7 Key Things a Good RFP Should Cover When Engaging an MDR Provider

We’ve identified seven key considerations to keep in mind when evaluating an MDR provider.

Strategies for Visibility Into Operational Technology (OT)

Do you have visibility into the assets you need to protect? How do you mitigate the increased risks associated with IT/OT convergence and the erosion of air-gapped networks? Do you have a plan for when an incident occurs?

Driving Higher Cybersecurity Awareness & Confidence with a Modern Cybersecurity Defense Center

RHI Magnesita, a global refractory supplier, faced increased risk exposure due to a high-growth strategy and an evolving threat landscape that amplified the potential for operational disruptions, IP theft, compliance issues, and reputation losses.

7 Red Flags to Look for in Your MSSP Relationship

The managed security service provider market is crowded with 5,000+ companies worldwide offering some degree of MSS. That’s good news and bad news for customers. Competition should drive quality of service up across the board. But it also presents a paradox of choice, and many customers find themselves with buyer’s remorse.

A CISO’s Roadmap for IT/OT Convergence

Hyperconnectivity of OT, ICS and SCADA environments has created an overlap between IT and OT environments, exposing formerly segmented systems to much wider attack surfaces. CISOs operating in newly or soon-to-be converged IT/OT environments, therefore, have a new charge — to integrate OT security into their existing security programs.

IT vs. OT Security: 6 Strategies You Can Adapt to Secure OT Environments

The convergence of IT/OT means OT environments are no longer “walled off” from the rest of the organization or even the rest of the world. Exposure to cybersecurity threats in these systems is growing, and a successful attack could be extremely damaging to production, safety, and system availability.

Are you Ready for for the Era of Quantum Computing?

Within the next few years, scalable quantum computing will likely disrupt information processing as we know it. New powerful algorithmic tools will be made possible by large quantum computers, facilitating quantum attacks on the basic cryptographic schemes that underpin all digital infrastructures and systems.

Quantum Computing and Security in a Nutshell

Within the next few years, scalable quantum computing will likely disrupt information processing as we know it. New powerful algorithmic tools will be made possible by large quantum computers, facilitating quantum attacks on the basic cryptographic schemes that underpin all digital infrastructures and systems.

Passwordless Authentication

Information Protection

CurveBall: Microsoft Windows CryptoAPI Spoofing Vulnerability Webcast

Kudelski Security’s Francisco Donoso, Director – Global Security Strategy, provides a brief webcast overview of CurveBall, the Microsoft Windows cryptographic API vulnerability. Today, we’ll be talking about CurveBall, a Microsoft Windows cryptographic API vulnerability. We’ll give you a brief overview of Curveball as the vulnerability is called, talk a little bit about the potential impact and what you can do to remediate and detect.

You Suck at Office 365 Logging

One of the misconceptions about cloud services is that you have to surrender all control when you sign-up. While it is true that you may no longer have racks of servers with blinking lights humming away in your data center, it doesn’t mean that you no longer have any visibility into how your users use and interact with the service.

Microsoft Advisory: Microsoft Server Message Block 3 (SMBv3) Vulnerability

On March 10th, a critical Remote Code Execution (RCE) vulnerability in the Microsoft Server Message Block (SMBv3) protocol was inadvertently disclosed. The vulnerability, known as CVE-2020-0796, is caused by how newer Windows operating systems handle certain requests, specifically compressed SMBv3 packets. Microsoft intended to release a patch for this vulnerability as part of March’s “Patch Tuesday”, however, the patch appears to have been pulled at the last minute. This led to the inadvertent disclosure of the issue before a patch is available.

CVE-2020-0601: The ChainofFools/CurveBall Attack Explained with PoC

On Tuesday the 14th of January 2020, in the frame of their first Patch Tuesday of 2020, Microsoft addressed a critical flaw discovered by the NSA in the Windows 10, Windows Server 2016 and 2019 versions of crypt32.dll, the library implementing Windows’ CryptoAPI. It didn’t take too long until it got branded “ChainOfFools” by Kenn White in a blog post. (And was then later rebranded “CurveBall” by Tal Be’ery.)

Advisory Services: Strategic Cyber Staffing

Fill resource gaps from our extensive network of cyber talent, and avoid the recruitment delays that can leave you exposed to greater risk.

Advisory Services: CISO Executive Leadership

Sharpen your leadership skills through an innovative program inspired by the regimen of professional athletes, to join the ranks of top-performing CISOs.

Advisory Services

Our advisors help CISOs achieve agile, comprehensive cybersecurity that is aligned to business priorities and enables them to secure board-level commitment for their investments.

2019 Cybersecurity Trends to Watch: CISOs, the Skills Gap, and State Sponsored Attacks

2018 was a year of ups and downs in the cybersecurity world. On one hand, we saw some of the biggest data breaches ever recorded, including almost a billion records leaked in September alone.

Finding Top Security Talent: If You Build It, They Will Come

I recently attended a meeting of likeminded Chief Information Security Officers who were discussing the challenges of their role. Conversation bounced between the need for better reporting metrics to the lack of value in threat intelligence, but one topic seemed to come up continuously – the difficulty in finding qualified security talent.

Technology Services: Technology Assessment

Comprehensive review of current defenses to identify and plug security holes and improve overall performance. As organizations develop and technologies advance, security infrastructures must also evolve. In the process, redundancies, inefficiencies and gaps in protection can emerge, creating vulnerabilities.

Advisory Services: Compromise Assessment

Modern business environments produce data sprawl among diverse corporate infrastructures that can be difficult to properly monitor and analyze. Active threats may go undetected for months, creating a gap between compromise, detection, and response that opens the door for data theft.

Security and Risk Assessment – Techtrace

TechTrace develops web and mobile platforms to help consumers and customs administrations around the world fight against counterfeiting and illicit trade. As the developer of the only global, real-time anti-counterfeiting product verification and on-line authentication platform for law enforcement and rights holders, protecting their sensitive information is paramount.

Food & Beverage Industry Incident Response

Kudelski Security provides effective incident response for global food and beverage enterprise.

Introducing Kudelski Security's Cyber Fusion Center - a new breed of Managed Security Service

Our new Cyber Fusion Center (CFC) operates 24x7x365, powering our Managed Security Services (MSS), delivering what organizations need most: an ability to reduce the time it takes to detect threats. The average detection time for most threats is 146 days – our MSS can reduce it to just a few days, or even a few hours in many cases.

Webcast: The Evolution of Ransomware

In the first half of 2020 more cyberattacks happened than in all of 2019. Download the webcast to learn about how you can detect and prevent ransomware quickly and efficiently.

Dauergefahr Ransomware: Wie Sich Unternehmen Gegen Neue Trends Und Methoden Schützen Können

Read the report to understand the evolution of ransomware attacks and their impact in order to effectively protect your company against such attacks.

7 Key Things a Good RFP Should Cover When Engaging an MDR Provider

We’ve identified seven key considerations to keep in mind when evaluating an MDR provider.

MDR Services Solution Overview

Our Managed Detection and Response (MDR) services address the multiple environments of a modern workplace: on-premise IT infrastructure, distributed endpoints, cloud, and OT/ICS environments. We focus on outcomes, not on managing security technologies. We deliver deep visibility and coverage to rapidly surface critical threats and provide your security team hands-on support to contain or remediate incidents.

Cyber Resilience – A Primer Part 1: Defining Your Security Program’s Mission Statement

What is the number one thing your security team can do for your organization? Take a minute. It’s hard to pick just one amidst the never-ending salvo of competing objectives that security teams are mandated to meet. Day-to-day tasks, project management, ad-hoc assignments, side projects, departmental red tape, people who flat out ignore the security group – they all have the potential to derail the fundamental “raison d’être” of your security team.

Cyber Resilience – A Primer Part 2: Your IR Team Will Fail to Identify Threats and It’s Going to Be Your Fault

Your Incident Monitoring team will fail to detect active threats to your business. Not because they are unskilled, lack specific tools, have limited visibility, or are resource constrained. They will fall short first because you failed to provide them with the focus they need to identify relevant cyber threats.

Visibility is Key to Security Monitoring for IT, OT, and Cloud

With the rapid pace and complexity of business transformation coupled with ever-increasing threat sophistication targeting hybrid environments, IT & Security teams are looking for trusted security partners who can help increase visibility, reduce complexity, and address critical talent shortages.

24/7 Incident Response

With cyberattacks increasing in frequency and complexity, organizations must be prepared for any type of attack or damage to business and reputation. Having a clear plan of action for when a breach occurs is paramount to reduce the impact and return to business as quickly as possible.

Advisory Services: Incident Response and Cyber Resilience

As threats become more sophisticated and pervasive, organizations must improve their resilience through better preparation. They need to be sure they can remediate as swiftly as possible – containing the attack, mitigating attacker access – and getting back to business as soon as possible.

Food & Beverage Industry Incident Response

Kudelski Security provides effective incident response for global food and beverage enterprise.

Advisory Services: Incident Response and Cyber Resilience

As threats become more sophisticated and pervasive, organizations must improve their resilience through better preparation. They need to be sure they can remediate as swiftly as possible – containing the attack, mitigating attacker access – and getting back to business as soon as possible.

Advisory Services: Cyber Resilience Program Development

No matter the size or industry, no organization is immune to attack. Yet many organizations lack a clearly defined plan to contain and mitigate a security incident when it does occur. The first time you test your incident response capabilities should not be during a live event. P

24/7 Incident Response

With cyberattacks increasing in frequency and complexity, organizations must be prepared for any type of attack or damage to business and reputation. Having a clear plan of action for when a breach occurs is paramount to reduce the impact and return to business as quickly as possible.

Cyber Resilience – A Primer Part 1: Defining Your Security Program’s Mission Statement

What is the number one thing your security team can do for your organization? Take a minute. It’s hard to pick just one amidst the never-ending salvo of competing objectives that security teams are mandated to meet.

Cyber Resilience – A Primer Part 2: Your IR Team Will Fail to Identify Threats and It’s Going to Be Your Fault

Your Incident Monitoring team will fail to detect active threats to your business. Not because they are unskilled, lack specific tools, have limited visibility, or are resource constrained. They will fall short first because you failed to provide them with the focus they need to identify relevant cyber threats.

IoT Security Reference Architecture Video

Security is almost always an afterthought in the creation of IoT devices and systems. While debates over lines of responsibility for IoT security continues apace, enterprises are exposing themselves to the risk of cyber attacks on a daily basis. Kudelski Security's latest Reference Architecture is a practical guide to help CISOs and other security leaders better secure IoT in their enterprise environment.

Kudelski Security Global Cybersecurity Solutions Brochure

Kudelski Security is an innovative and independent provider of cybersecurity solutions, with offices in Switzerland and across the United States. Our mission is to help large enterprise and public-sector clients build, deploy and manage effective security programs aligned to their business objectives.

IoT Security Reference Architecture

The Internet of Things is integral to the smooth running of enterprises and key to business growth. Security is almost always an afterthought in the creation of IoT devices and systems. While debate over lines of responsibility for IoT security continues apace, enterprises are exposing themselves to the risk of cyber attacks on a daily basis.

Food & Beverage Industry Incident Response

Kudelski Security provides effective incident response for global food and beverage enterprise.

Advisory Services: Incident Response and Cyber Resilience

Implement programs to build resilience against cyber attacks and receive emergency support in detecting, containing, and mitigating attacks.

Advisory Services: Cyber Resilience Program Development

24/7 Incident Response

Augment your incident response capabilities with Kudelski Security’s advanced, 24/7, local emergency support teams.