Positive security outcomes don’t happen by chance — they result from a culture in which security is ingrained and embodied within and by everyone, from
In my experience as an FBI agent and security leader, I’ve found that technology alone does not keep us safe. The human element, including our
The identity attack surface is expanding faster than ever. Every new cloud application, remote login, and digital touchpoint creates another entryway threat actors can exploit,
Looking back at the early 2024 data breach at Change Healthcare — a provider of revenue and payment cycle management that connects payers, providers, and
While it’s easy to look at the modern threat landscape as a cat-and-mouse game between sophisticated threat actors utilizing high-tech methods to hack their way
When it comes to cybercrime, there are few threat actor tactics as useful and widespread as credential theft, and the subsequent use of stolen credentials,
The management of user access to an organization’s assets, applications, and systems is never static. Users are coming and going, different roles require different access,
The ways in which people work are changing, and so are the approaches needed to secure modern work. As organizations race to gain the benefits
Defending against breaches isn’t just about preventing ransomware. One increasingly dangerous type of threat facing organizations of all sizes is identity-based threats. There are many
Since its introduction into cybersecurity in the late 1980s as a tool for detecting unusual activity, artificial intelligence (AI) has grown in popularity and functionality,
The business world has an identity security problem. Identity telemetry dominated Arctic Wolf’s list of the top 10 security investigation types over the past 12
In the spring of 2024, the FBI warned U.S citizens of a spear phishing campaign by state-sponsored North Korean threat actors. By exploiting an improperly
A threat actor sends an email to a user at an organization claiming to be from the IT department. They need a password to a
One of the most challenging elements of securing an organization from cyber threats is ensuring that their employees aren’t placing themselves or their colleagues at
An employee at a large organization is doing research for a client and clicks on what they believe is a legitimate website. What they don’t
One of the more common forms of fileless malware that’s making the rounds across organizations cloud environments, is something called PyLoose. In rotation since 2014,
In the summer of 2022, a few Twilio employees received an odd text message. Appearing to be from the internal IT department, these messages suggested
As organizations continue to turn to digital operations and passwords proliferate across systems, applications, and even assets, identity and access management (IAM) has become a
In April of 2024, the FBI released a warning that threat actors are sending SMS phishing, also known as smishing, messages to individuals pretending to
Use this analysis of how IT and security leaders’ attitudes and behaviors compare to those of end users to reveal gaps and help strengthen the
Two giants in the gaming and hospitality industry, Caesars Entertainment and MGM Resorts, recently announced that they were targeted by cybercriminals. But here’s the catch,
Key Takeaways Based on data from Q1 2023, manufacturing is the most heavily targeted industry for Business Email Compromise (BEC) Monday, Tuesday, and Wednesday are
There’s a sentiment that has, unfortunately, taken hold in the field of cybersecurity: Users are the weakest part of your environment. You can see why
When it comes to analyzing your attack surface, you’re probably assessing vulnerabilities, monitoring your firewall, tracking email security, and managing your identity and access management.
As organizations across the globe grapple with the growing issue of cyber attacks — 2023 cybercrime costs are expected to hit $8 trillion — organizations
Phishing emails are a tremendous threat and one of the most common vehicles cyber criminals use to trick employees and succeed in their attacks. Cybercriminals
A lengthy, stressful test is what comes to mind when most people hear the acronym “SAT.” But the other “SAT” — a security awareness training,
The “Great Resignation” is still well underway, further impacting a cybersecurity industry with a historically low retention rate. According to a report published by Enterprise
At this year’s Cybersecurity Awareness Month Summit, we explore social engineering attacks that exploit the hazards of human risk and equip you with the knowledge,
This webinar brings together industry leaders from AWS and Arctic Wolf to provide essential insights and strategies to strengthen both your cloud security and your
