Ransomware and cybercrime have become top-tier threats to organizations in every industry. Securing endpoints, buying cyber insurance, even paying ransom—none of these options can prevent a business-ending attack. One step that is key to operational and business resilience: A dedicated, identity-first cybersecurity plan. Industry experts from Government Technology and Semperis…
If your organization reduces cyber defenses during weekends and holidays, beware: Attackers target these periods—and material corporate events. Discover how to maintain a strong security posture by implementing robust, automated protection and recovery solutions for your identity infrastructure, even when human resources are scarce.
"The job of CISO is actually to extend the business … using digital infrastructure. It's a fundamentally different play." Chris Inglis, Semperis Strategic Advisor and former US National Cyber Director Former US National Cyber Director and Semperis Strategic Advisor Chris Inglis and Semperis CISO James Doggett discuss how CISO responsibilities…
Cyberattackers are adept at finding ways through your defenses and into identity systems like Active Directory. From there, they can move laterally, escalate privileges, access sensitive resources, and inject malware or ransomware. Implementing a layered defense that includes identity threat detection and response (ITDR) is key to protecting your operational…
Semperis security researchers Eric Woodruff and Tomer Nahum discovered Silver SAML – a new technique used to launch attacks from an identity provider against applications configured to use it for authentication. How does it differ from Golden SAML? How can enterprises respond to the threat? Senior Security Researcher Eric Woodruff…
What's it like, in the hours immediately following a suspected cyber incident? In this recording, we ditch jargon, and dive into the messy, chaotic reality of incident response. Our 1:1 conversation includes war stories, lessons learned, and the hard-won wisdom gained from leading organizations through the fire. We pull back…
Our 2024 global study of 900 IT and security professionals revealed that 74% of organizations targeted by ransomware were attacked multiple times, and 78% of victim organizations paid ransom. These statistics point to a cycle of breaches that cause escalating damage in revenue losses, operational cost, and—in some cases—human health…
Cyberattacks against state and local government agencies, as well as critical public infrastructure, have soared over the past few years. Is your cybersecurity strategy ready for today’s attackers? From finding ways past MFA to hiding from SIEM solutions and security logs, threat actors have become adept at bypassing endpoint and…
A secure identity system is the foundation of your Zero Trust architecture. That’s why attackers regularly target Microsoft Active Directory (AD) and Entra ID. Gaining control of these identity systems can give threat actors near-total control of all your systems, access to sensitive data, and the means to devastate your…
Cyberattacks are the most critical threat facing modern information technology. Most attacks start with identity compromise. For the past quarter century, identity in the enterprise has been synonymous with Microsoft Active Directory (AD). Therefore, AD is almost always involved in a cyberattack—either as the target or as a route to…