Tag: resilience

5 ways to strengthen identity security and improve attack resilience

Apr 7, 2026 9:54 PM

Tags: access, ai, api, attack, authentication, automation, cloud, control, corporate, credentials, data, detection, endpoint, identity, infrastructure, least-privilege, login, mfa, microsoft, monitoring, msp, network, password, phishing, ransomware, resilience, risk, service, soc, tactics, threat, unauthorized, update, vulnerability, zero-trust

Admin accountsMSP technician accountsCloud infrastructure accountsExternal-facing applicationsRemote access toolsAny MFA deployment is better than none, but phishing-resistant methods offer the strongest protection. Once privileged accounts are enforced, expand MFA to all users over the next 30 days. Doing so reduces the likelihood that compromised credentials lead directly to unauthorized access. 2. Implement privileged access management…
5 ways to strengthen identity security and improve attack resilience

Apr 7, 2026 9:54 PM

Tags: access, ai, api, attack, authentication, automation, cloud, control, corporate, credentials, data, detection, endpoint, identity, infrastructure, least-privilege, login, mfa, microsoft, monitoring, msp, network, password, phishing, ransomware, resilience, risk, service, soc, tactics, threat, unauthorized, update, vulnerability, zero-trust

Admin accountsMSP technician accountsCloud infrastructure accountsExternal-facing applicationsRemote access toolsAny MFA deployment is better than none, but phishing-resistant methods offer the strongest protection. Once privileged accounts are enforced, expand MFA to all users over the next 30 days. Doing so reduces the likelihood that compromised credentials lead directly to unauthorized access. 2. Implement privileged access management…
5 practical steps to strengthen attack resilience with attack surface management

Apr 7, 2026 9:54 PM

Tags: access, api, attack, authentication, automation, backup, breach, business, cloud, container, control, credentials, cvss, cyber, cybersecurity, data, data-breach, detection, dns, email, endpoint, exploit, framework, government, identity, iot, malicious, monitoring, msp, network, nist, phishing, ransomware, resilience, risk, service, social-engineering, software, threat, tool, update, vpn, vulnerability, vulnerability-management, windows

What can attackers actually reach right now? By continuously identifying and prioritizing exposure across your environment, ASM transforms raw visibility into measurable cyber resilience.Below are five practical steps security teams can take to strengthen attack resilience using attack surface management principles. Effective attack surface management starts with complete visibility. Security gaps often appear because teams…
5 practical steps to strengthen attack resilience with attack surface management

Apr 7, 2026 9:54 PM

Tags: access, api, attack, authentication, automation, backup, breach, business, cloud, container, control, credentials, cvss, cyber, cybersecurity, data, data-breach, detection, dns, email, endpoint, exploit, framework, government, identity, iot, malicious, monitoring, msp, network, nist, phishing, ransomware, resilience, risk, service, social-engineering, software, threat, tool, update, vpn, vulnerability, vulnerability-management, windows

What can attackers actually reach right now? By continuously identifying and prioritizing exposure across your environment, ASM transforms raw visibility into measurable cyber resilience.Below are five practical steps security teams can take to strengthen attack resilience using attack surface management principles. Effective attack surface management starts with complete visibility. Security gaps often appear because teams…
5 practical steps to strengthen attack resilience with attack surface management

Apr 7, 2026 9:54 PM

Tags: access, api, attack, authentication, automation, backup, breach, business, cloud, container, control, credentials, cvss, cyber, cybersecurity, data, data-breach, detection, dns, email, endpoint, exploit, framework, government, identity, iot, malicious, monitoring, msp, network, nist, phishing, ransomware, resilience, risk, service, social-engineering, software, threat, tool, update, vpn, vulnerability, vulnerability-management, windows

What can attackers actually reach right now? By continuously identifying and prioritizing exposure across your environment, ASM transforms raw visibility into measurable cyber resilience.Below are five practical steps security teams can take to strengthen attack resilience using attack surface management principles. Effective attack surface management starts with complete visibility. Security gaps often appear because teams…
Authentication is broken: Here’s how security leaders can actually fix it

Apr 6, 2026 12:51 PM

Tags: access, attack, authentication, backup, business, communications, control, credentials, cryptography, data, exploit, fido, firmware, Hardware, healthcare, identity, login, mfa, microsoft, okta, passkey, privacy, resilience, risk, soc, technology, update, windows

Sector snapshots: Where it breaks (and why that matters): Healthcare. Clinicians need tap and go speed with zero tolerance for downtime. One large hospital attempted to pair advanced HID SEOS credentials, which use privacy-preserving randomized IDs, with a clinical SSO platform that expects static IDs for user recognition. This architectural mismatch forced a choice between…
7 ways to improve your business resilience with backup and recovery

Apr 3, 2026 10:52 PM

Tags: attack, automation, backup, business, cloud, compliance, control, cyber, data, dns, HIPAA, identity, malware, metric, network, PCI, ransomware, resilience, risk, service, soc, threat, vulnerability

2. Ensure off-site backup copies : Local backups are fast, but they are also vulnerable to the same physical disasters and ransomware attacks that hit your primary servers. If your production environment and your backups are on the same network segment without air-gapping, a single compromise becomes a total extinction event. The Fix: Adopt a 3-2-1 strategy (3 total copies of data, 2 different media…
5 Steps to break free from alert fatigue and build resilient security operations

Apr 3, 2026 10:52 PM

Tags: ai, attack, automation, backup, business, ceo, cloud, control, defense, detection, edr, endpoint, identity, metric, network, password, ransomware, resilience, soc, strategy, threat, tool

2. Prioritize outcomes over ticket volume : Stop focusing on how many alerts are cleared. This may be a metric for a better understanding of where automation or headcount are necessary but prioritize outcomes. Instead, the right questions are: How quickly did you contain a threat? Did we disrupt business operations or keep recovery swift and effective? A practical, outcome-driven SOC measures: Dwell time: How long before a threat was neutralized? Mean Time to Contain: How quickly…
5 essential steps to bulletproof your endpoint security (and avoid the biggest mistakes)

Apr 3, 2026 10:52 PM

Tags: ai, antivirus, attack, automation, backup, business, control, data, defense, detection, edr, endpoint, exploit, identity, linux, macOS, malware, metric, monitoring, ransomware, resilience, risk, soc, strategy, threat, tool, unauthorized, update, vulnerability, windows, zero-day

Inventory all devices continuously. Go beyond manual tracking. Automated discovery tools can identify each device, from remote laptops to IoT assets, as soon as they join your network. Mitigate shadow IT risk. Unmanaged devices are a favorite entry point for attackers. Every asset must be accounted for and brought under management. No exceptions. Learn more about automating discovery and reducing blind spots in your endpoint management strategy…
5 essential steps to bulletproof your endpoint security (and avoid the biggest mistakes)

Apr 3, 2026 10:52 PM

Tags: ai, antivirus, attack, automation, backup, business, control, data, defense, detection, edr, endpoint, exploit, identity, linux, macOS, malware, metric, monitoring, ransomware, resilience, risk, soc, strategy, threat, tool, unauthorized, update, vulnerability, windows, zero-day

Inventory all devices continuously. Go beyond manual tracking. Automated discovery tools can identify each device, from remote laptops to IoT assets, as soon as they join your network. Mitigate shadow IT risk. Unmanaged devices are a favorite entry point for attackers. Every asset must be accounted for and brought under management. No exceptions. Learn more about automating discovery and reducing blind spots in your endpoint management strategy…
6 critical mistakes that undermine cyber resilience (and how to fix them)

Apr 3, 2026 10:52 PM

Tags: attack, automation, backup, best-practice, business, compliance, cyber, cybersecurity, data, detection, edr, endpoint, guide, identity, intelligence, malware, metric, network, ransomware, resilience, risk, soc, strategy, threat, tool, update, vulnerability

Guide to Managing Strong Personalities During a Cybercrisis. Mistake 2: Fragmented asset and risk views: Fragmented asset and risk views make it difficult for teams to understand what is actually in their environment and where the most pressing exposures reside. When devices, configurations, and identity data live in separate tools or are maintained inconsistently, gaps…
6 metrics IT leaders can’t afford to ignore for business resilience

Apr 3, 2026 10:52 PM

Tags: access, attack, automation, awareness, backup, business, cloud, compliance, credentials, cyber, cybersecurity, data, detection, endpoint, identity, incident response, metric, monitoring, network, resilience, risk, soar, soc, theft, threat, tool, update, vulnerability

2. Mean time to respond (MTTR): From triage to containment : It’s not enough to spot threats”, you have to contain them fast. MTTR tracks how quickly your team can isolate and neutralize incidents. Integrated SOAR (Security Orchestration, Automation, and Response) workflows now drive a 500% year-over-year increase in orchestrated alert response actions, according to our latest SOC report. The difference? Teams leveraging automation have moved from after-the-fact…
5 critical steps to achieve business resilience in cybersecurity

Apr 3, 2026 10:52 PM

Tags: access, ai, attack, authentication, automation, backup, breach, business, communications, control, credentials, cybersecurity, data, defense, detection, endpoint, identity, malicious, mfa, msp, password, ransomware, resilience, soc, threat, tool, update

Looking for end-to-end coverage of your environment? Check out N-able Unified Security Solutions. 2. Transition from manual to automated response : SOC teams can’t keep up with the flood of alerts”, N-able handled 2 alerts per minute on average in 2025. That’s why automation and Security Orchestration, Automation and Response (SOAR) saw a 500% YoY surge”, almost one in four responses are now…
Neue Anforderungen an digitale Resilienz – Geopolitische Risiken und der Druck auf Backup-Strategien

Apr 3, 2026 12:52 PM

Tags: backup, resilience, risk

First seen on security-insider.de Jump to article: www.security-insider.de/geopolitische-risiken-und-der-druck-auf-backup-strategien-a-3607fdbab5f6d3592bd942807541530e/
When Your Own Eyes Turn Against You: How Compromised Security Cameras and IoT/OT Devices Become Tools for Your Attackers

Apr 3, 2026 1:51 AM

Tags: access, advisory, attack, botnet, cctv, china, cloud, control, corporate, credentials, cyber, cyberattack, cybersecurity, dark-web, data, data-breach, defense, detection, endpoint, espionage, exploit, finance, firmware, flaw, government, group, hacking, healthcare, infrastructure, intelligence, international, Internet, iot, iran, law, linux, malware, network, office, privacy, ransomware, resilience, risk, russia, service, supply-chain, technology, threat, tool, ukraine, unauthorized, update, vpn, vulnerability, warfare, windows, zero-day, zero-trust

TL;DR Security cameras, IoT, and OT devices that are meant to protect us, are easily compromised and turned against defenders, enabling nation-state reconnaissance (Iranian hacks on Hikvision/Dahua cameras during strikes, Russian webcam abuse in Ukraine), espionage via exposed live feeds, ransomware pivots (Akira group bypassing EDR), massive botnets (Mirai/Eleven11bot), and physical disruption. Structural weaknesses like…
OT Cyber Resilience: Strategic Data Protection for IEC 62443 and NIS2 Compliance

Apr 2, 2026 2:51 PM

Tags: backup, compliance, cyber, data, infrastructure, nis-2, ransomware, resilience, strategy

Learn how to protect OT systems, ICS, and SCADA infrastructure from ransomware with backup strategies built for legacy, air-gapped industrial environments. First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/04/ot-cyber-resilience-strategic-data-protection-for-iec-62443-and-nis2-compliance/
Cyberkriminelle haben bis zu 76 Tage im Jahr freien Zugang zu Unternehmens-PCs in aller Welt

Apr 2, 2026 1:52 PM

Tags: ai, cyberattack, resilience, risk, windows

Betriebssystem-Patches auf PCs mit Windows 10/11 kommen durchschnittlich 127 Tage zu spät. Cybervorfälle und KI-gestützte Angriffe verursachen jährlich Verluste in Höhe von 400 Milliarden US-Dollar durch Ausfallzeiten. Nicht mehr die Sicherheitsverletzung selbst ist die schwerwiegendste Folge eines Cybervorfalls, sondern die daraus resultierenden Betriebsstörungen. Das ist die Quintessenz des Resilience Risk Index 2026, den Absolute… First…
World Backup Day 2026: Cyber-Resilienz beginnt mit Backup – Ein Rahmenwerk für messbare Wiederherstellung

Mar 31, 2026 12:29 PM

Tags: backup, cyber, resilience

First seen on security-insider.de Jump to article: www.security-insider.de/ein-rahmenwerk-fuer-messbare-wiederherstellung-a-c883be3dbb156405cae9b6761049d3ff/
The external pressures redefining cybersecurity risk

Mar 31, 2026 12:29 PM

Tags: access, ai, attack, breach, business, ciso, control, cyber, cyberattack, cybersecurity, data, deep-fake, defense, email, governance, guide, incident response, injection, network, nist, resilience, risk, risk-management, supply-chain, technology, threat, tool

AI is accelerating both the attackers and your defenses, but governance is often missing : What I see generative AI doing in cybersecurity is accelerating what attackers can do and lowering the cost of entry for new criminal gangs. Cyberattacks are more potent because the technology makes it easier to target victims, create deepfake videos or…
National Cyber Resilience Demands Unified Defense

Mar 31, 2026 9:31 AM

Tags: ai, ceo, cyber, cybersecurity, defense, ransomware, resilience, risk, supply-chain, threat

UK NCSC’s Richard Horne on Strengthening Cyber Defense and Incident Response. Cyber risk is rising as digital dependence grows and threat actors expand. NCSC CEO Richard Horne outlines why leaders must treat cybersecurity as mission-critical, strengthen their resilience, and align defense efforts to counter ransomware, AI-driven threats, and supply chain attacks. First seen on govinfosecurity.com…
World Backup Day: Vertrauen ist gut, Kontrolle ist besser

Mar 31, 2026 7:32 AM

Tags: backup, resilience

Jetzt ist der geeignete Zeitpunkt die Zuverlässigkeit, Resilienz, Datensouveränität und Kosteneffizienz von Backup-Systemen zu prüfen eine moderne On-Premises-Lösung kann in vielen Aspekten punkten. Am 31. März ist World Backup Day, ein Tag, der Unternehmen daran erinnern soll, ihre Daten zu sichern. In den meisten Fällen existieren Backups aller kritischer Geschäftsdaten. Die Daten werden regelmäßig… First…
Von formaler Compliance zu echter Cybersicherheit im Finanzsektor

Mar 31, 2026 6:30 AM

Tags: compliance, cyberattack, cyersecurity, dora, resilience, risk

Warum DORA auch eine Architekturfrage ist und was das für Banken und Versicherungen bedeutet. Die Anforderungen an die digitale Widerstandsfähigkeit von Banken und Versicherungen steigen. Mit dem Digital Operational Resilience Act (DORA) hat die Europäische Union einen verbindlichen Rahmen geschaffen, um IT-Risiken, Cyberangriffe und Abhängigkeiten von Drittdienstleistern zu adressieren. Doch regulatorische Konformität schafft… First…
Rubrik bringt neue Innovationen für MSP-gesteuerte Cyber-Resilienz

Mar 30, 2026 7:30 PM

Tags: cyber, msp, resilience

MSP: Geringe Einstiegsstufen, Pay-Go-Modelle und die ‘Rubrik Verified™”-Zertifizierung stärken skalierbare, unternehmensgerechte Cyber-Resilienz. First seen on infopoint-security.de Jump to article: www.infopoint-security.de/rubrik-bringt-neue-innovationen-fuer-msp-gesteuerte-cyber-resilienz/a44427/
In vier Schritten die M365-Tenant-Resilienz stärken – Die vier größten Risiken für den Microsoft-365-Tenant

Mar 30, 2026 3:30 PM

Tags: microsoft, resilience, risk

First seen on security-insider.de Jump to article: www.security-insider.de/microsoft-365-tenant-risiken-vier-schritte-plan-resilienz-a-f79a1a96ffe05461afa4f6cdd0cdc2ca/
Second data breach at European Commission this year leaves open questions over resilience

Mar 30, 2026 2:30 PM

Tags: breach, cloud, cyberattack, data, data-breach, infrastructure, resilience

The European Commission confirmed that a cyberattack impacted cloud infrastructure hosting its web presence on the Europa.eu platform. Authorities said the cyberattack was … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/03/30/european-commission-cyberattack-cloud-infrastructure-website/
KI treibt Resilienz und Wachstum – Ausfälle werden zum Millionenrisiko

Mar 30, 2026 2:30 PM

Tags: ai, resilience

KI-gestütztes Operations Management entwickelt sich zum entscheidenden Hebel, um Ausfallzeiten zu reduzieren, Kosten zu senken und Wachstum zu sichern. First seen on infopoint-security.de Jump to article: www.infopoint-security.de/ki-treibt-resilienz-und-wachstum-ausfaelle-werden-zum-millionenrisiko/a44402/
World Back Up Day 2026 What are the takeaways?

Mar 30, 2026 12:30 PM

Tags: backup, data, resilience, strategy

World Backup Day is often seen as a simple reminder to save your data, but this year, security leaders say backup strategies must evolve into fully tested, secure, and recovery-focused resilience plans. Here’s what organisations should take away from World Backup Day this year: 1. Backups are meaningless if recovery isn’t provenIt’s no longer enough…
The EU CRA Treating Cybersecurity as Product Liability

Mar 30, 2026 9:30 AM

Tags: cyber, cybersecurity, resilience, software

The EU’s Cyber Resilience Act (Regulation 2024/2847) shifts cybersecurity responsibility upstream. Explore the March 2026 guidance on secure-by-design requirements, software bills of materials (SBOM), and the impact on U.S. manufacturers. First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/03/the-eu-cra-treating-cybersecurity-as-product-liability/
Im Interview mit Christoph Schuhwerk von Zscaler – ‘Wer sich noch nicht mit Resilienz beschäftigt hat, muss es jetzt tun!”

Mar 30, 2026 8:30 AM

Tags: resilience

First seen on security-insider.de Jump to article: www.security-insider.de/zscaler-externe-risiken-cyber-resilienz-a-a13dc08a59b4a3deb519da13e2207109/
AI Versus AI: The Future of Cyber Defense

Mar 29, 2026 7:30 AM

Tags: ai, cyber, cybersecurity, defense, resilience

Segura’s Joe Carson on Agentic AI, Cyber Resilience and Estonia’s Lessons. AI is accelerating both attackers and defenders, transforming cybersecurity into an AI-versus-AI battle. Segura’s Joe Carson discusses why organizations must treat agentic AI as a force multiplier, not a replacement, and how to harness it responsibly in a future driven by autonomous agents. First…