InformerNow

[This is a Guest Diary by Draden Barwick, an ISC intern as part of the SANS.edu Bachelor’s Degree in Applied Cybersecurity (BACS) program [1].] DShield Honeypots are constantly exposed to the internet and inundated with exploit traffic, login attempts, and other malicious activity. Analyzing the logged password attempts can help identify what attackers are targeting. To…

In today’s threat landscape, security teams face a harsh reality: attackers never rest, and defenders are stretched thin. As threats grow in volume, speed, and sophistication, the pressure on SOC teams is reaching a breaking point. That’s why we’re launching our new Managed Detection and Response (MDR) campaign with one simple truth: you may be…

In security operations, structure is a necessity. The OSCAR framework, which originated in a 2012 book about network forensics investigations, provides a disciplined approach to full scale detection and response – and it has long been the investigative backbone of the Rapid7 SOC. When stakes are high and time is limited, the framework delivers, while…

“Tumultous times” would be an accurate summary of Q2 2025 where ransomware threat actors are concerned. Rapid7’s internal and publicly-available data analysis reveals a dynamic environment where major players come and go, newer groups work their way up the heavy-hitters ladder, and threat actors jostle for top dog status. Plus, there’s law enforcement action thrown…

Security leadership isn’t just about technology. It’s about mindset, resilience, and the ability to move forward when conditions change. That message was at the heart of Command with Confidence, the closing session of the Take Command 2025 Virtual Cybersecurity Summit, led by renowned adventurers and motivational speakers The Tempest Two, and hosted by Karl Lankford,…