Trend Micro’s “The Proactive CISO’s Playbook” guides CISOs in shifting from reactive security to strategic leadership. It emphasizes incident readiness, cross-functional collaboration, and continuous improvement. By adopting a proactive, assume-breach mindset, CISOs can build resilient organizations, foster transparency, and drive board-level engagement in cybersecurity.
Read →
The Rapid7 MDR Buyer’s Guide takes a look at the key aspects of an MDR solution and helps you determine what’s most important to you during your own MDR buying journey. The guide highlights how to know if MDR is right for your organization, The 7 most critical capabilities you should look for, How to […]
Read →
This report presents data and insights that security practitioners can use to better understand and guard against some of the most significant attacks and TTPs occurring in today’s cyber threat landscape. By examining recent notable vulnerabilities and high-impact attacks, the experts of Rapid7 Labs identify trends and add valuable context so you can command your […]
Read →
For several decades, enterprise network security rested on a simple and intuitive model. The corporate network was a castle. Firewalls formed the walls, the perimeter was the moat, and anything inside was presumed trustworthy. Employees worked in offices, applications ran in company data centers, and traffic flowed predominantly within boundaries the security team controlled. That […]
Read →
I have used corporate VPNs in one form or another for most of my working life, and I suspect many readers have as well. For years they were the standard means of reaching internal systems from outside the office. Yet in conversations with security leaders, I hear increasingly that the VPN has become both a […]
Read →
For much of the history of enterprise IT, networking and security were separate disciplines with separate teams, budgets, and vendors. The networking team built connectivity between offices, data centers, and the internet. The security team layered protection on top: firewalls, web proxies, intrusion prevention, and data loss prevention. This division of labor made sense when […]
Read →
Few technologies have been declared obsolete as often as the firewall. With every shift, toward the cloud, toward remote work, toward zero trust, commentators have predicted its demise. Yet the firewall persists, because the need it addresses persists: organizations must still inspect traffic and enforce policy at critical points in their networks. What has changed, […]
Read →
For retailers, banks, healthcare networks, restaurant chains, and logistics firms, the branch is where business actually happens. A single organization may operate hundreds or even thousands of locations, each with point-of-sale systems, staff devices, guest Wi-Fi, and increasingly a range of connected equipment. Securing all of them consistently has long been one of the more […]
Read →
The widespread adoption of encryption is, in my view, one of the great security achievements of the past decade. The overwhelming majority of web traffic is now encrypted, protecting users from eavesdropping and tampering. Yet this achievement carries an uncomfortable consequence for defenders. Attackers use encryption too, and a large share of malware now communicates […]
Read →
Walk through almost any modern enterprise and you will find a remarkable variety of connected devices that never appear on an IT asset list. Security cameras, badge readers, smart lighting, conference room displays, printers, building management systems, medical equipment, and industrial controllers all communicate over the network. Collectively known as the Internet of Things and […]
Read →
The central problem of network defense has always been the unknown. Known threats, those with established signatures, recognized domains, and documented techniques, can be blocked with considerable reliability. The difficulty lies with what has never been seen before: a new malware variant, a freshly registered phishing domain, a novel exploitation technique. Attackers understand this well, […]
Read →
Cloud-native development has changed not only how applications are built but where their vulnerabilities originate. In a traditional environment, security teams could focus largely on the production infrastructure: harden the servers, protect the network, and monitor the perimeter. In the cloud, much of the infrastructure itself is defined in code, assembled from open-source components, and […]
Read →
When I review accounts of cloud security incidents, I am repeatedly struck by how few involve sophisticated exploitation. A large proportion begin with something far more mundane: a storage bucket left open to the public, a database exposed to the internet without authentication, an overly permissive access role, or a security group allowing inbound connections […]
Read →