Cybersecurity Blog

08.26.26

The Front Door: When a denied request is your biggest win.

A few weeks ago, I found myself in the middle of a marathon meeting day.

08.26.26

How Deepwatch NEXA™ AI Turns Security Data into Decisive Action

See how Deepwatch NEXA uses collaborative AI for MDR to connect exposure, detection readiness and operational intelligence.

08.05.26

The Little Defender That Could: Neutralizing a MiniShai Supply Chain Attack

Secure IDEs and Git pipelines to block MiniShai supply chain AI hacks.

07.21.26

Anatomy of an Emerging Remote Access Trojan

Technical analysis, IOCs, and detection guidance

07.14.26

Anatomy of an Emerging RAT: DLL Sideloading, ClickFix, and Patchless AMSI Evasion

IT engineers, security teams, network admins, and compliance officers.

07.01.26

The MDR Market Is Moving Beyond Detection. Security Leaders Should Demand More.

IT engineers, security teams, network admins, and compliance officers.

06.12.26

Your Employees Are Already Using AI. Here’s How to Take Back Control.

IT engineers, security teams, network admins, and compliance officers.

05.28.26

Your Device Code Phishing Detection Probably Doesn’t Work.

Attackers are poisoning package managers (npm, PyPI) to spread Trojans through trusted CI/CD pipelines. Learn the 8 distinct behavioral patterns—from version anomalies to callback trails—that bypass traditional security tools and reveal sophisticated supply chain attacks.

05.22.26

The Invisible Trap: Defending Against Indirect Prompt Injection in the AI Era

As organizations rapidly incorporate artificial intelligence (AI) into daily tasks, a new threat to AI agents and the organizations who use them has emerged.

04.28.26

Useful, Autonomous, or Productive? A Better Way to Evaluate AI in the SOC

Most AI in the SOC adds output before it adds value. Anand Ramanathan explains how security leaders can separate real operational value from vendor hype and evaluate what actually improves analyst effectiveness.

04.22.26

Getting Buy-In from HR, Legal, and IT The ROI Case for UBA in Your SIEM

This is the first post in a series on planning, deploying, and maturing a User Behavior Analytics (UBA) program.

04.13.26

The MDR Maturity Model: From MSS to Precision MDR

MDR Maturity: Stop chasing alerts and start shrinking your risk with Stage 4 MDR.

03.31.26

Active Response in Precision MDR: Turning Detection Into Decisive Action

Active Response: Automate threat containment based on your unique risk intent.

01.15.26

When the Lights Go Out: Building Resilient Telemetry Against EDR Silencing: A New Year for Defense in Depth

Happy New Year and welcome back to another year of cybersecurity! We’re back for another round of cat-and-mouse.

12.08.25

The Enemy Within: Mitigating Insider Threats in the Age of AI

As employees use AI tools with sensitive data, new insider risks emerge. Explore practical controls to manage AI usage and safeguard enterprise operations.

11.18.25

Mastering MDR: Best Practices with Deepwatch NEXA Agentic AI

Revolutionize your Managed Detection & Response (MDR) with Agentic AI. Learn Deepwatch NEXA's best practices for human-AI collaboration, continuous learning, and multi-agent cybersecurity.

11.13.25

Preemptive Security in Action: CTEM Now Available through the Deepwatch Guardian MDR Platform™

Integrate Deepwatch CTEM with MDR to achieve unified risk visibility, faster response, and preemptive defense across attack surfaces via the Deepwatch Security Center

11.04.25

Deepwatch NEXA™: Redefining the MDR Experience with Agentic AI

Learn how Deepwatch NEXA’s six specialized Agentic AI agents collaborate with your team and Deepwatch analysts to deliver clear, actionable threat intelligence and accelerate response.

11.04.25

The Future of the SOC: Why Agentic AI Will Make MDR 3.0 Autonomous

Agentic AI is transforming the SOC. See how MDR 3.0 shifts to operational autonomy with reasoning agents, accelerating risk reduction while retaining human oversight.

10.09.25

Trojan Packages: When Trusted Repositories Poison Your Trust

Attackers are poisoning package managers (npm, PyPI) to spread Trojans through trusted CI/CD pipelines. Learn the 8 distinct behavioral patterns—from version anomalies to callback trails—that bypass traditional security tools and reveal sophisticated supply chain attacks.

10.06.25

NPM Supply Chain Attacks, Agentic Reconnaissance, & Good Old Defense-in-Depth

Recent NPM supply chain attacks and agentic reconnaissance remind us to master the basics. Learn how to build a robust, multilayered cyber defense strategy, using the OSI Model and Least Privilege to protect your 'crown jewels' from novel threats.

09.23.25

Why Takedown Services are an Essential Add-on to Deepwatch Dark Web Monitoring and Response (DWMR)

Discover why visibility alone isn't enough. Deepwatch Takedown Services close the loop with rapid removal of threats, enabling proactive defense and compliance assurance.

09.10.25

AI Weaponization: Reshaping Cybersecurity and Defense

AI is now a weapon. Explore how cybercriminals use it for sophisticated attacks, from deepfake scams to advanced ransomware, and find out how to leverage AI to defend your organization.

09.04.25

Maximizing Cybersecurity Impact: Benefits of Pairing the Deepwatch Guardian MDR Platform™ with Microsoft Sentinel

Elevate your security posture. The Deepwatch Guardian MDR Platform™ and Microsoft Sentinel combine expert threat hunting with cloud-native SIEM & SOAR capabilities for resilient protection.

08.27.25

Best Practices in Continuous Threat Exposure Management (CTEM) and How Deepwatch CRE Leads the Way

Learn the five best practices for Continuous Threat Exposure Management (CTEM) and how Deepwatch's CRE platform helps you find, prioritize, and remediate cyber threats.

08.26.25

How Deepwatch’s Dynamic Risk Scoring Cuts Through Alert Fatigue by 90%

Deepwatch’s Dynamic Risk Scoring cuts alert fatigue by over 90% by prioritizing real threats with adaptive scoring, automation, and SLA-backed response—learn how it works.

08.25.25

The Telemetry Trap: Why More Data Doesn’t Equal Better Coverage

More logs don’t mean better security. Discover how to turn raw telemetry into meaningful detection coverage using CRE and Deepwatch MDR.

08.22.25

Why Continuous Threat Exposure Management (CTEM) Is a Must-Have Add-on to Deepwatch MDR

Supercharge your security operations with Deepwatch Continuous Threat Exposure Management (CTEM). Get unified risk metrics, enhanced automation, and full visibility to stop threats before they hit.

08.18.25

Why Detection Fails Without Context: Moving Beyond Alerts

Too many alerts, not enough clarity? Learn how context-aware, risk-based detection transforms security from noisy to actionable.

08.07.25

Securing Your Summer: Stay Ahead of the Cyber Waves

Stay ahead of summer cybersecurity threats. Learn how to mitigate risks from Windows 10 EOL, new Windows 11 features, and Microsoft Edge updates to secure your organization's digital environment.

08.06.25

Why Deepwatch MDR and Splunk Are Stronger Together

Supercharge your Splunk investment with Deepwatch MDR. Our managed detection and response platform provides 24/7 expert coverage, automated response, and dynamic risk scoring—all within your existing Splunk environment.

08.05.25

Why Deepwatch Dark Web Monitoring & Response Is an Essential Add-On to MDR

Learn how you can enhance your MDR with Deepwatch Dark Web Monitoring and Response. Get proactive threat intelligence and automated responses to stop attacks before they start.

08.04.25

3 Telemetry Gaps You Inherited (and How to Fix Them Fast)

New CISOs often inherit blind spots in telemetry. Discover the 3 most common gaps and how to close them fast—without a rip-and-replace overhaul.

08.04.25

Top 5 Reasons Security Teams Choose Deepwatch’s Dynamic Risk Scoring

Discover why top security teams are choosing Deepwatch’s Dynamic Risk Scoring platform—cut alert fatigue, enhance SLA-backed response, and boost SOC performance with real-time threat prioritization.

07.29.25

A New Era Begins: Meet The Deepwatch Guardian MDR Platform™ and Our Bold New Brand Identity

Introducing the Deepwatch Guardian MDR Platform: Precision MDR with human expertise and AI for 24/7 proactive cybersecurity and threat protection.

07.25.25

From Technical Noise to Boardroom Clarity: How CISOs Earn Credibility Early

Learn how new CISOs can turn security complexity into board-level clarity in their first 100 days. Practical tips for visibility, metrics, and influence.

07.24.25

Maximizing MDR ROI: How Deepwatch’s Preemptive Approach Leads the Way

Discover how Deepwatch achieves 432% MDR ROI with automation, legacy cost elimination, and strategic threat response for enterprise security teams.

07.23.25

What Is Dynamic Risk Scoring? A Smarter Way to Prioritize Cyber Threats

Discover how Deepwatch’s Dynamic Risk Scoring uses real-time, contextual analysis to prioritize cyber threats and cut false positives by up to 90%—a smarter, faster way to secure your organization.

07.18.25

The New CISO’s Blind Spot: You Can’t Secure What You Can’t See

New CISOs must rapidly uncover blind spots. Learn how visibility fast-tracks trust and operational clarity in your first 30 days.

07.15.25

Better Together: Deepwatch MDR and Google SecOps

Elevate your security with Deepwatch MDR and Google SecOps. Get 24/7 expert-led, AI-enabled threat detection, rapid response, and comprehensive visibility.

07.11.25

Can a Preemptive MDR Solution Help Obtain a Cyber Warranty and Cyber Insurance?

Explore how preemptive MDR proves risk reduction, lowers premiums, and fulfills requirements for cyber insurance and financial guarantees.

07.03.25

24/7 or Burnout: The Cost of Standing Up a SOC in 2025

In 2025, building a 24/7 SOC is burning out teams and breaking budgets. Discover how leading CISOs are shifting from coverage to resilience—and why the old model no longer scales.

07.02.25

The New Era of Cybersecurity: Integrating Identities, Human Risk, and MDR—How Deepwatch Leads the Way

As cyber threats become increasingly sophisticated, the integration of identity management, human risk factors, and MDR has emerged as a defining trend.

06.26.25

Visibility, Transparency, and Compliance for Client Data Differentiates MDR Vendor Deepwatch

Explore how Deepwatch delivers end-to-end MDR services built on visibility, transparency, and regulatory compliance for enterprise resilience.

06.18.25

Preemptive MDR: The Next Evolution-and How Deepwatch Is Leading the Way

Discover how Preemptive MDR transforms threat response by predicting and preventing attacks before they strike. Learn how Deepwatch leads this evolution.

06.13.25

Best Practices in Board Reporting for CISOs

Learn how top CISOs approach board-level cybersecurity reporting with risk-focused metrics, exposure-based prioritization, and clear narratives. Go beyond alerts—report what matters.

06.10.25

Beyond Defense: 7 Ways CISOs Can Lead with Resilience

Discover 7 ways CISOs can evolve from a defensive posture to strategic leaders who drive business resilience. Learn to think like a strategist, future-proof your security foundation, and communicate value to the board.

06.09.25

Why Deepwatch Stands Out in the MDR Market: A Smart Choice for Security-Conscious Organizations

Deepwatch redefines MDR with real-time insights, seamless integrations, and AI-powered threat exposure management – outpacing legacy MDR providers.

05.27.25

The Future of Enterprise Managed Detection and Response (MDR)

Discover how the future of enterprise MDR will be defined by AI-driven innovation, deep integration, industry specialization, and expert-led security.

05.14.25

Already Doing Detection in Splunk? Here’s What’s Holding You Back from 24/7 Confidence

Splunk detects threats, but 24/7 coverage is the key. Gaps cause alert fatique, chaos and exposure. Explore options to improve threat detection and response.

05.07.25

Running Splunk Shouldn’t Feel Like a Second Job

Alert fatique, dirty logs, useless reports dragging you down? Learn how to fix it in Splunk and get real value from your SIEM.

05.06.25

Detection-as-Code Platform: A Must-Have for Enterprises

Deepwatch Dynamic Risk Scoring engine addresses alert overload and static risk models. Learn how our platform delivers real-time, adaptive security for enterprises.

04.30.25

Use Splunk and Need MDR? Here’s How to Get Full Coverage Without a Platform Switch

Stretched security team? Missed threats? Need 24/7 coverage? Leverage your Splunk with MDR for control, outcomes, and peace of mind.

04.01.25

Don’t Be Fooled This April: AI-Powered Phishing Scams Are No Joke!

AI Phishing scams are on the rise this April Fools' Day. Beware of sophisticated email & texts mimicking trusted sources. Stay vigilant & protect your data.

02.18.25

Beyond MDR: How the Deepwatch Acquisition of Dassana Transforms Security Operations

Discover how Deepwatch's acquisition of Dassana revolutionizes security operations by integrating AI-powered risk management and threat intelligence, enabling proactive threat prevention and enhanced visibility for CISOs.

01.27.25

Cyber Architecture: Moving a Concept into Practice

Discover how to transform your organization's cyber architecture from conceptual to practical with preemptive strategies that enhance security and resilience. Read more in Volume 2 of A Cyber Architect’s Playbook.

10.15.24

The Cyber Architect: Become the Architect of Your Security Story

Discover the evolving role of the CISO as a Cyber Architect, bridging cybersecurity with business resilience and strategy for a stronger organization.

08.28.24

Reflections on Black Hat 2024: What We Learned and What’s Next (Part 2)

Discover key insights from Black Hat 2024 on AI/ML developments and rising data security concerns. Learn how to shape proactive security strategies for the future in this continuation of our reflections.

08.23.24

Reflections on Black Hat 2024: What We Learned and What’s Next (Part 1)

Explore the lessons learned from CrowdStrike and Microsoft at Black Hat 2024, emphasizing the need for a holistic cybersecurity strategy to enhance organizational resilience.

07.09.24

Evolving the Deepwatch Security Program With ISO 27001

Learn about Deepwatch's journey to achieving ISO 27001 certification and the importance of maintaining the highest information security standards.

06.26.24

A Winning Approach to Boss of the SOC (BOTS)

Discover strategies and insights from the Deepwatch BOTS Team as they share their experience in the .conf 2024 Boss of the SOC competition.

06.20.24

NIST CSF Added Govern To Their Standard. You Should Add Governance To Your Security Program Too

Learn why NIST's Cybersecurity Framework 2.0 emphasizes the need for a seperate "Govern" function and the impact of governance on security programs.

06.12.24

Next-Level Splunk Visualizations Via Splunk UI

Discover the advantages of using Splunk UI and Dashboard Studio for building dashboards and visualizations in Splunk.

05.29.24

Beyond the Noise: Extracting Actionable Insights from OSINT Reporting

Discover the importance of open-source threat intelligence and how it can empower individuals and organizations to proactively enhance their security posture.

05.21.24

SIEM Consolidation Shouldn’t Be Your Problem, But Is It?

Discover the impact of SIEM market consolidation on MSSP/MDR customers and the future of security operations in 2024.

05.15.24

Put On Your Cybersecurity Bicycle Helmet

Shift focus from constant threats in cybersecurity to prioritizing protection. Embrace cyber resilience for a safer digital landscape with this blog post.

05.08.24

From Traditional SOCs to a Unified AI Platform for Holistic Cybersecurity Operations

Learn about the elevated level partnership between Deepwatch and CrowdStrike, and the expanded capabilities it brings to the cybersecurity landscape.

05.03.24

When Security Solutions Become Security Liabilities: VPN Concentrators Are Under Attack

From the SOC, Tim Grossner discusses securing or migrating away from VPNs after the recent rash of high profile attacks on multiple vendors.

05.01.24

Data Integrity in Vulnerability Management

Discover practical recommendations for optimizing vulnerability management tools and leverage APIs to enhance reporting capabilities.

04.22.24

Enabling Security First Responders: The Golden Hour in Healthcare Cybersecurity

Understand the parallels between the "Golden Hour" in medical emergencies and the response time in cybersecurity incidents, and the potential consequences of delayed incident response.

04.16.24

Securing the Supply Chain: Safeguarding Integrity and Mitigating Risks

Learn how to safeguard the integrity of your supply chain with Deepwatch's cybersecurity expertise. Mitigate vulnerabilities and build a more cyber resilient future.

04.12.24

Security Leader’s TLDR: PAN Global Protect Zero Day

Gain insights into the zero-day vulnerability affecting Palo Alto Networks’ Global Project, including its impact, patch time, and cyber resilience recommendations.

04.10.24

Empowering SOC Analysts: How to Develop the Human Element of Cybersecurity

Look beyond where buzzwords like automation and artificial intelligence (AI) and learn how Deepwatch empowers our trusty SOC analysts

04.03.24

Endpoint Detection and Response Best Practices in 2024

Looking to deploy advanced EDR solutions? Leverage these 2024 best practices to ensure success in your Endpoint Detection & Response programs.

03.29.24

April Fools’ Day – The New Cyber Resilience Holiday

Don't fall for something that's not true. Discover why Deepwatch believes April Fools' Day is made to be a Cyber Resilience Holiday.

03.29.24

Pirated Adobe Photoshop 2023 Installers Lead to Monero Cryptocurrency Mining

Deepwatch uncovers a new threat to victims searching for the 2023 Adobe Photoshop installer and getting a Monero cryptocurrency miner instead.

03.25.24

Securing Cloud Environments: Building Cyber Resilience with Deepwatch and AWS

Discover how the Deepwatch and AWS solution effectively addresses today's cloud security challenges and boosts organization's cyber resilience.

03.20.24

Deepwatch Engineers Drive Splunk Utilization

Dive in with Deepwatch's Sr. Manager of Platform Operations and Engineering as he breaks down the engineering teams role in Splunk utilization.

03.14.24

Deepwatch Detections Content and MITRE ATT&CK

Dive into the world of detection engineering and the use of the MITRE ATT&CK framework within the SOC with Deepwatch's Director of Threat Operations.

02.27.24

What To Know About ConnectWise and ScreenConnect Vulnerabilities

A TLDR on what security leaders need to know about the ConnectWise and ScreenConnect vulnerabilities, including recommendations beyond patching

02.13.24

Deepwatch and AWS Detection Engineering

Get insights on all things AWS detection engineering, including CloudTrail logs & alerting, best use of tools, detection use cases, & configurations

02.08.24

A Guide to Building a Resilient Security Operations Program

Get guidance from one of the largest SOCs in the business on key components to building a resilient security operations program

02.01.24

Eyes On: SIEM Detections for Secure Email Gateway Bypass

Adversaries are using popular domains to bypass Secure Email Gateway (SEG) protections. Learn how to leverage mature SIEM detections for solid defense

01.31.24

Guess Who’s Back? ZLoader’s Back, Back Again.

Zloader is back again. Get details of their latest variant (version 2.0.0.0), with insight on the inner workings of the threat, indicators, and tooling

01.12.24

Security Leader’s TLDR: Facts & Action to Take on Ivanti Zero-day CVEs

Get the pertinent facts on Ivanti's two recent zero-day CVEs and know what actions you can take while patches are still being rolled out

01.10.24

Data Leak Sites List Over 2,400 victims in 2023

Data leak sites listed over 2,400 victims in 2023. Read for a full analysis on groups, impact to industries and geography, and how to avoid falling victim

01.03.24

2023 Ransomware Evolution and New Threats

Get insights on the state of ransomware in 2023, its evolution and new threats, along with predictions for the landscape in 2024

12.21.23

Lessons from the BlackCat/ALPHV Takedown

The FBI has halted BlackCat/ALPHV on the dark web and provided a free, effective ransomware decryptor. Read for key lessons from this takedown

11.28.23

Hyperautomation: From Dissonance to Harmony

Deepwatch breaks down hyperautomation in cybersecurity - what it is, examples, and benefits. Learn how it's bringing harmony to dissonance

11.07.23

Supporting Cyber Resilience through Vulnerability Management Maturity

Understand the crucial elements of vulnerability management maturity and how they play into building cyber resilience

10.31.23

Microsoft Defender Logs: The Perplexing, the Convoluted, the Depth that Never Seems to End

Microsoft Defender logs can be perplexing and convoluted. Hear from Deepwatch engineers as they break down this logging mechanism

10.23.23

MGM & Caesars Cyber Attacks: Lessons to Build Cyber Resilience

Deepwatch's VP, Security & Content Strategy reveals key lessons from the recent MGM & Caesars cyber attacks that you can apply on your journey to cyber resilience

10.17.23

The Cyber Resilience Journey: Unexpected Business Impacts

Uncover insights from recent security breaches, the business impact, and how a focus on cyber resilience could help your organization avoid the same

10.10.23

Strengthening Cyber Awareness & Resiliency with Plus Addressing

Get clear insights on what plus addressing is, how it enhances cyber awareness and resiliency, and how it can help reduce phishing attacks

10.04.23

The Cyber Resilience Imperative

As the attack landscape expands & grows in complexity, proactive defense is not enough. Learn why cyber resilience is imperative to organizations today

09.25.23

Cisco + Splunk – Perspective from Deepwatch’s CEO

Get insights on Cisco's acquisition of Splunk, its impact on customers & the cybersecurity industry as a whole from CEO of Deepwatch, a key Splunk partner

09.12.23

Your Role is Not to Prevent Every Attack

The role of a security leader is not to prevent every attack. Discover how cyber resilience enables teams to respond competently when incidents occur

05.18.23

Chatbots Probably Couldn’t Write This: Moral and Ethical Considerations of Generative AI

As generative AI tools emerge, Deepwatch's Michael Mayes breaks down moral and ethical considerations, taking lessons from other emerging tech

05.15.23

SecOps Outsourcing: The Benefits of this Strategic Cybersecurity Approach

SecOps outsourcing is more than just a reaction to a skills shortage. Unlock the key benefits it can have on your organizations long-term success and security

04.19.23

Past, Present, Future-Deepwatch ATI Cybersecurity Threat Outlook

Explore the observations, metrics, trends and forecast the Deepwatch ATI team has uncovered in their 2023 Threat Report.

01.13.23

Top 8 Financial Services Cyber Threats – From Attacks to $$$

Financial services organizations are faced with continuous cyber attacks and increased challenges. Discover the top 8 threats today

11.16.22

Securing the Holiday Shopping Season from Heightened Cyber Attacks

Understand the most damaging cyber attacks security teams should look for to reduce risk this holiday shopping season

11.10.22

Future Accountability: Vulnerability Management Best Practices

Take and apply these vulnerability management best practices and future proof your organization from threats

11.07.22

Anticipating and Planning for the Year Ahead: 2023 Predictions

Stay prepared & continue advancing your cybersecurity efforts with insight on the issues predicted to arise in 2023

10.31.22

Healthcare, Compliance and the Cybersecurity Skills Gap

Discover how healthcare organizations can bridge the cybersecurity skills gap amongst an ever changing landscape

10.17.22

The CISO’s Dilemma: Driving SOC Maturity – People, Services or Technology?

New vulnerabilities are discovered every day. Know when it's time to improve your tech stack, hire, or leverage managed services

10.10.22

Stop Living with Extortion: How MDR Offers Better Ransomware Protection

Stop living with extortion. Understand how to better protect your organization from ransomware with managed detection and response

10.07.22

Rideshare To Jail – Do Not Pass Go

Dive in as we breakdown Uber CISO, Joe Sullivan’s conviction, the pressures CISOs are under today and the mindset shift that needs to happen

09.20.22

Lessons from Uber’s September Breach, Consumers to Corporations

Any company can be breached by an employee making a poor security choice. Get the background on Uber's security breach and lessons learned

09.13.22

Maturing SecOps in Healthcare to Protect Patient Care

Privacy and security extend beyond HIPAA. Understand how to effectively mature SecOps in healthcare to protect patient care

09.09.22

Hidden Costs of Maintaining a Modern SOC

Building and maintaining a modern security operations center (SOC) is a dynamic and expensive endeavor. Know the hidden costs to take into account

07.07.22

Evaluating the Costs and Benefits of In-House vs. Outsourced MDR

As economic concerns grow, security teams with limited resources look to Deepwatch Managed Security Solutions to optimize budgets, extend coverage, and reduce risk

05.18.22

Maximizing Security Operations Success Through Collaboration

Security Operations is no island and your team can’t secure everything by themselves. Cybersecurity is a team sport, and everyone needs to be involved. Your security operations team needs to collaborate with other groups and departments to understand priorities, goals, and objectives

03.24.22

Top 5 Healthcare Cybersecurity Risks to Patients and Data

Read about healthcare cybersecurity risks: budget constraints, targeted healthcare ransomware, staffing and skills gaps, and more

03.18.22

Reduce Ransomware Risk with Managed Detection and Response

Ransomware attacks are now a top concern for CISOs and board rooms alike. Understand how to reduce risks with managed MDR

03.03.22

Patching the Cybersecurity Skills Gap with Vulnerability Management Services

Vulnerability Management is a core domain within the Security program. Read why a strong vulnerability management program is required to help you advance your defense-in-depth strategy to ensure threat actors are detected and removed fast

02.16.22

3 Ways Threat Hunting Improves Security Operations

Managing security risk today requires a proactive, defense-in-depth approach; threat hunting by expert threat hunters gives organizations 3 distinct advantages to better detect and respond to threats

02.08.22

What Is the Cybersecurity Skills Gap?

Organizations need managed detection and response (MDR) as a fast and reliable solution to overcome business risk associated with the cybersecurity skills gap

12.14.21

Log4j – 3 Steps to Detect and Patch the Log4Shell Vulnerability Now

Deepwatch is actively working on risk mitigation for CVE-2021-44228, the actively exploited vulnerability in Apache Log4j, dubbed “Log4Shell.” Read the latest on what’s happening and what you can do to patch, protect, and defend your security environment from Log4j exploits

12.03.21

Customer Achieves 432% ROI with Deepwatch MDR in Forrester Total Economic Impact (TEI) Study

Deepwatch has released Forrester conducted analysis on the Total Economic Impact of their Managed Detection and Response services, including financial analysis on Return on Investment and the positive impact of Deepwatch MDR on cybersecurity investments. Read the three highlights and download the report today

11.04.21

Innovation Digital Transformation Cybersecurity Deepwatch Hackathon

Watch deepwatch experts 'walk the talk' and see how our security-first culture fuels improvements as innovation and cybersecurity connect

10.27.21

Sensitive Data Exposure – #3 OWASP Top 10

Learn how to defend against the risk of Sensitive Data Exposure, which is #3 on the OWASP List of Top 10 Risks to Web Applications

10.14.21

Top 10 Security Risks to Web Applications: #2 Broken Authentication

Read more about how to defend against the risk of broken authentication, which is #2 on the OWASP List of Top 10 Risks to Web Applications

09.08.21

4 Reasons to Upgrade Your SIEM with an MDR Provider

Explore four ways to faster results when you launch or upgrade your SIEM (Security Information and Event Management) system

08.12.21

How To Create a Logging Strategy

A logging strategy can help you identify the right data sources you need to best monitor your environment and see threats faster. Learn how to create a logging strategy to advance your threat detection and incident response in security operations

07.19.21

What Is the Cyber Kill Chain?

The term “kill chain” comes from a military concept that uses stages to outline the structure of an attack. “Breaking” the opponent's kill chain refers to the ability to block an attack at any stage

06.14.21

Threat Hunting in Splunk

What is Threat Hunting? Learn the four steps to conduct a successful threat hunt in Splunk

06.10.21

Top 10 Take-Aways From Colonial Pipeline That We All Must Take To Heart

Explore the top 10 take-aways from the Colonial Pipeline ransomware attack that we must all take to heart

03.09.21

Anatomy of a Ransomware Attack

We break down the anatomy of a ransomware attack including the stages of an attack and how to better detect and mitigate ransomware

03.05.21

Understanding CISO Roles and Responsibilities

Interested in learning the roles and responsibilities of a CISO? Discover more details behind the everyday tasks of a CISO

03.01.21

What is SecOps & How Do I Maximize Its Effectiveness?

Discover what SecOps is and how your business can maximize its effectiveness. Learn more and get started protecting your business with Deepwatch

02.23.21

Three Reasons for Network Security Issues

Learn more about top network security issues facing the cybersecurity industry today and how you can prevent them

02.08.21

Deepwatch’s Network Security Best Practices

Find network security best practices to implement now in order to start protecting your business information

01.29.21

How to Defend Against and Identify Phishing Emails

Learn how to defend against and identify phishing emails to protect your device, your network and your company

01.25.21

Starting with the Basics: 5 Tips for Cybersecurity

Interested in implementing a stronger cybersecurity foundation in your business? Get started with these basic tips for cybersecurity today

01.14.21

Why Splunk Cloud and Deepwatch

Learn more about the Splunk Cloud and deepwatch partnership and the industry-leading MDR capabilities it brings for customers

01.12.21

Understanding MDR vs. MSSP

Do you know what the difference between MDR and MSSP services are? Read more as Deepwatch uncovers the specifics behind MDRs vs. MSSPs

01.04.21

Hindsight in/is 2020: Information Security Edition

Wow, is it over yet? Did we make it? Let's talk about what 2020 meant from an information security perspective

12.30.20

What is MDR?

What is MDR? Learn about the basics of MDR, how its different from MSSP, and how to get started with the cyber experts at Deepwatch

12.23.20

What is Cyber Threat Intelligence?

Read more about cyber threat intelligence and how it can help benefit your business. Discover more with the cybersecurity experts at Deepwatch today

12.21.20

What is CIA (in Cybersecurity)?

What is CIA in cybersecurity? Learn more about CIA in cybersecurity, and how you can use CIA to benefit your business

12.17.20

Cybersecurity Terminology in Layman’s Terms

Interested in learning cybersecurity terms? Read more about cybersecurity terminology and keep yourself up-to-date on the latest in cybersecurity

12.15.20

What is Patch Management?

What is patch management? Learn about it, why it's important and how often it should be performed on your business

05.05.20

Why Aren’t You Outsourcing Your Cybersecurity Operations?

Why aren't you outsourcing your cybersecurity operations? Discover the benefits and misconceptions about outsourcing your cybersecurity team

03.25.20

Work From Home Best Practices for Security Practitioners

Discover work from home best practices for security practitioners with Bill Bernard from Deepwatch. Learn how to find success while working from home today

Move from reactive operations to proactive containment

Cultivating Cyber Resilience Experts

Get access to all the critical information you need to be successful.

Empowering CISOs: Seven Strategies to Outmaneuver Threats for Organizational Resilience

Insights Blog

The Contagion Within: Fighting Insider Threats

Ready to stay ahead of threats?