blog_hero_02

Blog

10 Reasons to Budget for BAS in 2020
Dor Sarig, October 10, 2019
Read More >
‘Tis the season for budget planning. With 2019 coming to a close, you may be scrambling to put together a coherent proposal for 2020. And if you’re lucky, you may have some leftover budget that you need to spend wisely.   Focal Points for 2020 Budgets Analyst firm IDC forecasts a 10% increase in spending around security analytics and SIEM solutions, as well as more than a 10% increase in cyber threat intelligence. Automated continuous security testing, performed using breach and attack.
Read More >
What is Continuous Security Testing? Here are the Basics.
Mor Ahuvia, September 23, 2019
Read More >
Continuous security testing is the practice of challenging, measuring and optimizing the effectiveness of security controls on an ongoing basis, using automated testing tools, in order to continually identify new security gaps as they emerge, so they can quickly be fixed. Also called “security effectiveness testing,” the objective of continuous security testing is to find out how effective an organization’s current security controls are, uncover new security gaps as soon as they arise, and.
Read More >
Cymulate Launches *BAS for SMBs* to Increase Small Business Cyber Security
Mor Ahuvia, September 16, 2019
Read More >
Cymulate is proud to usher in a new age in the cyber security of small and midsized business (SMBs). With the launch of our new BAS for SMB bundles, it has never been simpler and more affordable to get your security posture up to par with the most security-mature enterprises. When it comes to cyber security, small and medium sized enterprises (SMEs) have it hard. Aware of their limited cyber security resources, threat actors specifically target them for their commercial accounts. According to.
Read More >
Myth vs. Reality -- Testing Security Controls Against APTs
Dor Sarig, September 3, 2019
Read More >
Why are advanced persistent threats a concern for large and mid-size enterprises? And how can they defend against them? Formerly the concern of only mammoth-size enterprises and government bodies, advanced persistent threats (APTs) are now also a source of alarm for midsized companies targeted for their fewer cyber security resources. And while the stereotypical APT is launched for political or intelligence gains, APT groups have been confirmed to act out of financial motives, as well,.
Read More >
Immediate Threat Analysis – New Dharma Ransomware Strain Found in the Wild
Cymulate Research Lab, August 12, 2019
Read More >
Originally an offshoot of CrySiS, the Dharma ransomware family has brought forth a new variant, as part of its ongoing creation of new strains. In this blog post, we analyze the latest variant found in the wild by malware researcher Jakub Kroustek. Cymulate customers can check if they are vulnerable to this threat by running an Immediate Threat Intelligence simulation of this variant, uploaded to the dashboard on 28th July 2019. (Login to the dashboard here.) Overview Dharma has been operating.
Read More >
Red Teaming on Steroids - How to Optimize Security Controls Faster
Mor Ahuvia, July 19, 2019
Read More >
In the beginning there was pen testing. Then, developers accelerated pen testing with automated pentesting tools. Next, came the realization that instead of just one pen tester, a full team of pen testers could be deployed. Instead of seeking and exploiting security gaps opportunistically, they would perform reconnaissance work ahead of time, then plan and carry out a multi-step, multi-vector attack across the cyber kill chain, mimicking today’s sophisticated cyber heists and advanced.
Read More >
Threats that made Fireworks in the Headlines
Eyal Aharoni, July 4, 2019
Read More >
The lead up to this year’s 4th of July has been chockful of cyber events, from cities getting extorted, through triple-threat ransomware, to state-sponsored APT activity. Here’s a recap of last month’s cyber threat highlights. The month started with AMCA (an American billing collections service provider) announcing on June 3 that an unauthorized user had accessed its system containing personal information that AMCA had received from various entities. The personal data of 11.9 million customers,.
Read More >
Rationalizing Your Cyber Security Budget to Maximize ROI
Dor Sarig, June 14, 2019
Read More >
Cybersecurity consumes a significant share of organizational budgets. As some of the most trusted brands experienced data breaches over the past 2 years—including Intel, Yahoo, Macy's, Adidas, Sears, Delta Airlines and Best Buy to name a few, companies are wondering if they are next in line, and if they are spending enough to protect their data, users, brands, and business continuity. They're already paying a lot. The online publication CSO partnered with the CERT Division of Software.
Read More >
Three Things to Consider in a Breach and Attack Simulation Solution
Mor Ahuvia, May 21, 2019
Read More >
You’ve come to the conclusion that quarterly pen tests, monthly vuln scans and annual red teaming are great, but there still not enough. You need to know if you’re truly secure, and you need to know it right now. You’ve recently heard about breach and attack simulation (BAS) and how it can help. So what should you look for when evaluating BAS solutions? Here’s our $0.02.   Validation of both Internal and External Controls Many BAS solutions focus solely on challenging your internal network.
Read More >
How BAS Optimizes Defense Against Supply Chain Attacks
Dor Sarig, May 6, 2019
Read More >
Supply chain cyberattacks are increasing as companies outsource a growing number of services. Today, your enterprise is more likely than ever to have third parties touching sensitive data[1]. Even when your security controls are robust, an attacker can breach a weaker network—like the network of one of your suppliers, service providers, or partners—and use it as an indirect route into your network[2]. In 2018, many highly publicized breaches were the result of supply-chain attacks: Atrium.
Read More >
Show

Subscribe to Our Blog

Stay up to date with the latest cybersecurity news and tips

By Tag