Published inDark Roast Security·PinnedMember-onlyGetting Started with Cyber Threat IntelligenceQuick & Easy Strategies to Utilize CTI Within Your Cyber Defense Program — Cyber threat intelligence (CTI) is an essential component of any modern cyber defense program within an organization today. With the endless stream of cyber threats disclosed on a daily basis, as well as the risks introduced through the use of third-party tools, cloud-based technologies, the continued rise in the remote…Threat Intelligence11 min readThreat Intelligence11 min read
Published inDark Roast Security·PinnedMember-onlyWhy You Need to Delete Your TikTok AccountEverything you need to know about the app that knows everything about you. — As someone who has lost hours of her life scrolling through Instagram Reels, I get it. You don’t want to give up the app that has you cracking up at night or entertaining you during long car rides. But what if I told you using TikTok can lead to the…Cybersecurity7 min readCybersecurity7 min read
Published inDark Roast Security·PinnedMember-only7 Security Frameworks Every InfoSec Professional Should KnowA look at the common frameworks and standards that shape Information Security programs. — Five years ago I was a junior, going on senior, in college, and had just landed my first job in the tech field. I started as an intern on a Windows engineering team and quickly became involved in some of the security initiatives that were in progress: server baselining, the…Cybersecurity9 min readCybersecurity9 min read
Published inDark Roast Security·PinnedMember-onlyIs the CISSP Certification Worth It?Reflecting on the CISSP exam and the excitement two years later when I officially became certified. — I took the CISSP exam back in November of 2019, so you can say it’s been quite a long journey. When I first passed the exam, I knew I was going to have to wait at least a year and a half before I could apply for endorsement and receive…Cybersecurity8 min readCybersecurity8 min read
Published inCode Like A Girl·PinnedMember-onlyWhy Is There a Lack of Women in Cyber?An analysis of the gender gap in cybersecurity and tech careers alike. — The fact that there are so few women in the cybersecurity industry isn’t news to anyone. This has been an issue for years and years but has become more of a popular topic in parallel with the rise in popularity of the profession. One would think that as cybersecurity becomes…Women In Tech10 min readWomen In Tech10 min read
Published inDark Roast Security·Feb 8Member-onlyPreparing for Killnet’s DDoS Attacks: What Healthcare Organizations Need to KnowDark Roast Intelligence Briefing — The Russian threat actor Killnet has been making headlines recently due to its involvement in a series of high-profile distributed denial-of-service (DDoS) attacks against the healthcare industry. Beginning on January 27th, 2023 with a threat to take down the networks of medical institutions in the US, UK, and other nations…Cybersecurity5 min readCybersecurity5 min read
Published inDark Roast Security·Feb 1Member-onlyAlbum Stealer Malware, RMM Software Attacks & Vulnerability Exploits Trending in the WildDark Roast Intelligence | February 1, 2023 — Welcome to this week’s edition of Roast Roast Intelligence. In this article, you’ll find an overview of a recent malware campaign, Album Stealer, targeting Facebook users, a warning issued by CISA (Cybersecurity and Infrastructure Security Agency), and a few vulnerabilities that are trending due to recently seen exploits in the…Cybersecurity6 min readCybersecurity6 min read
Published inDark Roast Security·Dec 22, 2022Member-onlyLight Roast 118: Intro to Cloud Security Posture ManagementThe Importance of CSPM & How to Implement It Within Your Organization. — This article was originally published on Built In. With the continued adoption of the cloud, cloud security has become quite the buzzword in the technology industry. Although information and cybersecurity concepts remain the same, new threats arise when companies migrate their technology to cloud platforms. The seemingly endless possibilities and…Light Roast6 min readLight Roast6 min read
Published inDark Roast Security·Dec 18, 2022Member-onlyFormbook Malware, shaderz Python Package & Two Major Zero-DaysDark Roast Intelligence | December 18, 2022 — Welcome to this week’s edition of Roast Roast Intelligence. In this article, you’ll find an overview of two recent malware campaigns and two zero-day vulnerabilities that were hot topics last week. Formbook Malware is Still Here Formbook malware is a malware-as-a-service (MaaS) offering that’s been around since 2016, but it’s not one we hear of…Threat Intelligence7 min readThreat Intelligence7 min read
Published inDark Roast Security·Nov 28, 2022Member-onlyCyberattack Against DraftKings, the Delivery of Qbot & a Google Chrome Zero-DayDark Roast Intelligence | November 28, 2022 — Welcome to this week’s edition of Dark Roast Intelligence. In this article, you’ll find overviews of a recent cyberattack on a sports betting organization, how threat actors are using a Windows zero-day vulnerability to deliver Qbot malware, and the latest vulnerability in Google Chrome. DraftKings Falls Victim to Credential Stuffing Attack On November 19th, many DraftKings customers…Dark Roast6 min readDark Roast6 min read
