Threat Intelligence The Senior Digital Forensics and Incident Response (DFIR) Consultant discussed trends In addition, threat actors are using remote monitoring and management and legitimate tools such as AnyDesk DFIR Consultant suggested that this trend is largely due to the success that next-generation endpoint detection and response (EDR) solutions have had catching malware. Product Road Map The Director of Product Management provided an overview of the Pondurance road map for

such as a malware attack where a threat actor may wreak havoc in a network for weeks or months before detection , communicating regularly with employees to reinforce user awareness training, and modernizing 24/7 detection Featured Posts READ MORE Recognizing Social Engineering in the Age of AI October 14, 2026 Pondurance Named Managed

Twitter) LinkedIn Copy link Each month, the Pondurance team of experts in threat intelligence, incident response , security operations, vulnerability management, and compliance share insights with our clients and partners possible new tactic, technique, and procedure, Akira threat actors are renaming folders after endpoint detection and response tools, such as AVG or SentinelOne, and then placing their tools within those folders. and response.

Windows and Microsoft 365 environments by making smarter use of what they already own, and where external detection and response support can add value. Microsoft is responsible for securing the Microsoft 365 cloud itself, but organizations remain responsible Intune can help manage updates in a way that minimizes disruption. Threat research, lessons learned from incident response operations, and what Pondurance currently assists

Threat intelligence The Senior Manager of Digital Forensics and Incident Response (DFIR) discussed the The SOC Director discussed how Pondurance recently overhauled inbox rules to more accurately detect phishing SOC engineering insights The Manager of SOC Engineering introduced Pondurance’s new dashboard and provided For example, the dashboard has a domain name system (DNS) lookup that shows DNS requests, the DNS response As an extension of a discussion from the July SOC webinar , the Manager of SOC Engineering reviewed how

Learn how BEC attacks are evolving in healthcare and what organizations can do to improve detection, prevention, and response. Abbey Mirelli, Incident Response Manager, and Brook Weiss, Incident Response Consultant, both on the data or evidence that shows threat actors have already infiltrated an environment, and the incident response The primary IOCs that the incident response team looks for during an investigation include logins from

HOME / ASSET INVENTORY MODULE How to Grow Vulnerability Management Into Exposure Management READ REPORT DEMO OUR ASSET INVENTORY MODULE HELPS YOU… Find and fix coverage gaps Continuous network monitoring detects Into Exposure Management REPORT: How to Grow Vulnerability Management Into Exposure Management ASSET What makes Pondurance MDR different from other asset management tools? How does the Asset Inventory module support Continuous Threat Exposure Management (CTEM)?

the total number of impacted products and software tools is unknown at this time, about 18 packages managed gained control of tokens used to grant access to code libraries controlled by qix- on the NPM code management The points of commonality do indicate a single threat actor/threat group is responsible for the overall to determine if any suspicious activity has been detected within their organizations’ networks. Any Pondurance customer should feel free to reach out to their Technical Account Manager, or contact

using more convincing language and proper grammar in the email text, making phishing emails harder to detect employees receive dozens or even hundreds of emails and spend only a brief time determining whether to respond If you don’t recognize the email address, you should not respond without first checking it out. email sender tells you to act quickly or offers an emotional appeal for action, think twice before responding Featured Posts READ MORE Recognizing Social Engineering in the Age of AI October 14, 2026 Pondurance Named Managed

At Cheyenne Mountain, I worked on joint Chief of Staff initiatives to increase cyber detection capabilities ’ve done operations, I’ve done product management, and I’ve done marketing. I do that with the interns, for example, and the other management team members do that as well. re in a hyper growth industry and a hyper growth company that creates opportunities to move into new responsibilities , new roles, or management, if that’s your desire.

Threat intelligence The Principal Digital Forensics and Incident Response (DFIR) Consultant discussed attacker-in-the-middle (AiTM) phishing and what the incident response team usually sees when responding could not open the file” reply in the user’s inbox and observes that the AiTM page relayed the MFA response Also, a password manager , especially one tied to a URL, is beneficial because it can autofill a user Also, a session ID — or any compromised session — is a good way to detect malicious AiTM activity using

Discover how SIEM enhances cybersecurity resilience by analyzing data, detecting threats, and protecting A Security Information and Event Management (SIEM - pronounced either "seem" or "sim" as in simplify) of storage space your SIEM would need to hold all the necessary data to identify threat activity is manageable How SIEM Transforms Threat Detection So now you have an ingestion methodology set to get log and other Each vendor manages analytics differently, so rather than speaking about any one product, we can talk