Cloudy with a Chance of Cyberattack: Understanding LOTC Attacks and How ZTNA Can Prevent Them

July 8, 2024 at 08:01AM Cybercriminals have evolved from traditional Living Off The Land (LOTL) attacks to Living Off the Cloud (LOTC) tactics, exploiting trusted cloud services’ APIs to remotely control botnets and conceal malicious activity. To mitigate these risks, organizations should adopt a zero-trust approach, control access to cloud services, implement granular activity control, … Read more

How CISOs Can Make Cybersecurity a Long-Term Priority for Boards

April 4, 2024 at 10:20AM CISOs must go beyond checklist approach for cybersecurity. It’s crucial to gain board support, improve communication, and provide awareness training to combat social engineering. This proactive approach fosters companywide engagement in protecting against digital threats. Based on the meeting notes, the key action points are: 1. CISOs need to secure … Read more

Mimecast Acquires User Education Startup Elevate Security 

January 4, 2024 at 01:06PM Mimecast has acquired Elevate Security, a startup specializing in user-education technology. The acquisition aims to enhance Mimecast’s Awareness Training product line with Elevate Security’s risk scoring algorithm and incident triage technology. Financial details were not disclosed. Mimecast plans to support Elevate Security’s existing customer base. Elevate Security, founded six years … Read more