Blog

The most important factors after a cyberattack are how quickly an organization can respond, how effectively it can control the damage, and whether it can safely restore its services. Incident Response is the process of responding to cybersecurity incidents through…

Many organizations invest in SIEM because they believe that once they have a system to collect logs and generate security alerts, they will gain clearer visibility into security events. However, in reality, manyteams still face the same repeated questions: What…

Many organizations invest in a CSOC, or Cyber Security Operations Center, to strengthen their cybersecurity capabilities. This may involve building an internal security operations team or engaging an external service provider. However, after operating a CSOC for some time, one…

Overview Based on CloudSEK’s threat intelligence report, “Threat Actor Profile and IOC Reference: The Gentlemen Ransomware Group” this article summarizes the key findings around The Gentlemen ransomware group. The Gentlemen is a ransomware group focused on targeted, high-impact attacks against…