CyberDB

growth-positive

Threat hunting is emerging as a hot trend in cybersecurity, with organizations actively searching for threats instead of relying on alerts. Threat hunting involves experienced analysts using existing tools and data sources to search for threats and identify breaches. While some vendors claim to offer dedicated threat hunting tools, most tools are subsets of other platforms. Network analysis tools, machine learning tools, endpoint detection and response (EDR) products, and SIEM platforms are all used for threat hunting. Some companies are also offering threat hunting as a service. The Israel Cyber Authority has recommended implementing threat hunting as part of proactive cybersecurity measures. The future of threat hunting may involve regulation and more regulatory bodies requiring proactive threat hunting.

growth-negative

The article discusses North Koreas cyber capabilities and activities, including cyber attacks and the theft of money through cryptocurrencies. It suggests that North Korea primarily uses cyber attacks as a retaliatory measure and to support immediate regime interests. The countrys cyber activities have not shown advanced or sophisticated techniques, and there is little evidence of testing new weaponry. North Koreas cyber attacks are often targeted at South Korea. The theft of money through cryptocurrencies is seen as a means to financially support the regime in the face of strict sanctions. Overall, the article portrays North Koreas cyber activities as a concern but not overly advanced or sophisticated.

growth-negative

The article discusses the issue of fake news and its impact on the democratic process, particularly in relation to Russias alleged involvement in creating and disseminating fake news during the 2016 presidential election. It highlights Facebooks disclosure that it had identified more than $100,000 worth of divisive ads suspected of being purchased by a Russian company with ties to the Kremlin. The article also mentions Germanys legal fight against fake news and the need for individuals to evaluate the accuracy of news online. Overall, the article has a negative impact on Facebook as it highlights the companys association with fake news and Russian interference.

growth-positive

The article discusses the growth of the automotive cybersecurity market as self-driving cars become more prevalent. The market is expected to grow at a CAGR of over 9% and has expanded globally. The US and UK governments have issued regulations and guidelines to ensure the safety and security of autonomous vehicles, leading to increased partnerships in the industry. The use of open source code in software poses a security risk, and the article emphasizes the need for cybersecurity to be a priority in the automotive industry. The market is expected to see increased investments in cybersecurity startups in the coming years.

growth-negative

The article discusses a series of naval mishaps involving the U.S. Navy, including the collision of the USS John McCain and an oil tanker near Singapore. There is speculation that cyber malfeasance may have been the cause of these incidents. The article also highlights the importance of maritime cyber security and the potential risks to military naval assets. It mentions previous cyberattacks on shipping companies and the possibility of nation-states targeting naval vessels in the cyber domain. The U.S. Navys security situation and the need for improvements are emphasized. The article calls for a comprehensive strategy to address existing shortcomings before they become a real problem.

growth-negative

The article discusses the problem of phishing emails and their impact on organizations. It emphasizes the importance of training employees to recognize and prevent phishing attacks. The article is a guest blog post on CyberDBs website.

growth-positive

The article discusses the role of threat intelligence in cybersecurity and the need for disruption in current cybersecurity approaches. It mentions attending a GDS Engagement Evening hosted by Admiral Patrick Walsh from iSIGHTPARTNERS (prior to its acquisition by FireEye). The author believes that the existing implementations of vulnerability and patch management in global enterprises are costly and provide little benefit. They highlight the difficulties in assessing risk and reaching agreement on patching, leading to unsustainable costs. The author finds the discussion with Pat compelling and sees cyber threat intelligence as a means of reducing the internal assessment of vulnerabilities. They believe that cyber threat intelligence can complement existing threat response mechanisms and lead to cost savings. The article is tagged with keywords related to cybersecurity, threat intelligence, and risk assessment.