The global shortage of cybersecurity professionals has now surpassed 4 million according to ISC 2 , yet the volume and velocity of increasingly sophisticated threats security teams face is on the rise. To fill the gap, organizations need to make better use of security professionals they have — enabling them…

In our continuing program this month to celebrate women in cybersecurity, I wanted to tell you about an amazing group of women who have put a new twist on threat hunting. If you follow ThreatQuotient then you know the rhino is our mascot. You probably also know that we love…

Sunday, March 8 is International Women’s Day , and in the U.S. the entire month of March is Women’s History Month. So, ThreatQuotient is taking the opportunity to celebrate women in cybersecurity. Women have long played important roles in cybersecurity. In fact, Liza Mundy, author of Code Girls , credits…

When I speak to security professionals about vulnerability management, I find that there is still a lot of confusion in the market. Most people immediately think I’m referring to getting rid of the vulnerabilities in the hardware and software within their network, but vulnerability management encompasses a much broader scope. …

Unintended consequences — the unforeseen outcomes of actions we take — are all around us. It may be an unforeseen benefit, but, more frequently, it’s an unexpected drawback that can create a new problem or make a situation worse. In the security industry, Security Operations Center (SOC) and Incident Response…

As the 2020 budget meetings come and go — teams are forced to assess their current defenses by analyzing their historical attacks in order to anticipate/predict future attack trends. A difficult but worthwhile exercise for security leadership as they attempt to assess the adversaries’ trajectory and work to remain several…

In Part 2 of this series we talked about common methodologies for threat hunting. Now, let’s look at organizations are executing threat hunting — specifically the investments they’re making and the tools and data they find most useful. The eternal question when making technology investment decisions is whether to invest…

In Part 1 of this series , I shared the state of threat hunting as measured by SANS in their 2019 survey of threat hunters and security managers from various organizations around the globe. …

SANS recently published their 2019 Threat Hunting Survey in which they explore the differing needs of new and experienced threat hunters. In this three-part blog series, I provide an overview of some of the key findings from the data gathered from the 575 respondents who represent organizations of all sizes…