logo
Snarky Security  Trust No One, Especially Not Us… Because We Know That Nothing Is Truly Secure
О проекте Просмотр Уровни подписки Фильтры Обновления проекта Контакты Поделиться Метки
Все проекты
О проекте
Reading about IT and InfoSecurity press, watching videos and following news channels can be a rather toxic activity and bad idea, as it involves discarding the important information from a wide array of all the advertising, company PR, and news article.

Given that my readers, in the absence of sufficient time, have expressed a desire to «be more informed on various IT topics», I’m proposing a project that will do both short-term and long-term analysis, reviews, and interpretations of the flow of information I come across.

Here’s what’s going to happen:
— Obtaining hard-to-come-by facts and content
— Making notes on topics and trends that are not widely reflected in public information field

📌Not sure what level is suitable for you? Check this explanation https://sponsr.ru/snarky_security/55292/Paid_level_explained/

All places to read, listen to, and watch content.
➡️Text and other media: TG, Boosty, Teletype.in, VK, X.com
➡️Audio: Mave, you find here other podcast services, e.g. Youtube Podcasts, Spotify, Apple or Amazon
➡️Video: Youtube

The main categories of materials — use tags:
📌news
📌digest

QA — directly or via email snarky_qa@outlook.com
Публикации, доступные бесплатно
Уровни подписки
Единоразовый платёж

Your donation fuels our mission to provide cutting-edge cybersecurity research, in-depth tutorials, and expert insights. Support our work today to empower the community with even more valuable content.

*no refund, no paid content

Помочь проекту
Promo 750₽ месяц
Доступны сообщения

For a limited time, we're offering our Level "Regular" subscription at an unbeatable price—50% off!

Dive into the latest trends and updates in the cybersecurity world with our in-depth articles and expert insights

Offer valid until the end of this month.

Оформить подписку
Regular Reader 1 500₽ месяц 16 200₽ год
(-10%)
При подписке на год для вас действует 10% скидка. 10% основная скидка и 0% доп. скидка за ваш уровень на проекте Snarky Security
Доступны сообщения

Ideal for regular readers who are interested in staying informed about the latest trends and updates in the cybersecurity world.

Оформить подписку
Pro Reader 3 000₽ месяц 30 600₽ год
(-15%)
При подписке на год для вас действует 15% скидка. 15% основная скидка и 0% доп. скидка за ваш уровень на проекте Snarky Security
Доступны сообщения

Designed for IT professionals, cybersecurity experts, and enthusiasts who seek deeper insights and more comprehensive resources. + Q&A

Оформить подписку
Фильтры
Обновления проекта
Поделиться
Метки
snarkysecurity 156 snarkysecuritypdf 59 news 51 keypoints 41 ai 22 research 22 Cyber Insurance 20 Cyber Insurance Market 19 cybersecurity 16 unpacking 12 AGI 11 Nakasone 11 risk management 11 CTEM 10 nsa 10 OpenAi 10 usa 9 cyber operations 8 discovery 8 EM (Exposure Management) 8 prioritization 8 threat management 8 validation 8 Marine Security 7 Maritime security 7 announcement 6 china 6 Cyber Defense Doctrine 6 cyberbiosecurity 6 Digest 6 Espionage 6 Maritime 6 Monthly Digest 6 biosecurity 5 biotech 5 biotechnology 5 Bioweapon 5 marine 5 patent 5 phishing 5 Russia 5 bio 4 cyber security 4 dgap 4 medical security 4 risks 4 sanctions 4 security 4 content 3 cyber attack 3 data leakage 3 Israel 3 medical communication 3 osint 3 video 3 badges 2 cfr 2 console architecture 2 cyber threat 2 cyberops 2 data breach 2 data theft 2 DICOM 2 EU 2 europol 2 fake news 2 funding 2 Healthcare 2 ICS 2 intelbroker 2 leads 2 malware 2 marketing 2 marketing strategy 2 medicine 2 Microsoft 2 military 2 ML 2 offensive 2 sabotage 2 submarine 2 surveillance 2 tech 2 tracking 2 U.S. Air Force 2 united kingdom 2 vulnerabilities 2 Academic Plagiarism 1 AI Plagiarism 1 Air-Gapped Systems 1 aircraft 1 Amazon 1 amazon web services 1 Antarctica 1 antartica 1 APAC 1 APT29 1 APT42 1 ArcaneDoor 1 Ascension 1 astra 1 astra linux 1 AT&T 1 auto 1 aviation industry 1 aws 1 BeiDou 1 blockchain 1 Boeing 1 books 1 bot 1 broker 1 cable 1 Catholic 1 cisa 1 CISO 1 CISOStressFest 1 compliance 1 content category 1 Continuous Management 1 Copy-Paste Culture 1 criminal charges 1 cuba 1 Cuttlefish 1 cyber 1 Cybercrime 1 CyberDome 1 CybersecurityPressure 1 cybsafe 1 Czech Republic 1 DASF 1 Databricks AI Security Framework 1 defense 1 deferred prosecution agreement 1 dell 1 democracy 1 digital solidarity 1 diplomacy 1 Discord 1 ebike 1 ecosystem 1 end-to-end AI 1 EUelections2024 1 fake 1 fbi 1 fiscal year 1 Framework 1 FTC 1 game console 1 Games 1 GCJ-02 1 gemini 1 Gemma 1 Generative 1 germany 1 global times 1 GLONASS 1 Google 1 google news 1 Government 1 GPS 1 great powers 1 guide 1 hackaton 1 Handala 1 Human Centric Security 1 HumanErrorFTW 1 humanoid robot 1 ICC 1 IIoT 1 incident response 1 Inclusive 1 india 1 indonesia 1 InformationManipulation 1 insurance 1 intelbro 1 Intelligence 1 IoMT 1 IoT 1 iran 1 Iron Dome 1 jamming 1 korea 1 law enforcement 1 lea 1 legal issues 1 LiabilityNightmares 1 Llama 1 LLM 1 LLMs 1 LNG 1 marin 1 market 1 mass 1 message queue 1 military aviation 1 ModelBest 1 Mossad 1 mq broker 1 MTAC 1 National Vulnerability Database 1 NavIC 1 Navigation 1 nes 1 nozomi 1 nsm22 1 nvd 1 NVidia 1 ofac 1 oil 1 Olympics 1 paid content 1 Palestine 1 paris 1 Plagiarism Scandals 1 PlayStation 1 playstation 2 1 playstation 3 1 podcast 1 police 1 PressReleaseDiplomacy 1 ps2 1 ps3 1 radar systems 1 railway 1 Ransomware 1 regulatory 1 Risk-Based Approach 1 rodrigo copetti 1 Russian 1 safety oversight 1 scam 1 semiconductors 1 ShinBet 1 snes 1 Social Engineering: 1 social network 1 spy 1 spyware 1 Stanford 1 surv 1 T-Mobile 1 te 1 technology 1 Tensor 1 Threat 1 Threat Exposure Management 1 Typosquatting 1 uae 1 UK 1 UNC1549 1 UnitedHealth Group 1 us 1 US11483343B2 1 US11496512B2 1 US11611582B2 1 US20220232015A1 1 US9071600B2 1 Verizon 1 VK 1 Vulnerability Management 1 water sector 1 webex 1 Westchester 1 Whatsapp 1 women 1 xbox 1 xbox 360 1 xbox original 1 xz 1 zcaler 1 сybersecurity 1 Больше тегов
Читать: 2+ мин
logo Snarky Security

CTEM Alternatives: Because There's Always a Plan B

There ‎are‏ ‎alternatives ‎to ‎CTEM ‎that ‎might‏ ‎be ‎better‏ ‎suited‏ ‎to ‎certain ‎organizations‏ ‎or ‎scenarios:

📌 Open-source‏ ‎Cloud ‎Security ‎Posture ‎Management‏ ‎(CSPM): Open-source‏ ‎CSPM ‎tools‏ ‎are ‎cost-effective‏ ‎and ‎flexible ‎solutions ‎for ‎cloud‏ ‎security.‏ ‎They ‎offer‏ ‎the ‎benefits‏ ‎of ‎community ‎support ‎and ‎the‏ ‎potential‏ ‎for‏ ‎customization. ‎However,‏ ‎they ‎can‏ ‎be ‎resource-intensive‏ ‎to‏ ‎deploy ‎and‏ ‎may ‎make ‎an ‎organization ‎dependent‏ ‎on ‎the‏ ‎community‏ ‎for ‎updates ‎and‏ ‎improvements

📌 Vanta: Vanta ‎is‏ ‎a ‎youth ‎esports ‎development‏ ‎platform‏ ‎that ‎provides‏ ‎expert ‎coaching‏ ‎and ‎mentorship. ‎It ‎has ‎received‏ ‎accreditation‏ ‎from ‎http://STEM.org, indicating‏ ‎its ‎commitment‏ ‎to ‎developing ‎necessary ‎skills ‎such‏ ‎as‏ ‎innovation,‏ ‎teamwork, ‎and‏ ‎problem-solving ‎in‏ ‎the ‎youth

📌 Defense‏ ‎Surface‏ ‎Management ‎(DSM):‏ ‎DSM ‎provides ‎a ‎more ‎efficient‏ ‎and ‎effective‏ ‎way‏ ‎to ‎connect ‎Threat‏ ‎Intelligence ‎Data‏ ‎(TID) ‎and ‎CTEM. ‎It‏ ‎helps‏ ‎organizations ‎prioritize‏ ‎and ‎optimize‏ ‎their ‎defenses ‎by ‎identifying ‎strengths‏ ‎and‏ ‎weaknesses ‎and‏ ‎comparing ‎capabilities‏ ‎against ‎adversarial ‎Tactics, ‎Techniques, ‎and‏ ‎Procedures‏ ‎(TTPs)

📌 CloudBees‏ ‎Jenkins ‎Enterprise‏ ‎and ‎Operations‏ ‎Center: ‎These‏ ‎tools‏ ‎provide ‎more‏ ‎features ‎to ‎visualize ‎software ‎delivery‏ ‎pipelines ‎and‏ ‎recover‏ ‎from ‎failures. ‎They‏ ‎offer ‎greater‏ ‎visibility ‎into ‎Jenkins ‎operations‏ ‎and‏ ‎allow ‎for‏ ‎the ‎central‏ ‎management ‎of ‎clusters ‎of ‎Jenkins‏ ‎masters,‏ ‎development, ‎and‏ ‎performance ‎analytics

📌 Unifying‏ ‎Remediation: ‎This ‎approach ‎leverages ‎automation‏ ‎to‏ ‎streamline‏ ‎the ‎response‏ ‎to ‎security‏ ‎issues, ‎reducing‏ ‎manual‏ ‎intervention ‎and‏ ‎response ‎time. ‎It ‎also ‎includes‏ ‎considering ‎the‏ ‎context‏ ‎of ‎security ‎issues,‏ ‎which ‎helps‏ ‎in ‎identifying ‎the ‎most‏ ‎critical‏ ‎issues, ‎understanding‏ ‎their ‎root‏ ‎causes, ‎and ‎determining ‎effective ‎remediation‏ ‎strategies

📌 Pen‏ ‎Testing: ‎While‏ ‎CTEM ‎is‏ ‎focused ‎on ‎identifying ‎and ‎preventing‏ ‎as‏ ‎many‏ ‎vulnerabilities ‎as‏ ‎possible, ‎pen‏ ‎testing ‎is‏ ‎a‏ ‎human-driven ‎offensive‏ ‎test ‎that ‎attempts ‎to ‎achieve‏ ‎a ‎specific‏ ‎goal.‏ ‎Using ‎both ‎methodologies‏ ‎increases ‎visibility‏ ‎dramatically ‎and ‎provides ‎a‏ ‎more‏ ‎comprehensive ‎security‏ ‎approach

📌 Automation ‎in‏ ‎Tax ‎Preparation: Automation ‎can ‎help ‎eliminate‏ ‎the‏ ‎risk ‎of‏ ‎human ‎error‏ ‎that ‎can ‎occur ‎with ‎manual‏ ‎data‏ ‎entry,‏ ‎leading ‎to‏ ‎more ‎accurate‏ ‎financial ‎statements.‏ ‎It‏ ‎can ‎streamline‏ ‎audit ‎processes, ‎allowing ‎tax ‎professionals‏ ‎to ‎identify‏ ‎and‏ ‎prioritize ‎high-risk ‎areas

Читать: 2+ мин
logo Snarky Security

Vulnerability Density and Time-to-Remediate: A Tale of Two Metrics (CTEM)

Vulnerability ‎Density‏ ‎and ‎Time-to-Remediate ‎are ‎two ‎key‏ ‎metrics ‎that‏ ‎can‏ ‎be ‎used ‎to‏ ‎measure ‎the‏ ‎effectiveness ‎of ‎a ‎CTEM‏ ‎program.

📌 Vulnerability‏ ‎Density ‎is‏ ‎a ‎measure‏ ‎of ‎the ‎number ‎of ‎vulnerabilities‏ ‎per‏ ‎unit ‎of‏ ‎code ‎or‏ ‎system. ‎It ‎provides ‎an ‎indication‏ ‎of‏ ‎the‏ ‎overall ‎security‏ ‎health ‎of‏ ‎an ‎organization's‏ ‎systems.‏ ‎A ‎lower‏ ‎vulnerability ‎density ‎indicates ‎a ‎more‏ ‎secure ‎system,‏ ‎while‏ ‎a ‎higher ‎vulnerability‏ ‎density ‎suggests‏ ‎a ‎greater ‎potential ‎for‏ ‎exploitation.‏ ‎To ‎use‏ ‎this ‎metric‏ ‎effectively, ‎organizations ‎should ‎track ‎changes‏ ‎in‏ ‎vulnerability ‎density‏ ‎over ‎time.‏ ‎A ‎decreasing ‎trend ‎would ‎indicate‏ ‎that‏ ‎the‏ ‎CTEM ‎program‏ ‎is ‎effectively‏ ‎identifying ‎and‏ ‎remediating‏ ‎vulnerabilities, ‎thereby‏ ‎improving ‎the ‎organization's ‎security ‎posture.‏ ‎It ‎is‏ ‎calculated‏ ‎by ‎dividing ‎the‏ ‎total ‎number‏ ‎of ‎vulnerabilities ‎by ‎the‏ ‎total‏ ‎number ‎of‏ ‎systems ‎or‏ ‎applications. ‎This ‎metric ‎can ‎be‏ ‎used‏ ‎to ‎estimate‏ ‎the ‎number‏ ‎of ‎residual ‎vulnerabilities ‎in ‎a‏ ‎newly‏ ‎released‏ ‎software ‎system‏ ‎given ‎its‏ ‎size. ‎A‏ ‎high‏ ‎vulnerability ‎density‏ ‎indicates ‎that ‎there ‎are ‎more‏ ‎vulnerabilities ‎to‏ ‎remediate,‏ ‎which ‎could ‎lead‏ ‎to ‎a‏ ‎higher ‎risk ‎of ‎exploitation.‏ ‎Organizations‏ ‎should ‎aim‏ ‎to ‎keep‏ ‎vulnerability ‎density ‎low ‎to ‎reduce‏ ‎the‏ ‎risk ‎of‏ ‎exploitation

📌 Time-to-Remediate ‎(also‏ ‎known ‎as ‎Mean ‎Time ‎to‏ ‎Respond‏ ‎or‏ ‎MTTR) ‎is‏ ‎a ‎measure‏ ‎of ‎the‏ ‎average‏ ‎time ‎it‏ ‎takes ‎to ‎respond ‎to ‎and‏ ‎remediate ‎identified‏ ‎vulnerabilities‏ ‎or ‎threats. ‎A‏ ‎lower ‎MTTR‏ ‎indicates ‎efficient ‎response ‎and‏ ‎resolution,‏ ‎suggesting ‎a‏ ‎more ‎effective‏ ‎CTEM ‎program. ‎This ‎metric ‎is‏ ‎crucial‏ ‎because ‎the‏ ‎longer ‎a‏ ‎vulnerability ‎remains ‎unaddressed, ‎the ‎greater‏ ‎the‏ ‎chance‏ ‎it ‎could‏ ‎be ‎exploited‏ ‎by ‎malicious‏ ‎actors.‏ ‎Therefore, ‎a‏ ‎successful ‎CTEM ‎program ‎should ‎help‏ ‎reduce ‎the‏ ‎time‏ ‎between ‎detection ‎and‏ ‎remediation. ‎It‏ ‎is ‎calculated ‎by ‎subtracting‏ ‎the‏ ‎discovery ‎date‏ ‎from ‎the‏ ‎remediation ‎date. ‎In ‎more ‎simple‏ ‎terms,‏ ‎MTTR ‎is‏ ‎the ‎number‏ ‎of ‎days ‎it ‎takes ‎to‏ ‎close‏ ‎a‏ ‎security ‎vulnerability‏ ‎once ‎it‏ ‎has ‎been‏ ‎discovered.‏ ‎MTTR ‎may‏ ‎also ‎be ‎calculated ‎on ‎a‏ ‎case-by-case ‎basis‏ ‎or‏ ‎on ‎a ‎macro‏ ‎level. ‎The‏ ‎macro ‎equation ‎for ‎MTTR‏ ‎is:‏ ‎MTTR ‎=‏ ‎(Total ‎Sum‏ ‎of ‎Detection ‎to ‎Remediation ‎Time)‏ ‎/‏ ‎(Total ‎Number‏ ‎of ‎Incidents).‏ ‎A ‎lower ‎time ‎to ‎remediation‏ ‎indicates‏ ‎that‏ ‎vulnerabilities ‎are‏ ‎being ‎addressed‏ ‎quickly ‎and‏ ‎reduces‏ ‎the ‎risk‏ ‎of ‎exploitation. ‎Organizations ‎should ‎aim‏ ‎for ‎a‏ ‎short‏ ‎time ‎to ‎remediation‏ ‎to ‎reduce‏ ‎risk

Both ‎metrics ‎provide ‎valuable‏ ‎insights‏ ‎into ‎the‏ ‎effectiveness ‎of‏ ‎a ‎CTEM ‎program. ‎By ‎continuously‏ ‎monitoring‏ ‎these ‎metrics,‏ ‎organizations ‎can‏ ‎identify ‎areas ‎for ‎improvement ‎and‏ ‎take‏ ‎action‏ ‎to ‎enhance‏ ‎their ‎security‏ ‎posture

Читать: 2+ мин
logo Snarky Security

CTEM Effectiveness: Measuring the Immeasurable

To ‎measure‏ ‎the ‎effectiveness ‎of ‎a ‎CTEM‏ ‎program, ‎organizations‏ ‎can‏ ‎use ‎several ‎key‏ ‎performance ‎indicators‏ ‎and ‎metrics. ‎By ‎using‏ ‎these‏ ‎metrics ‎and‏ ‎continuously ‎monitoring‏ ‎them, ‎organizations ‎can ‎gain ‎insights‏ ‎into‏ ‎the ‎effectiveness‏ ‎of ‎their‏ ‎CTEM ‎program ‎and ‎make ‎informed‏ ‎decisions‏ ‎to‏ ‎enhance ‎their‏ ‎cybersecurity ‎posture.‏ ‎It’s ‎important‏ ‎to‏ ‎note ‎that‏ ‎the ‎effectiveness ‎of ‎a ‎CTEM‏ ‎program ‎is‏ ‎not‏ ‎static ‎and ‎should‏ ‎be ‎evaluated‏ ‎regularly ‎to ‎adapt ‎to‏ ‎the‏ ‎evolving ‎threat‏ ‎landscape ‎and‏ ‎business ‎needs.

📌 Risk ‎Reduction: ‎Evaluate ‎the‏ ‎reduction‏ ‎in ‎security‏ ‎risks ‎by‏ ‎tracking ‎the ‎number ‎of ‎vulnerabilities‏ ‎identified‏ ‎and‏ ‎remediated ‎over‏ ‎time. ‎A‏ ‎successful ‎CTEM‏ ‎program‏ ‎should ‎demonstrate‏ ‎a ‎downward ‎trend ‎in ‎the‏ ‎number ‎and‏ ‎severity‏ ‎of ‎security ‎risks

📌 Improved‏ ‎Threat ‎Detection:‏ ‎Measure ‎the ‎effectiveness ‎of‏ ‎threat‏ ‎detection ‎capabilities‏ ‎by ‎tracking‏ ‎the ‎time ‎it ‎takes ‎to‏ ‎detect‏ ‎new ‎vulnerabilities‏ ‎or ‎threats.‏ ‎A ‎lower ‎Mean ‎Time ‎to‏ ‎Detect‏ ‎(MTTD)‏ ‎indicates ‎a‏ ‎more ‎effective‏ ‎CTEM ‎program

📌 Time‏ ‎to‏ ‎Remediate: ‎Assess‏ ‎the ‎speed ‎at ‎which ‎identified‏ ‎threats ‎and‏ ‎vulnerabilities‏ ‎are ‎addressed. ‎A‏ ‎successful ‎CTEM‏ ‎program ‎should ‎help ‎reduce‏ ‎the‏ ‎time ‎between‏ ‎detection ‎and‏ ‎remediation, ‎known ‎as ‎Mean ‎Time‏ ‎to‏ ‎Respond ‎(MTTR)

📌 Security‏ ‎Control ‎Effectiveness:‏ ‎Use ‎tools ‎like ‎Security ‎Control‏ ‎Validation‏ ‎and‏ ‎Breach ‎and‏ ‎Attack ‎Simulation‏ ‎to ‎test‏ ‎the‏ ‎organization’s ‎defenses‏ ‎against ‎simulated ‎threats. ‎The ‎results‏ ‎can ‎validate‏ ‎the‏ ‎impact ‎of ‎the‏ ‎implemented ‎controls‏ ‎and ‎the ‎effectiveness ‎of‏ ‎the‏ ‎security ‎measures‏ ‎in ‎place

📌 Compliance‏ ‎Metrics: ‎For ‎industries ‎with ‎regulatory‏ ‎requirements,‏ ‎achieving ‎and‏ ‎maintaining ‎compliance‏ ‎is ‎a ‎key ‎success ‎indicator.‏ ‎Track‏ ‎compliance‏ ‎violations ‎or‏ ‎issues ‎to‏ ‎gauge ‎the‏ ‎effectiveness‏ ‎of ‎the‏ ‎CTEM ‎program ‎in ‎maintaining ‎regulatory‏ ‎standards

📌 Business ‎Alignment:‏ ‎Ensure‏ ‎that ‎the ‎CTEM‏ ‎program ‎aligns‏ ‎with ‎business ‎priorities. ‎This‏ ‎can‏ ‎be ‎measured‏ ‎qualitatively ‎by‏ ‎assessing ‎whether ‎remediation ‎efforts ‎focus‏ ‎on‏ ‎protecting ‎the‏ ‎most ‎critical‏ ‎business ‎assets ‎and ‎align ‎with‏ ‎key‏ ‎business‏ ‎objectives

📌 Stakeholder ‎Feedback:‏ ‎Collect ‎and‏ ‎analyze ‎feedback‏ ‎from‏ ‎stakeholders ‎involved‏ ‎in ‎the ‎CTEM ‎process. ‎Positive‏ ‎feedback ‎can‏ ‎indicate‏ ‎that ‎the ‎program‏ ‎is ‎meeting‏ ‎its ‎objectives ‎and ‎is‏ ‎well-received‏ ‎by ‎those‏ ‎it ‎affects

Читать: 3+ мин
logo Snarky Security

CTEM: Miscellaneous Mayhem

Prioritization ‎Threats

The‏ ‎Prioritization ‎phase ‎is ‎the ‎third‏ ‎stage ‎in‏ ‎the‏ ‎CTEM ‎framework. ‎During‏ ‎this ‎phase,‏ ‎organizations ‎evaluate ‎the ‎potential‏ ‎vulnerabilities‏ ‎identified ‎in‏ ‎the ‎Discovery‏ ‎phase ‎based ‎on ‎how ‎likely‏ ‎they‏ ‎are ‎to‏ ‎be ‎exploited‏ ‎and ‎the ‎potential ‎impact ‎this‏ ‎would‏ ‎have‏ ‎on ‎the‏ ‎organization. ‎Here‏ ‎are ‎the‏ ‎key‏ ‎steps ‎involved‏ ‎in ‎prioritizing ‎threats ‎during ‎CTEM‏ ‎implementation:

📌 Assess ‎Severity‏ ‎and‏ ‎Likelihood: Businesses ‎often ‎use‏ ‎a ‎risk‏ ‎assessment ‎methodology ‎to ‎analyze‏ ‎the‏ ‎severity ‎and‏ ‎likelihood ‎of‏ ‎each ‎vulnerability. ‎This ‎involves ‎evaluating‏ ‎the‏ ‎potential ‎damage‏ ‎that ‎could‏ ‎be ‎caused ‎if ‎the ‎vulnerability‏ ‎were‏ ‎to‏ ‎be ‎exploited.

📌 Consider‏ ‎Business ‎Impact: CTEM‏ ‎programs ‎help‏ ‎organizations‏ ‎prioritize ‎threats‏ ‎based ‎on ‎their ‎potential ‎impact‏ ‎on ‎the‏ ‎business.‏ ‎This ‎involves ‎considering‏ ‎factors ‎such‏ ‎as ‎the ‎criticality ‎of‏ ‎the‏ ‎affected ‎system‏ ‎or ‎data,‏ ‎the ‎potential ‎financial ‎impact, ‎and‏ ‎the‏ ‎potential ‎reputational‏ ‎damage.

📌 Availability ‎of‏ ‎Compensating ‎Controls: The ‎availability ‎of ‎compensating‏ ‎controls,‏ ‎which‏ ‎are ‎alternative‏ ‎measures ‎that‏ ‎can ‎reduce‏ ‎the‏ ‎risk ‎of‏ ‎a ‎vulnerability ‎being ‎exploited, ‎is‏ ‎also ‎a‏ ‎factor‏ ‎in ‎prioritization.

📌 Tolerance ‎for‏ ‎Residual ‎Risk: The‏ ‎organization's ‎tolerance ‎for ‎residual‏ ‎risk,‏ ‎which ‎is‏ ‎the ‎risk‏ ‎that ‎remains ‎after ‎all ‎controls‏ ‎have‏ ‎been ‎applied,‏ ‎is ‎another‏ ‎factor ‎that ‎can ‎influence ‎prioritization.

📌 Allocate‏ ‎Resources: Based‏ ‎on‏ ‎prioritization, ‎organizations‏ ‎can ‎effectively‏ ‎allocate ‎resources‏ ‎towards‏ ‎the ‎most‏ ‎significant ‎risks. ‎This ‎strategic ‎approach‏ ‎to ‎threat‏ ‎management‏ ‎results ‎in ‎more‏ ‎efficient ‎use‏ ‎of ‎resources ‎and ‎a‏ ‎quicker‏ ‎response ‎to‏ ‎the ‎most‏ ‎potentially ‎damaging ‎threats

Prioritization ‎Methods

Here ‎are‏ ‎some‏ ‎common ‎methods‏ ‎and ‎best‏ ‎practices ‎for ‎prioritizing ‎threats ‎during‏ ‎CTEM‏ ‎implementation:

📌 Business-Aligned‏ ‎Prioritization: CTEM ‎aligns‏ ‎its ‎prioritization‏ ‎with ‎business‏ ‎objectives,‏ ‎focusing ‎on‏ ‎the ‎most ‎critical ‎threats ‎and‏ ‎vulnerabilities ‎that‏ ‎could‏ ‎impact ‎the ‎organization's‏ ‎most ‎valuable‏ ‎assets. ‎This ‎approach ‎ensures‏ ‎that‏ ‎resources ‎are‏ ‎allocated ‎where‏ ‎they ‎matter ‎the ‎most, ‎aligning‏ ‎the‏ ‎organization's ‎efforts‏ ‎with ‎the‏ ‎ever-changing ‎threat ‎landscape

📌 Impact ‎Analysis: Prioritization ‎should‏ ‎include‏ ‎an‏ ‎analysis ‎of‏ ‎the ‎potential‏ ‎impact ‎of‏ ‎each‏ ‎threat. ‎By‏ ‎evaluating ‎the ‎severity ‎and ‎potential‏ ‎damage ‎of‏ ‎each‏ ‎threat, ‎organizations ‎can‏ ‎effectively ‎allocate‏ ‎resources ‎towards ‎the ‎most‏ ‎significant‏ ‎risks

📌 Dynamic ‎Prioritization: The‏ ‎threat ‎landscape‏ ‎is ‎dynamic, ‎with ‎new ‎vulnerabilities‏ ‎emerging‏ ‎regularly. ‎Therefore,‏ ‎prioritization ‎strategies‏ ‎need ‎to ‎be ‎adaptable ‎to‏ ‎address‏ ‎evolving‏ ‎threats ‎effectively

📌 Resource‏ ‎Allocation: Human ‎resources‏ ‎are ‎finite,‏ ‎and‏ ‎security ‎teams‏ ‎must ‎prioritize ‎their ‎efforts. ‎The‏ ‎key ‎is‏ ‎to‏ ‎allocate ‎resources ‎towards‏ ‎impactful ‎vulnerabilities‏ ‎that ‎can ‎significantly ‎impact‏ ‎the‏ ‎organization

To ‎ensure‏ ‎that ‎threat‏ ‎prioritization ‎is ‎aligned ‎with ‎business‏ ‎goals,‏ ‎organizations ‎should‏ ‎incorporate ‎strategic‏ ‎business ‎goals ‎into ‎their ‎CTEM‏ ‎program.‏ ‎This‏ ‎approach ‎allows‏ ‎organizations ‎to‏ ‎evaluate ‎the‏ ‎severity‏ ‎and ‎damage‏ ‎potential ‎of ‎every ‎threat, ‎and‏ ‎then ‎allocate‏ ‎resources‏ ‎accordingly, ‎ensuring ‎that‏ ‎security ‎measures‏ ‎are ‎focused ‎on ‎protecting‏ ‎the‏ ‎most ‎critical‏ ‎business ‎assets

Читать: 7+ мин
logo Snarky Security

CTEM Implementation: A Step-by-Step Guide to Madness

Implementing ‎CTEM‏ ‎involves ‎a ‎systematic ‎five-step ‎process‏ ‎that ‎helps‏ ‎organizations‏ ‎proactively ‎manage ‎and‏ ‎mitigate ‎cybersecurity‏ ‎risks. ‎Implementing ‎CTEM ‎is‏ ‎a‏ ‎continuous ‎cycle,‏ ‎as ‎the‏ ‎threat ‎landscape ‎is ‎always ‎evolving.‏ ‎Organizations‏ ‎must ‎regularly‏ ‎revisit ‎each‏ ‎step ‎to ‎adapt ‎to ‎new‏ ‎threats‏ ‎and‏ ‎changes ‎in‏ ‎their ‎digital‏ ‎environment:

📌 Scoping: ‎This‏ ‎initial‏ ‎phase ‎is‏ ‎about ‎defining ‎what ‎needs ‎to‏ ‎be ‎protected‏ ‎within‏ ‎the ‎organization. ‎It‏ ‎involves ‎understanding‏ ‎the ‎assets, ‎systems, ‎and‏ ‎data‏ ‎that ‎are‏ ‎critical ‎to‏ ‎the ‎business ‎and ‎could ‎be‏ ‎potential‏ ‎targets ‎for‏ ‎cyber ‎threats

📌 Discovery:‏ ‎In ‎this ‎stage, ‎the ‎organization‏ ‎actively‏ ‎seeks‏ ‎out ‎and‏ ‎identifies ‎vulnerabilities‏ ‎and ‎weaknesses‏ ‎in‏ ‎the ‎scoped‏ ‎assets. ‎This ‎includes ‎using ‎tools‏ ‎and ‎technologies‏ ‎to‏ ‎scan ‎for ‎and‏ ‎analyze ‎potential‏ ‎security ‎issues ‎across ‎the‏ ‎organization's‏ ‎attack ‎surface,‏ ‎which ‎encompasses‏ ‎external, ‎internal, ‎and ‎cloud ‎environments

📌 Prioritization:‏ ‎After‏ ‎discovering ‎vulnerabilities,‏ ‎the ‎next‏ ‎step ‎is ‎to ‎prioritize ‎them‏ ‎based‏ ‎on‏ ‎their ‎potential‏ ‎impact ‎on‏ ‎the ‎business.‏ ‎This‏ ‎involves ‎assessing‏ ‎the ‎severity, ‎exploitability, ‎and ‎the‏ ‎criticality ‎of‏ ‎the‏ ‎potential ‎impact ‎to‏ ‎the ‎business,‏ ‎as ‎well ‎as ‎any‏ ‎compensating‏ ‎security ‎controls

📌 Validation:‏ ‎This ‎phase‏ ‎is ‎crucial ‎for ‎ensuring ‎that‏ ‎the‏ ‎organization's ‎vulnerability‏ ‎to ‎threats‏ ‎has ‎been ‎accurately ‎assessed ‎and‏ ‎that‏ ‎the‏ ‎remediation ‎operations‏ ‎are ‎effective.‏ ‎It ‎typically‏ ‎involves‏ ‎practices ‎like‏ ‎penetration ‎testing ‎and ‎Red ‎Team‏ ‎exercises ‎to‏ ‎simulate‏ ‎attacks ‎and ‎validate‏ ‎the ‎protections‏ ‎in ‎place

📌 Mobilization: ‎The ‎final‏ ‎step‏ ‎involves ‎operationalizing‏ ‎the ‎findings‏ ‎from ‎the ‎CTEM ‎process. ‎This‏ ‎means‏ ‎putting ‎in‏ ‎place ‎the‏ ‎necessary ‎actions ‎to ‎correct ‎identified‏ ‎risks‏ ‎and‏ ‎ensuring ‎that‏ ‎all ‎teams‏ ‎within ‎the‏ ‎organization‏ ‎are ‎informed‏ ‎and ‎aligned ‎with ‎the ‎security‏ ‎efforts. ‎This‏ ‎may‏ ‎include ‎automating ‎mitigation‏ ‎through ‎integration‏ ‎with ‎SIEM ‎and ‎SOAR‏ ‎platforms,‏ ‎as ‎well‏ ‎as ‎establishing‏ ‎communication ‎standards ‎and ‎documented ‎cross-team‏ ‎workflows

Scoping‏ ‎phase

📌 The ‎scoping‏ ‎phase ‎is‏ ‎the ‎initial ‎stage ‎in ‎the‏ ‎CTEM‏ ‎framework.‏ ‎It ‎involves‏ ‎defining ‎the‏ ‎scope ‎of‏ ‎the‏ ‎CTEM ‎program,‏ ‎determining ‎which ‎systems, ‎assets, ‎and‏ ‎infrastructure ‎segments‏ ‎will‏ ‎be ‎included, ‎and‏ ‎identifying ‎the‏ ‎stakeholders ‎who ‎will ‎be‏ ‎involved.

📌 During‏ ‎this ‎stage,‏ ‎security ‎teams‏ ‎need ‎to ‎understand ‎what ‎matters‏ ‎most‏ ‎to ‎their‏ ‎business ‎in‏ ‎order ‎to ‎define ‎the ‎scope.‏ ‎This‏ ‎includes‏ ‎identifying ‎the‏ ‎key ‎attack‏ ‎surfaces ‎where‏ ‎vulnerabilities‏ ‎can ‎be‏ ‎managed. ‎The ‎scoping ‎process ‎ensures‏ ‎accurate ‎identification‏ ‎of‏ ‎critical ‎and ‎vulnerable‏ ‎systems, ‎which‏ ‎makes ‎it ‎the ‎foundational‏ ‎step‏ ‎in ‎devising‏ ‎security ‎measures.

📌 The‏ ‎scoping ‎stage ‎forms ‎the ‎foundation‏ ‎of‏ ‎the ‎CTEM‏ ‎program ‎and‏ ‎is ‎essential ‎to ‎its ‎overall‏ ‎success‏ ‎as‏ ‎it ‎establishes‏ ‎the ‎framework‏ ‎for ‎the‏ ‎subsequent‏ ‎stages. ‎It‏ ‎is ‎crucial ‎to ‎include ‎all‏ ‎relevant ‎areas‏ ‎under‏ ‎the ‎scope ‎of‏ ‎CTEM, ‎such‏ ‎as ‎external ‎attack ‎surfaces‏ ‎and‏ ‎cloud ‎environments,‏ ‎to ‎avoid‏ ‎leaving ‎any ‎potential ‎breach ‎points‏ ‎exposed.

Discovery‏ ‎phase

📌 The ‎Discovery‏ ‎phase ‎is‏ ‎the ‎second ‎stage ‎in ‎the‏ ‎CTEM‏ ‎framework.‏ ‎This ‎phase‏ ‎involves ‎identifying‏ ‎and ‎cataloging‏ ‎all‏ ‎vulnerable ‎resources‏ ‎within ‎the ‎organization, ‎such ‎as‏ ‎hardware, ‎software,‏ ‎databases,‏ ‎and ‎network ‎infrastructure.

📌 During‏ ‎the ‎Discovery‏ ‎phase, ‎businesses ‎use ‎a‏ ‎wide‏ ‎variety ‎of‏ ‎IT ‎discovery‏ ‎tools ‎and ‎methods ‎to ‎audit‏ ‎all‏ ‎their ‎IT‏ ‎resources. ‎This‏ ‎often ‎includes ‎conducting ‎vulnerability ‎assessments,‏ ‎penetration‏ ‎testing,‏ ‎and ‎other‏ ‎security ‎audits.‏ ‎The ‎goal‏ ‎is‏ ‎to ‎actively‏ ‎seek ‎out ‎and ‎identify ‎potential‏ ‎vulnerabilities ‎within‏ ‎the‏ ‎organization's ‎systems ‎and‏ ‎assets.

📌 It's ‎important‏ ‎to ‎involve ‎a ‎diverse‏ ‎team‏ ‎of ‎experts‏ ‎in ‎the‏ ‎discovery ‎stage, ‎including ‎IT ‎personnel,‏ ‎security‏ ‎personnel, ‎and‏ ‎other ‎employees‏ ‎who ‎may ‎have ‎a ‎unique‏ ‎perspective‏ ‎on‏ ‎potential ‎vulnerabilities.‏ ‎This ‎ensures‏ ‎that ‎all‏ ‎potential‏ ‎threats ‎are‏ ‎identified ‎and ‎evaluated.

📌 The ‎Discovery ‎phase‏ ‎serves ‎as‏ ‎the‏ ‎bridge ‎between ‎the‏ ‎Scoping ‎and‏ ‎Prioritization ‎phases ‎in ‎the‏ ‎CTEM‏ ‎process. ‎After‏ ‎the ‎Scoping‏ ‎phase, ‎where ‎the ‎key ‎attack‏ ‎surfaces‏ ‎and ‎stakeholders‏ ‎are ‎identified,‏ ‎the ‎Discovery ‎phase ‎focuses ‎on‏ ‎the‏ ‎in-detail‏ ‎identification ‎of‏ ‎all ‎assets‏ ‎and ‎vulnerabilities.

Prioritization‏ ‎phase

📌 The‏ ‎Prioritization ‎phase‏ ‎is ‎the ‎third ‎stage ‎in‏ ‎the ‎CTEM‏ ‎framework.‏ ‎This ‎phase ‎is‏ ‎crucial ‎as‏ ‎it ‎helps ‎organizations ‎identify‏ ‎what‏ ‎high-value ‎assets‏ ‎need ‎to‏ ‎be ‎prioritized, ‎as ‎not ‎everything‏ ‎can‏ ‎be ‎protected‏ ‎at ‎once.

📌 During‏ ‎the ‎Prioritization ‎phase, ‎organizations ‎evaluate‏ ‎the‏ ‎potential‏ ‎vulnerabilities ‎identified‏ ‎in ‎the‏ ‎Discovery ‎phase‏ ‎based‏ ‎on ‎how‏ ‎likely ‎they ‎are ‎to ‎be‏ ‎exploited ‎and‏ ‎the‏ ‎potential ‎impact ‎this‏ ‎would ‎have‏ ‎on ‎the ‎organization. ‎This‏ ‎involves‏ ‎assessing ‎the‏ ‎severity, ‎exploitability,‏ ‎and ‎the ‎criticality ‎of ‎the‏ ‎potential‏ ‎impact ‎to‏ ‎the ‎business,‏ ‎as ‎well ‎as ‎any ‎compensating‏ ‎security‏ ‎controls.

📌 The‏ ‎primary ‎purpose‏ ‎of ‎prioritization‏ ‎is ‎to‏ ‎create‏ ‎a ‎task‏ ‎list ‎to ‎reduce ‎risk ‎efficiently.‏ ‎This ‎enables‏ ‎organizations‏ ‎to ‎optimally ‎allocate‏ ‎their ‎resources,‏ ‎ensuring ‎effective ‎utilization. ‎Prioritization‏ ‎helps‏ ‎organizations ‎determine‏ ‎which ‎assets‏ ‎are ‎most ‎critical ‎and ‎need‏ ‎the‏ ‎highest ‎level‏ ‎of ‎protection.

📌 The‏ ‎Prioritization ‎phase ‎is ‎an ‎ongoing‏ ‎process‏ ‎that‏ ‎involves ‎continually‏ ‎assessing, ‎ranking,‏ ‎and ‎selecting‏ ‎which‏ ‎assets ‎require‏ ‎immediate ‎attention. ‎This ‎phase ‎is‏ ‎dynamic ‎and‏ ‎needs‏ ‎to ‎be ‎adaptable‏ ‎to ‎address‏ ‎evolving ‎threats ‎effectively.

Validation ‎phase

📌 The‏ ‎Validation‏ ‎phase ‎is‏ ‎the ‎fourth‏ ‎stage ‎in ‎the ‎CTEM ‎framework.‏ ‎This‏ ‎phase ‎is‏ ‎crucial ‎as‏ ‎it ‎verifies ‎the ‎effectiveness ‎of‏ ‎the‏ ‎organization's‏ ‎cybersecurity ‎posture‏ ‎and ‎the‏ ‎measures ‎taken‏ ‎to‏ ‎control ‎and‏ ‎decrease ‎vulnerabilities.

📌 During ‎the ‎Validation ‎phase,‏ ‎organizations ‎evaluate‏ ‎how‏ ‎they ‎would ‎handle‏ ‎an ‎actual‏ ‎attack ‎and ‎assess ‎their‏ ‎ability‏ ‎to ‎defend‏ ‎against ‎it.‏ ‎This ‎involves ‎using ‎tools ‎like‏ ‎Breach‏ ‎and ‎Attack‏ ‎Simulation ‎(BAS)‏ ‎and ‎Security ‎Control ‎Validation ‎to‏ ‎test‏ ‎the‏ ‎organization's ‎defenses‏ ‎against ‎simulated‏ ‎threats.

📌 The ‎Validation‏ ‎phase‏ ‎ensures ‎that‏ ‎the ‎plans ‎for ‎addressing ‎the‏ ‎vulnerabilities ‎and‏ ‎threats‏ ‎identified ‎in ‎the‏ ‎Prioritization ‎phase‏ ‎are ‎effective. ‎This ‎could‏ ‎involve‏ ‎adding ‎additional‏ ‎safeguards, ‎updating‏ ‎software, ‎or ‎changing ‎security ‎settings

📌 It's‏ ‎also‏ ‎important ‎to‏ ‎involve ‎a‏ ‎wide ‎range ‎of ‎stakeholders ‎in‏ ‎the‏ ‎Validation‏ ‎phase, ‎including‏ ‎IT ‎personnel,‏ ‎security ‎personnel,‏ ‎and‏ ‎other ‎relevant‏ ‎teams. ‎This ‎ensures ‎that ‎the‏ ‎validation ‎process‏ ‎is‏ ‎comprehensive ‎and ‎that‏ ‎the ‎remediation‏ ‎measures ‎are ‎effective ‎across‏ ‎the‏ ‎organization

Mobilization ‎phase

📌 The‏ ‎Mobilization ‎phase‏ ‎is ‎the ‎final ‎stage ‎in‏ ‎the‏ ‎CTEM ‎framework.‏ ‎This ‎phase‏ ‎is ‎about ‎operationalizing ‎the ‎findings‏ ‎from‏ ‎the‏ ‎CTEM ‎process‏ ‎and ‎implementing‏ ‎the ‎necessary‏ ‎actions‏ ‎to ‎correct‏ ‎identified ‎risks.

📌 During ‎the ‎Mobilization ‎phase,‏ ‎organizations ‎put‏ ‎into‏ ‎action ‎the ‎plans‏ ‎for ‎addressing‏ ‎the ‎vulnerabilities ‎and ‎threats‏ ‎identified‏ ‎in ‎the‏ ‎Prioritization ‎phase‏ ‎and ‎validated ‎in ‎the ‎Validation‏ ‎phase.‏ ‎This ‎could‏ ‎involve ‎adding‏ ‎additional ‎safeguards, ‎updating ‎software, ‎or‏ ‎changing‏ ‎security‏ ‎settings.

📌 This ‎phase‏ ‎also ‎involves‏ ‎ensuring ‎that‏ ‎all‏ ‎teams ‎within‏ ‎the ‎organization ‎are ‎informed ‎and‏ ‎aligned ‎with‏ ‎the‏ ‎security ‎efforts. ‎This‏ ‎may ‎include‏ ‎automating ‎mitigation ‎through ‎integration‏ ‎with‏ ‎Security ‎Information‏ ‎and ‎Event‏ ‎Management ‎(SIEM) ‎and ‎Security ‎Orchestration,‏ ‎Automation,‏ ‎and ‎Response‏ ‎(SOAR) ‎platforms,‏ ‎as ‎well ‎as ‎establishing ‎communication‏ ‎standards‏ ‎and‏ ‎documented ‎cross-team‏ ‎workflows.

📌 The ‎Mobilization‏ ‎phase ‎is‏ ‎crucial‏ ‎as ‎it‏ ‎drives ‎the ‎message ‎that ‎remediation‏ ‎cannot ‎be‏ ‎entirely‏ ‎automated ‎and ‎requires‏ ‎human ‎intervention.‏ ‎It ‎emphasizes ‎the ‎need‏ ‎for‏ ‎security ‎leaders‏ ‎to ‎mobilize‏ ‎a ‎response ‎and ‎remove ‎exposures‏ ‎from‏ ‎the ‎environment

Читать: 1+ мин
logo Snarky Security

CTEM: The Struggle is Real

Challenges ‎of‏ ‎Implementing ‎CTEM

📌 Getting ‎Non-security ‎and ‎Security‏ ‎Teams ‎Aligned:‏ ‎IT‏ ‎infrastructure, ‎DevOps, ‎and‏ ‎security ‎teams‏ ‎often ‎have ‎communication ‎gaps,‏ ‎which‏ ‎can ‎pose‏ ‎a ‎challenge‏ ‎when ‎implementing ‎CTEM

📌 Seeing ‎the ‎Bigger‏ ‎Picture:‏ ‎A ‎comprehensive‏ ‎CTEM ‎program‏ ‎covers ‎many ‎areas, ‎each ‎with‏ ‎its‏ ‎own‏ ‎set ‎of‏ ‎tools ‎and‏ ‎unresolved ‎problems.‏ ‎Aggregating‏ ‎all ‎information‏ ‎to ‎understand ‎priorities ‎and ‎responsibilities‏ ‎can ‎be‏ ‎challenging

📌 Overcoming‏ ‎Diagnostic ‎Overload: ‎Each‏ ‎area ‎covered‏ ‎in ‎CTEM ‎has ‎its‏ ‎own‏ ‎tools, ‎which‏ ‎yield ‎alerts.‏ ‎Managing ‎the ‎information ‎stemming ‎from‏ ‎these‏ ‎alerts ‎can‏ ‎be ‎challenging

📌 Adopting‏ ‎a ‎Risk-centric ‎Approach: ‎Traditional ‎cybersecurity‏ ‎measures‏ ‎often‏ ‎focus ‎on‏ ‎achieving ‎compliance.‏ ‎However, ‎CTEM‏ ‎emphasizes‏ ‎understanding ‎and‏ ‎managing ‎risks ‎specific ‎to ‎an‏ ‎organization’s ‎unique‏ ‎context,‏ ‎which ‎requires ‎a‏ ‎nuanced ‎understanding‏ ‎of ‎the ‎business ‎landscape

📌 Integration‏ ‎of‏ ‎Continuous ‎Monitoring‏ ‎Tools ‎and‏ ‎Technologies: As ‎organizations ‎embrace ‎innovations ‎such‏ ‎as‏ ‎the ‎Internet‏ ‎of ‎Things‏ ‎(IoT) ‎and ‎cloud ‎computing, ‎they‏ ‎must‏ ‎adapt‏ ‎their ‎CTEM‏ ‎frameworks ‎to‏ ‎address ‎the‏ ‎unique‏ ‎challenges ‎posed‏ ‎by ‎these ‎technologies

📌 Operationalizing ‎a ‎CTEM‏ ‎Strategy: ‎Implementing‏ ‎a‏ ‎CTEM ‎strategy ‎requires‏ ‎significant ‎investments‏ ‎in ‎time, ‎budget, ‎personnel,‏ ‎and‏ ‎technology

Читать: 2+ мин
logo Snarky Security

CTEM: The Good, The Bad, and The Ugly

Benefits

📌 Proactive ‎Risk‏ ‎Management: CTEM ‎allows ‎organizations ‎to ‎consistently‏ ‎monitor, ‎evaluate,‏ ‎and‏ ‎mitigate ‎security ‎risks‏ ‎through ‎strategic‏ ‎improvement ‎plans

📌 Prioritization ‎of ‎Threats: CTEM‏ ‎provides‏ ‎a ‎systematic‏ ‎approach ‎to‏ ‎effectively ‎prioritize ‎potential ‎threats

📌 Enhanced ‎Cyber‏ ‎Resilience: CTEM‏ ‎improves ‎an‏ ‎organization's ‎ability‏ ‎to ‎withstand ‎and ‎recover ‎from‏ ‎cyber‏ ‎threats

📌 Actionable‏ ‎Insights: ‎CTEM‏ ‎generates ‎data-driven‏ ‎insights ‎into‏ ‎cyber‏ ‎threats

📌 Alignment ‎with‏ ‎Business ‎Objectives: CTEM ‎ensures ‎that ‎security‏ ‎efforts ‎and‏ ‎risk‏ ‎management ‎plans ‎align‏ ‎with ‎the‏ ‎business's ‎goals

📌 Adaptability: ‎The ‎flexible‏ ‎and‏ ‎scalable ‎nature‏ ‎of ‎CTEM‏ ‎ensures ‎that ‎it ‎can ‎be‏ ‎adapted‏ ‎to ‎suit‏ ‎the ‎specific‏ ‎needs ‎of ‎any ‎organization

📌 Cost ‎Savings: CTEM‏ ‎can‏ ‎significantly‏ ‎reduce ‎costs‏ ‎associated ‎with‏ ‎security ‎breaches‏ ‎by‏ ‎proactively ‎identifying‏ ‎and ‎mitigating ‎threats

Limitations

📌 Integration ‎Gaps: ‎CTEM‏ ‎requires ‎a‏ ‎multi-faceted‏ ‎approach ‎within ‎the‏ ‎security ‎program,‏ ‎which ‎means ‎it ‎must‏ ‎be‏ ‎built ‎with‏ ‎a ‎combination‏ ‎of ‎technical ‎solutions ‎in ‎place.‏ ‎This‏ ‎can ‎lead‏ ‎to ‎integration‏ ‎gaps ‎if ‎not ‎properly ‎managed,‏ ‎as‏ ‎different‏ ‎solutions ‎may‏ ‎not ‎work‏ ‎seamlessly ‎together

📌 Reliance‏ ‎on‏ ‎Disparate ‎Solutions:‏ ‎Failure ‎to ‎adopt ‎CTEM ‎exposes‏ ‎companies ‎to‏ ‎drawbacks‏ ‎such ‎as ‎reliance‏ ‎on ‎disparate‏ ‎solutions. ‎This ‎can ‎lead‏ ‎to‏ ‎inefficiencies ‎and‏ ‎inconsistencies ‎in‏ ‎threat ‎management

📌 Limited ‎Support ‎for ‎Real-Time‏ ‎Constraints: CTEM‏ ‎operates ‎within‏ ‎a ‎specific‏ ‎time ‎horizon, ‎following ‎governance, ‎risk,‏ ‎and‏ ‎compliance‏ ‎mandates, ‎and‏ ‎informs ‎on‏ ‎shifts ‎in‏ ‎long-term‏ ‎strategies. ‎However,‏ ‎it ‎may ‎not ‎fully ‎address‏ ‎the ‎real-time‏ ‎constraints‏ ‎imposed ‎by ‎threat‏ ‎detection ‎and‏ ‎response ‎activities

📌 Resource ‎Intensive: ‎Implementing‏ ‎a‏ ‎CTEM ‎program‏ ‎can ‎be‏ ‎resource-intensive, ‎requiring ‎significant ‎time ‎and‏ ‎effort‏ ‎to ‎continuously‏ ‎monitor ‎and‏ ‎assess ‎the ‎organization's ‎security ‎posture

📌 Need‏ ‎for‏ ‎Continuous‏ ‎Validation: CTEM ‎places‏ ‎significant ‎emphasis‏ ‎on ‎validation,‏ ‎using‏ ‎tools ‎like‏ ‎Breach ‎and ‎Attack ‎Simulation ‎(BAS)‏ ‎and ‎Security‏ ‎Control‏ ‎Validation ‎to ‎test‏ ‎the ‎organization's‏ ‎defenses ‎against ‎simulated ‎threats.‏ ‎This‏ ‎requires ‎ongoing‏ ‎effort ‎and‏ ‎resources ‎to ‎ensure ‎the ‎effectiveness‏ ‎of‏ ‎the ‎implemented‏ ‎controls

📌 Challenges ‎in‏ ‎Prioritizing ‎Threats: While ‎CTEM ‎aims ‎to‏ ‎prioritize‏ ‎threats‏ ‎based ‎on‏ ‎their ‎potential‏ ‎impact, ‎this‏ ‎can‏ ‎be ‎challenging‏ ‎due ‎to ‎the ‎dynamic ‎nature‏ ‎of ‎the‏ ‎threat‏ ‎landscape ‎and ‎the‏ ‎need ‎to‏ ‎align ‎these ‎efforts ‎with‏ ‎business‏ ‎objectives

Читать: 1+ мин
logo Snarky Security

Second-Class Cyber Citizens: Defense on a Budget

It ‎outlines‏ ‎a ‎five-stage ‎process ‎for ‎implementing‏ ‎a ‎defense‏ ‎doctrine‏ ‎in ‎a ‎category‏ ‎B ‎organization.

📌 Stage‏ ‎0 ‎– ‎Corporate ‎governance‏ ‎and‏ ‎strategy ‎for‏ ‎corporate ‎risk‏ ‎management: This ‎stage ‎involves ‎establishing ‎a‏ ‎governance‏ ‎structure ‎and‏ ‎strategy ‎for‏ ‎managing ‎corporate ‎risk. ‎It ‎sets‏ ‎the‏ ‎foundation‏ ‎for ‎the‏ ‎organization's ‎approach‏ ‎to ‎cyber‏ ‎defense.

📌 Stage‏ ‎1 ‎–‏ ‎Demarcation ‎of ‎activity ‎and ‎risk‏ ‎assessment ‎survey: This‏ ‎stage‏ ‎involves ‎defining ‎the‏ ‎scope ‎of‏ ‎the ‎organization's ‎activities ‎and‏ ‎conducting‏ ‎a ‎risk‏ ‎assessment ‎survey.‏ ‎This ‎helps ‎the ‎organization ‎understand‏ ‎its‏ ‎potential ‎vulnerabilities‏ ‎and ‎the‏ ‎risks ‎associated ‎with ‎its ‎activities.

📌 Stage‏ ‎2‏ ‎–‏ ‎Risk ‎Assessment: This‏ ‎stage ‎involves‏ ‎a ‎detailed‏ ‎assessment‏ ‎of ‎the‏ ‎risks ‎identified ‎in ‎the ‎previous‏ ‎stage. ‎The‏ ‎organization‏ ‎evaluates ‎the ‎potential‏ ‎impact ‎and‏ ‎likelihood ‎of ‎each ‎risk,‏ ‎which‏ ‎helps ‎in‏ ‎prioritizing ‎them‏ ‎for ‎mitigation.

📌 Stage ‎3 ‎– ‎Handling‏ ‎the‏ ‎risk: After ‎the‏ ‎risks ‎have‏ ‎been ‎assessed, ‎this ‎stage ‎involves‏ ‎developing‏ ‎strategies‏ ‎to ‎manage‏ ‎them. ‎This‏ ‎could ‎involve‏ ‎mitigating‏ ‎the ‎risk,‏ ‎transferring ‎it, ‎accepting ‎it, ‎or‏ ‎avoiding ‎it,‏ ‎depending‏ ‎on ‎the ‎nature‏ ‎of ‎the‏ ‎risk ‎and ‎the ‎organization's‏ ‎risk‏ ‎tolerance.

📌 Stage ‎4‏ ‎– ‎Building‏ ‎a ‎work ‎plan: Based ‎on ‎the‏ ‎risk‏ ‎handling ‎strategies‏ ‎developed ‎in‏ ‎the ‎previous ‎stage, ‎this ‎stage‏ ‎involves‏ ‎creating‏ ‎a ‎detailed‏ ‎work ‎plan.‏ ‎This ‎plan‏ ‎outlines‏ ‎the ‎steps‏ ‎the ‎organization ‎will ‎take ‎to‏ ‎implement ‎its‏ ‎risk‏ ‎handling ‎strategies.

📌 Stage ‎5‏ ‎– ‎Continuous‏ ‎auditing ‎and ‎monitoring: This ‎final‏ ‎stage‏ ‎involves ‎ongoing‏ ‎auditing ‎and‏ ‎monitoring ‎to ‎ensure ‎that ‎the‏ ‎risk‏ ‎handling ‎strategies‏ ‎are ‎effectively‏ ‎implemented ‎and ‎to ‎identify ‎any‏ ‎new‏ ‎or‏ ‎changing ‎risks.‏ ‎This ‎ensures‏ ‎that ‎the‏ ‎organization's‏ ‎approach ‎to‏ ‎cyber ‎defense ‎remains ‎effective ‎over‏ ‎time

Читать: 1+ мин
logo Snarky Security

Big Fish, Bigger Targets: Cyber Defense for the Overachievers

It ‎outlines‏ ‎a ‎five-stage ‎process ‎for ‎implementing‏ ‎a ‎defense‏ ‎doctrine‏ ‎in ‎a ‎category‏ ‎A ‎organization.

📌 Stage‏ ‎1: ‎Demarcation ‎of ‎the‏ ‎activity : This‏ ‎stage ‎involves‏ ‎defining ‎the‏ ‎scope ‎of ‎the ‎organization's ‎activities‏ ‎that‏ ‎need ‎to‏ ‎be ‎protected.

📌 Stages‏ ‎2 ‎and ‎3: ‎Assessing ‎the‏ ‎risks‏ ‎and‏ ‎determining ‎a‏ ‎strategy ‎for‏ ‎dealing ‎with‏ ‎them : These‏ ‎stages ‎involve‏ ‎identifying ‎potential ‎risks ‎to ‎the‏ ‎organization ‎and‏ ‎developing‏ ‎a ‎strategy ‎to‏ ‎manage ‎these‏ ‎risks.

📌 Stage ‎4: ‎Building ‎a‏ ‎work‏ ‎plan : This ‎stage‏ ‎involves ‎creating‏ ‎a ‎detailed ‎plan ‎for ‎implementing‏ ‎the‏ ‎defense ‎strategy.

📌 Stage‏ ‎5: ‎Continuous‏ ‎auditing ‎and ‎control: This ‎stage ‎involves‏ ‎ongoing‏ ‎monitoring‏ ‎and ‎control‏ ‎to ‎ensure‏ ‎the ‎effectiveness‏ ‎of‏ ‎the ‎defense‏ ‎strategy ‎and ‎to ‎make ‎necessary‏ ‎adjustments

Читать: 1+ мин
logo Snarky Security

From Theory to Practice: Turning Paranoia into Policy

Main ‎points:

📌 It‏ ‎emphasizes ‎the ‎importance ‎of ‎automation‏ ‎and ‎orchestration‏ ‎processes‏ ‎to ‎reduce ‎human‏ ‎error ‎and‏ ‎exposure ‎to ‎personal ‎information

📌 It‏ ‎encourages‏ ‎the ‎use‏ ‎of ‎advanced‏ ‎automated ‎solutions ‎for ‎continuous ‎control‏ ‎and‏ ‎execution ‎of‏ ‎response ‎processes,‏ ‎with ‎human ‎involvement ‎only ‎required‏ ‎in‏ ‎exceptional‏ ‎cases

📌 Proactive ‎defense‏ ‎actions ‎should‏ ‎be ‎taken‏ ‎to‏ ‎preserve ‎information,‏ ‎in ‎addition ‎to ‎maintaining ‎effective‏ ‎capabilities ‎for‏ ‎dealing‏ ‎with ‎information ‎leakage‏ ‎events

📌 The ‎Defense‏ ‎Doctrine ‎controls ‎are ‎incorporated‏ ‎into‏ ‎a ‎framework‏ ‎that ‎includes‏ ‎aspects ‎of ‎identification, ‎defense, ‎detection,‏ ‎response,‏ ‎and ‎recovery

📌 It‏ ‎encourages ‎organizations‏ ‎to ‎implement ‎controls ‎at ‎different‏ ‎levels‏ ‎of‏ ‎maturity ‎on‏ ‎issues ‎such‏ ‎as ‎SOC‏ ‎(Security‏ ‎Operations ‎Center),‏ ‎DLP ‎(Data ‎Loss ‎Prevention), ‎or‏ ‎risk ‎surveys

📌 It‏ ‎allows‏ ‎for ‎a ‎focus‏ ‎on ‎the‏ ‎risks ‎relevant ‎to ‎each‏ ‎organization,‏ ‎with ‎periodic‏ ‎audits ‎and‏ ‎intelligence ‎assessments ‎carried ‎out ‎throughout‏ ‎the‏ ‎entire ‎Israeli‏ ‎economy

📌 The ‎investment‏ ‎in ‎protecting ‎each ‎defense ‎target‏ ‎in‏ ‎the‏ ‎organization ‎will‏ ‎be ‎in‏ ‎accordance ‎with‏ ‎its‏ ‎level ‎of‏ ‎criticality ‎for ‎the ‎organization's ‎functioning

Level‏ ‎control ‎difference

📌 Basic‏ ‎level‏ ‎control ‎usually ‎indicates‏ ‎a ‎process‏ ‎that ‎exists ‎but ‎is‏ ‎not‏ ‎managed ‎and‏ ‎is ‎executed‏ ‎manually. ‎It's ‎the ‎starting ‎point‏ ‎for‏ ‎organizations, ‎allowing‏ ‎them ‎to‏ ‎implement ‎basic ‎controls ‎before ‎moving‏ ‎on‏ ‎to‏ ‎more ‎advanced‏ ‎and ‎complex‏ ‎controls

📌 On ‎the‏ ‎other‏ ‎hand, ‎innovative‏ ‎level ‎control ‎indicates ‎the ‎implementation‏ ‎of ‎control‏ ‎in‏ ‎a ‎managed, ‎documented,‏ ‎automatic, ‎efficient,‏ ‎and ‎effective ‎manner. ‎This‏ ‎level‏ ‎of ‎control‏ ‎is ‎more‏ ‎comprehensive ‎and ‎takes ‎into ‎account‏ ‎the‏ ‎organization's ‎constraints,‏ ‎information ‎classification,‏ ‎and ‎adaptation ‎to ‎business ‎processes

Читать: 3+ мин
logo Snarky Security

Welcome to the CTEM Jungle

Continuous ‎Threat‏ ‎Exposure ‎Management ‎(CTEM) ‎is ‎a‏ ‎cybersecurity ‎strategy‏ ‎that‏ ‎focuses ‎on ‎identifying,‏ ‎assessing, ‎and‏ ‎mitigating ‎risks ‎within ‎an‏ ‎organization's‏ ‎digital ‎environment‏ ‎through ‎continuous‏ ‎monitoring ‎and ‎enhancement ‎of ‎security‏ ‎posture.‏ ‎CTEM ‎is‏ ‎not ‎a‏ ‎single ‎tool ‎or ‎technology ‎but‏ ‎a‏ ‎set‏ ‎of ‎processes‏ ‎and ‎capabilities‏ ‎that ‎involve‏ ‎a‏ ‎five-step ‎program‏ ‎or ‎framework, ‎which ‎includes ‎scoping,‏ ‎discovery, ‎prioritization,‏ ‎validation,‏ ‎and ‎mobilization. ‎

CTEM‏ ‎is ‎a‏ ‎proactive ‎and ‎continuous ‎approach‏ ‎that‏ ‎differs ‎from‏ ‎traditional ‎vulnerability‏ ‎management ‎by ‎being ‎proactive ‎rather‏ ‎than‏ ‎reactive, ‎focusing‏ ‎on ‎a‏ ‎wide ‎range ‎of ‎threats, ‎incorporating‏ ‎existing‏ ‎security‏ ‎measures, ‎and‏ ‎utilizing ‎advanced‏ ‎simulation ‎tools‏ ‎for‏ ‎validation

Tools ‎and‏ ‎Technologies

CTEM ‎leverages ‎a ‎variety ‎of‏ ‎tools ‎and‏ ‎technologies‏ ‎to ‎support ‎its‏ ‎implementation ‎and‏ ‎improvement. ‎These ‎tools ‎aid‏ ‎in‏ ‎the ‎discovery,‏ ‎assessment, ‎prioritization,‏ ‎validation, ‎and ‎mobilization ‎stages ‎of‏ ‎the‏ ‎threat ‎management‏ ‎cycle. ‎Key‏ ‎tools ‎and ‎technologies ‎include ‎CAASM‏ ‎(Cyber‏ ‎Asset‏ ‎Attack ‎Surface‏ ‎Management), ‎EASM‏ ‎(External ‎Attack‏ ‎Surface‏ ‎Management), ‎EM‏ ‎(Exposure ‎Management), ‎RSAS ‎(Red ‎Team‏ ‎Automation ‎Systems).

These‏ ‎tools‏ ‎provide ‎visibility ‎into‏ ‎network ‎segments,‏ ‎security ‎controls, ‎threat ‎types,‏ ‎and‏ ‎tactics/techniques, ‎and‏ ‎are ‎crucial‏ ‎for ‎identifying ‎and ‎analyzing ‎an‏ ‎organization's‏ ‎attack ‎surface,‏ ‎which ‎includes‏ ‎external, ‎internal, ‎and ‎cloud ‎environment

Methodology

The‏ ‎five‏ ‎stages‏ ‎of ‎the‏ ‎CTEM ‎program‏ ‎are:

📌 Scoping: ‎Defining‏ ‎the‏ ‎initial ‎exposure‏ ‎scope, ‎considering ‎business-critical ‎assets, ‎and‏ ‎taking ‎an‏ ‎adversarial‏ ‎approach ‎rather ‎than‏ ‎just ‎focusing‏ ‎on ‎known ‎vulnerabilities ‎(CVEs).

📌 Discovery:‏ ‎Actively‏ ‎seeking ‎out‏ ‎and ‎identifying‏ ‎potential ‎vulnerabilities ‎using ‎tools ‎like‏ ‎automated‏ ‎scanners, ‎manual‏ ‎testing, ‎and‏ ‎penetration ‎testing.

📌 Prioritization: ‎Focusing ‎on ‎the‏ ‎most‏ ‎significant‏ ‎threats ‎that‏ ‎could ‎impact‏ ‎the ‎business‏ ‎and‏ ‎prioritizing ‎remediation‏ ‎efforts ‎accordingly.

📌 Validation: Assessing ‎the ‎effectiveness ‎of‏ ‎remediation ‎operations‏ ‎and‏ ‎ensuring ‎that ‎vulnerabilities‏ ‎are ‎properly‏ ‎addressed.

📌 Mobilization: ‎Operationalizing ‎the ‎CTEM‏ ‎findings‏ ‎and ‎defining‏ ‎communication ‎standards‏ ‎and ‎documented ‎cross-team ‎workflows

Best ‎Practices

Best‏ ‎practices‏ ‎for ‎prioritizing‏ ‎threats ‎during‏ ‎CTEM ‎implementation ‎include:

📌 Stakeholder ‎Engagement: Engage ‎with‏ ‎various‏ ‎stakeholders,‏ ‎including ‎IT,‏ ‎legal, ‎compliance,‏ ‎and ‎business‏ ‎units,‏ ‎to ‎understand‏ ‎their ‎specific ‎requirements ‎and ‎concerns

📌 Regular‏ ‎Updates: Establish ‎a‏ ‎regular‏ ‎schedule ‎for ‎updates‏ ‎and ‎patches‏ ‎to ‎strengthen ‎the ‎network‏ ‎against‏ ‎current ‎known‏ ‎threats ‎and‏ ‎preemptively ‎address ‎potential ‎future ‎threats

📌 Incident‏ ‎Response‏ ‎Plan: ‎Design‏ ‎an ‎effective‏ ‎incident ‎response ‎plan ‎to ‎promptly‏ ‎respond‏ ‎to‏ ‎threats. ‎The‏ ‎plan ‎should‏ ‎be ‎kept‏ ‎updated‏ ‎in ‎line‏ ‎with ‎emerging ‎threats

📌 Optimized ‎Risk ‎Mitigation‏ ‎Processes: Ensure ‎all‏ ‎existing‏ ‎risk ‎mitigation ‎processes‏ ‎are ‎optimized‏ ‎and ‎scalable. ‎This ‎will‏ ‎help‏ ‎manage ‎the‏ ‎increased ‎data‏ ‎feed ‎demand ‎between ‎systems ‎after‏ ‎a‏ ‎CTEM ‎program‏ ‎is ‎implemented

📌 Use‏ ‎of ‎AI: Use ‎an ‎AI-based ‎approach‏ ‎to‏ ‎prioritize‏ ‎threats. ‎This‏ ‎can ‎help‏ ‎manage ‎the‏ ‎dynamic‏ ‎nature ‎of‏ ‎threats ‎and ‎ensure ‎resources ‎are‏ ‎channeled ‎where‏ ‎they‏ ‎matter ‎the ‎most

📌 Continuous‏ ‎Improvement: CTEM ‎is‏ ‎a ‎continuous ‎process, ‎and‏ ‎organizations‏ ‎should ‎regularly‏ ‎reevaluate ‎and‏ ‎adjust ‎their ‎threat ‎prioritization ‎strategies‏ ‎as‏ ‎new ‎threats‏ ‎emerge ‎and‏ ‎business ‎objectives ‎evolve

Обновления проекта

Метки

snarkysecurity 156 snarkysecuritypdf 59 news 51 keypoints 41 ai 22 research 22 Cyber Insurance 20 Cyber Insurance Market 19 cybersecurity 16 unpacking 12 AGI 11 Nakasone 11 risk management 11 CTEM 10 nsa 10 OpenAi 10 usa 9 cyber operations 8 discovery 8 EM (Exposure Management) 8 prioritization 8 threat management 8 validation 8 Marine Security 7 Maritime security 7 announcement 6 china 6 Cyber Defense Doctrine 6 cyberbiosecurity 6 Digest 6 Espionage 6 Maritime 6 Monthly Digest 6 biosecurity 5 biotech 5 biotechnology 5 Bioweapon 5 marine 5 patent 5 phishing 5 Russia 5 bio 4 cyber security 4 dgap 4 medical security 4 risks 4 sanctions 4 security 4 content 3 cyber attack 3 data leakage 3 Israel 3 medical communication 3 osint 3 video 3 badges 2 cfr 2 console architecture 2 cyber threat 2 cyberops 2 data breach 2 data theft 2 DICOM 2 EU 2 europol 2 fake news 2 funding 2 Healthcare 2 ICS 2 intelbroker 2 leads 2 malware 2 marketing 2 marketing strategy 2 medicine 2 Microsoft 2 military 2 ML 2 offensive 2 sabotage 2 submarine 2 surveillance 2 tech 2 tracking 2 U.S. Air Force 2 united kingdom 2 vulnerabilities 2 Academic Plagiarism 1 AI Plagiarism 1 Air-Gapped Systems 1 aircraft 1 Amazon 1 amazon web services 1 Antarctica 1 antartica 1 APAC 1 APT29 1 APT42 1 ArcaneDoor 1 Ascension 1 astra 1 astra linux 1 AT&T 1 auto 1 aviation industry 1 aws 1 BeiDou 1 blockchain 1 Boeing 1 books 1 bot 1 broker 1 cable 1 Catholic 1 cisa 1 CISO 1 CISOStressFest 1 compliance 1 content category 1 Continuous Management 1 Copy-Paste Culture 1 criminal charges 1 cuba 1 Cuttlefish 1 cyber 1 Cybercrime 1 CyberDome 1 CybersecurityPressure 1 cybsafe 1 Czech Republic 1 DASF 1 Databricks AI Security Framework 1 defense 1 deferred prosecution agreement 1 dell 1 democracy 1 digital solidarity 1 diplomacy 1 Discord 1 ebike 1 ecosystem 1 end-to-end AI 1 EUelections2024 1 fake 1 fbi 1 fiscal year 1 Framework 1 FTC 1 game console 1 Games 1 GCJ-02 1 gemini 1 Gemma 1 Generative 1 germany 1 global times 1 GLONASS 1 Google 1 google news 1 Government 1 GPS 1 great powers 1 guide 1 hackaton 1 Handala 1 Human Centric Security 1 HumanErrorFTW 1 humanoid robot 1 ICC 1 IIoT 1 incident response 1 Inclusive 1 india 1 indonesia 1 InformationManipulation 1 insurance 1 intelbro 1 Intelligence 1 IoMT 1 IoT 1 iran 1 Iron Dome 1 jamming 1 korea 1 law enforcement 1 lea 1 legal issues 1 LiabilityNightmares 1 Llama 1 LLM 1 LLMs 1 LNG 1 marin 1 market 1 mass 1 message queue 1 military aviation 1 ModelBest 1 Mossad 1 mq broker 1 MTAC 1 National Vulnerability Database 1 NavIC 1 Navigation 1 nes 1 nozomi 1 nsm22 1 nvd 1 NVidia 1 ofac 1 oil 1 Olympics 1 paid content 1 Palestine 1 paris 1 Plagiarism Scandals 1 PlayStation 1 playstation 2 1 playstation 3 1 podcast 1 police 1 PressReleaseDiplomacy 1 ps2 1 ps3 1 radar systems 1 railway 1 Ransomware 1 regulatory 1 Risk-Based Approach 1 rodrigo copetti 1 Russian 1 safety oversight 1 scam 1 semiconductors 1 ShinBet 1 snes 1 Social Engineering: 1 social network 1 spy 1 spyware 1 Stanford 1 surv 1 T-Mobile 1 te 1 technology 1 Tensor 1 Threat 1 Threat Exposure Management 1 Typosquatting 1 uae 1 UK 1 UNC1549 1 UnitedHealth Group 1 us 1 US11483343B2 1 US11496512B2 1 US11611582B2 1 US20220232015A1 1 US9071600B2 1 Verizon 1 VK 1 Vulnerability Management 1 water sector 1 webex 1 Westchester 1 Whatsapp 1 women 1 xbox 1 xbox 360 1 xbox original 1 xz 1 zcaler 1 сybersecurity 1 Больше тегов

Фильтры

Подарить подписку

Будет создан код, который позволит адресату получить бесплатный для него доступ на определённый уровень подписки.

Оплата за этого пользователя будет списываться с вашей карты вплоть до отмены подписки. Код может быть показан на экране или отправлен по почте вместе с инструкцией.

Будет создан код, который позволит адресату получить сумму на баланс.

Разово будет списана указанная сумма и зачислена на баланс пользователя, воспользовавшегося данным промокодом.

Добавить карту
0/2048