WHOIS is a powerful tool that allows security researchers to connect domains to threat actors. However, WHOIS data, as it is currently presented, is in violation of GDPR regulations. Is it time to let WHOIS die?
At this year’s RSA Conference, Dark Reading sat down with Allan Liska, senior security architect at Recorded Future, to discuss how information security teams are operationalizing threat intelligence.
How should an analyst move forward if their initial research turns up blank? This post looks at why a better approach to analysis comes from trying to correctly understand the data that actually is available.
Vulnerability scanners are a valuable tool, but don’t provide the information necessary to prioritize remediation work. Threat intelligence takes the guesswork out of vulnerability management.
Joe Weiss, managing partner of Applied Control Solutions, discusses the critical shortcomings in securing critical infrastructure, including the electrical grid, manufacturing, railways, and water supplies.
While RiG remains the dominant exploit kit, it is far less prevalent than a year ago, and the attackers using it are struggling to find an effective revenue model with the continued decline of ransomware.
Not all dark web data is the same. We turned to social network analysis of authors and found three distinct communities: low-tier underground forums, higher-tier dark web forums, and dark web markets.
Threat intelligence provides CISOs with a comprehensive picture of the latest threats, security events, and industry trends. When combined with internal data, it highlights areas for improvement.