Page 5 - White Papers in Governance

Cerber Reigns as King of Ransomware; Where did Locky Go?

In 2016, there were two contenders for king of ransomware: Locky and Cerber. So far in 2017, we've seen a massive shift in the battle between these two families, with Locky basically dropping out entirely and Cerber expanding its market share by a significant amount. New families such as Spora are emerging as well,...

What You Should Expect From Malware in 2017

Ransomware grabbed headlines in 2016, becoming the favorite attack used against businesses. However, ad fraud malware and botnets infecting Internet of Things (IoT) devices to launch massive DDoS attacks also became serious threats. So what should you expect from malware in 2017? Download the 2017 State of Malware...

The Future of AI and Machine Learning; A New Beginning for Endpoint Security Testing

Cyberattacks are evolving at a much faster pace than the traditional security solutions can adapt to...so we must run to catch up. Machine learning and artificial intelligence (AI) assist a behavioral model of threat detection in an industry-leading alternative to traditional methods of endpoint security test suites....

Security Intelligence and Analytics in the Public Sector

Cyber threats are constantly evolving, and federal government agencies must operate under the assumption that a motivated adversary can and will infiltrate their network environments. A security intelligence and analytics platform can simplify an agency's approach to cybersecurity by unifying and analyzing disjointed...

Managing Business Email Compromise and Impostor Threats to Keep Your Organization Protected

Since 2015, more than 22,000 organizations have fallen victim to business email compromise (BEC) attacks. The FBI estimates that organizations have lost an estimated USD $3.08 billion to these attacks. Download this guide to protect your organization by learning: How BEC works and why it succeeds: the targets and...

10 Impossible Things You Can Do with Metadata

Historically, the only way organizations could come close to capturing high-fidelity data about what's happening on their network was to invest in a packet capture system. That's so yesterday. Full packet capture systems were never designed to facilitate the detection or investigation of advanced threat actors....

The First 72-Hours: How to Approach the Initial Hours of a Security Incident

In this white paper, Fidelis Cybersecurity will outline key steps to take in the first 72 hours of detecting an alert, how to distinguish what type of incident you are facing and the key differences on how to respond. Based on our firsthand experience, we provide lessons learned from the front lines to explain why it...

A New Approach to Endpoint Security Software Testing

Security product testers have architectured their test suites to adhere to the technologies of the past 10 years. However, as endpoint security and the threat landscape continue to evolve, so must testing suites evolve as well. Advanced methodologies and a more robust testing criteria are essential to keep...

The Top Four Firewall Security Gaps to Fix and Secure Your Organization

Firewall complexity is leaving companies exposed. The technology to keep company networks safe exists, but it isn't being managed properly. Firewall technology has come a long way since its initial, most rudimentary forms. Next-Generation Firewalls (NGFW) are the latest development, and organizations are accelerating...

Data-driven Security Meets the 21st Century

As cyber threats become more complex in nature and the attack surface grows, enterprises are shifting to a risk-centric threat identification, containment, and remediation security strategy, prioritizing investments in tools and capabilities to detect threats and respond to incidents faster and more...

From C&A to A&A: The RMF Shoe Has Dropped

Certification and accreditation (C&A) has been like alphabet soup. As it transitions to assessment and authorization (A&A), it's time to sort through the confusion and identify which terms and processes apply in any given situation. This paper sorts through the confusion to identify which terms, approaches, and...

The Vendor Risk Management Solution Guide

As enterprises continue to outsource more aspects of their operations to third parties, they expose themselves to more shared risk. It can be a staggering responsibility. Most organizations understand the need to automate vendor risk management activities to keep up with increasing scope and scrutiny. Yet they...

Making the Case for Continuous Authentication: Why 2FA is Not Secure Enough to Combat Online Fraud

Most organizations that enable users to perform online transactions have implemented security measures to address fraud. Currently, one of the most common safeguards used in a wide array of products/services is two-factor authentication (2FA). In recent years, 2FA has become employed by global tech leaders like...

Oh, RATs! Current Fraud Detection Doesn't Catch Remote Access Trojans

Many IT professionals use remote administration tools to troubleshoot and fix PC problems remotely, just as if they were sitting behind the keyboard themselves. But these tools are also used for different purposes today. Both nation states and hacktivists use modified these tools, creating Remote Access Trojan's...

The DIY Guide to PCI: Implementing PCI Compliance in the Cloud

Looking to go at it alone when securing your public cloud environment? Without a clear understanding of its nuances, even the most state-of-the-art solution won't make it past an annual compliance audit. This detailed guide is for those pursuing PCI DSS compliance on their DIY cloud security environment. Download...