’s a cacophony of catchy tag …

read more

SamSam But Different: MITRE ATT&CK and the SamSam Group Indictment

February 26, 2019

In our latest research report, A Tale of Epic Extortions, the Digital Shadows Photon Research Team highlight how cybercriminals abuse our …

read more

ShadowTalk Update – 2.25.19

February 25, 2019

This week, Phil and Alex join Harrison to discuss a new malware delivery technique using the Outlook preview panel. Also, …

read more

Extortion Exposed: Sextortion, thedarkoverlord, and SamSam

February 21, 2019

In our most recent research, A Tale of Epic Extortions, the Digital Shadows Photon Research Team approached the topic of …

read more

Six Steps for Security Professionals to make the most out of the RSA Conference

February 20, 2019

This year’s RSA Conference is March 4th-7th in San Francisco. As always, it is a long and exhausting week for …

read more

ShadowTalk Update – 2.18.19

February 19, 2019

Alex and Jamie matched with Harrison in this Valentine’s week episode of ShadowTalk. We discuss why four different APT groups …

read more

Photon Research Team Shines Light On Digital Risks

February 13, 2019

I’m very excited to announce the launch of the Digital Shadows’ Photon Research Team. We have decided to bolster our …

read more

Introducing Our Practical Guide to Reducing Digital Risk

February 12, 2019

Download a copy of A Practical Guide to Reducing Digital Risk   Digital Footprints and Digital Shadows Back when Al …

read more

ShadowTalk Update – 2.11.19

February 8, 2019

Alex and Jamie join Harrison to discuss how the United Arab Emirates (UAE) intelligence services compromised iPhones through the “Karma” …

read more

Understanding Digital Risk Protection

February 8, 2019

There has been a lot of talk recently about Digital Risk and Digital Risk Protection. Forrester published their 2018 New …

read more

CISO Spotlight: Security Goals and Objectives for 2019

February 7, 2019

I recently joined our ShadowTalk podcast to discuss 2019 planning and prioritization. If you listen, you will notice that I’m …

read more

You’ve got a digital strategy, but how are you managing digital risks?

February 7, 2019

Download a free copy of Digital Risk: The C-Suite‘s Critical Missing Part of Overall Risk Most C-level executives I speak …

read more

Joining The Market Leader in Digital Risk Protection

February 6, 2019

Our marketing department asked me to write a blog on why I joined Digital Shadows.  The obvious response would be …

read more

SANS DFIR Cyber Threat Intelligence Summit 2019 – Extracting More Value from Your CTI Program

February 5, 2019

We were fortunate to attend the 2019 SANS DFIR Cyber Threat Intelligence Summit this year, which brings together some of …

read more

ShadowTalk Update – 2.4.19

February 4, 2019

This week, Alex Guirakhoo and Jamie Collier join Harrison to discuss APT39, a new Iran-linked espionage group, as well as …

read more

SingHealth Breach Post-mortem: Key Findings

January 29, 2019

On 10 January 2019, Singaporean authorities finally released a report detailing how the attack against Singapore’s largest group of healthcare …

read more

ShadowTalk Update – 1.28.19

January 26, 2019

This week Rose, Jamie, and Alex talk with Harrison on a huge data dump called “Collection #1”, containing over 770 …

read more
Start Free 7-Day Test Drive of SearchLight
Start Test Drive