Attack Surface Management: How 2022 Will Be the Year of ASM
February 22, 2022
Having a clear view of which assets are exposed and the risk they pose has long been recognized as foundational to an effective security program
Having a clear view of which assets are exposed and the risk they pose has long been recognized as foundational to an effective security program
We learned a lot in 2021. Headline-making breaches like Log4j, Colonial Pipeline, JBS Meatpacking and Kaseya each taught us something about what our security systems can
Leaders in cyber defense recognize the importance of red team activities to continually improve the effectiveness of their security programs. Building a red team that
In a recent blog, the Federal Trade Commission (FTC) sent a shot across the bow of financial services firms. In it, they warned firms that
2021 was a bummer for the cybersecurity community. We witnessed multiple large-scale cyber attacks, each of which did a number on the industry’s collective psyche.
Our community has been plagued with quite a few breaches last year: Kaysea, JBS Meatpacking, Colonial Pipeline, Park Mobile and most recently, Log4j. These have
This is an evolving situation. If you need to understand your exposure, please reach out in the chat below or click here to see if
Last Update: 4:13pm EST, Dec. 14, 2021 (List of updates at bottom) What is Log4Shell? Log4Shell is a high severity vulnerability (CVE-2021-44228, CVSSv3 10.0) impacting
Cybersecurity strategy can learn from baseball and stack defensive resources where they matter most If you’ve flipped on a Tampa Bay Rays baseball game over
Overview: CVE-2021-3064 On November 10, 2021 Palo Alto Networks (PAN) provided an update that patched CVE-2021-3064 which was discovered and disclosed by Randori. This vulnerability
At Randori, we believe experience is the best defense — and we’re not alone. Successful security programs have long assumed compromise and invested heavily in
Anatomy of a Breach RDP (Remote Desktop Protocol) is a Microsoft protocol that allows users to remotely access remote computers. A great deal of enterprise
