About this site

Previous work

Projects

   

   

   

   

   

   

   

   

   

   

How to prevent attacks

Retrieved 2023-06-01

  • GitHub (mandiant/red_team_tool_countermeasures)
  • Retrieved 2022-02-08

  • Hacks Bring New Urgency to Moves by Congress and Agencies to Reduce Future Cybersecurity Risks (U.S. GAO)
  • Retrieved 2021-12-23

  • White House national security adviser asks software companies to discuss cybersecurity (Reuters)
  • White House national security adviser asks software companies to discuss cybersecurity
  • White House national security adviser asks software ...
  • Retrieved 2021-12-06

  • You can't stop the 'next SolarWinds' -- but you can slow it down (VentureBeat)
  • You can’t stop the ‘next SolarWinds’—but you can slow it down (Opera News)
  • Retrieved 2021-09-28

  • How one red team exercise averted a new SolarWinds (style attack)
  • Retrieved 2021-09-11

  • The imperative of the U.S. government’s Zero Trust measures (Digital Journal)
  • Retrieved 2021-08-30

  • Zero trust is not enough: The case for continuous control validation - (GCN)
  • Retrieved 2021-07-21

  • NIST Publishes 'Critical Software' Security Guidance
  • Retrieved 2021-06-22

  • SolarWinds Hackers Could Have Been Waylaid by Simple Countermeasure -US Officials - Latest Tweet by Reuters (LatestLY)
  • SolarWinds hackers may have been thwarted by simple security measures, officials say (Fuentitech)
  • SolarWinds hackers could have been waylaid by simple countermeasure – U.S. officials (102.5 Duke FM)
  • Could better cyber hygiene have prevented the SolarWinds attack?
  • Hillicon Valley: Cyber agency says SolarWinds hack could have been deterred | Civil rights groups urge lawmakers to crack down on Amazon's 'dangerous' worker surveillance (Manchin-led committee puts forth sprawling energy infrastructure proposal - The Ne)
  • Politics: Cyber agency says SolarWinds hack could have been deterred by simple security measures - PressFrom (US)
  • CISA: Firewall Rules Could Have Blunted SolarWinds Malware
  • CISA believes SolarWinds attack could have been prevented with simple countermeasures | 2021-06-23 (Security Magazine)
  • CISA: No organization in the public or private sector could’ve prevented SolarWinds breach (FRN)
  • CISA believes SolarWinds attack could have been prevented with simple countermeasures (Cyber Reports Cybersecurity News & Information)
  • Federal Agencies Could Have Neutralized SolarWinds Breach, CISA Says
  • Open Source Security: Google Has New Plans to Stop Software Supply Chain Attacks (Texas News Today)
  • Retrieved 2021-06-21

  • SolarWinds hackers could have been waylaid by simple countermeasure -US officials (Reuters)
  • Hillicon Valley: Cyber agency says SolarWinds hack could have been deterred | Civil rights groups urge lawmakers to crack down on Amazon's 'dangerous' worker surveillance | Manchin-led committee puts forth sprawling energy infrastructure proposal (TheHil)
  • Retrieved 2021-06-17

  • SolarWinds hackers could have been waylaid by simple countermeasure -US officials (National Post)
  • Retrieved 2021-06-10

  • We Already Know How to Stop SolarWinds (Like Hacks)
  • Retrieved 2021-06-01

  • Biden Warns Businesses of Increased Cybersecurity Threat
  • Retrieved 2021-05-26

  • US agencies lack supply chain best practices post (SolarWinds)
  • Microsoft has discovered yet more SolarWinds malware | #microsoft | #hacking (#cybersecurity - National Cyber Security News Today)
  • Retrieved 2021-05-25

  • DoJ, FBI, IC reviewing supply chain threats posed by Russian companies (FRN)
  • Retrieved 2021-05-20

  • How to Avoid Another Cybersecurity Disaster Like SolarWinds
  • CISA and NIST Guidance on Software Supply Chain Attacks
  • Retrieved 2021-05-16

  • National Cyber Defense Is a "Wicked" Problem: Why the Colonial Pipeline Ransomware Attack and the SolarWinds Hack Were All but Inevitable
  • Retrieved 2021-05-13

  • Bahamas must ‘step up game’ on cyber security (The Tribune)
  • Retrieved 2021-05-12

  • Supply chain penetration: Here’s how you can protect yourself (HT Tech)
  • Russia must do more to tackle cyber criminals operating from within its borders, says UK (ZDNet)
  • Retrieved 2021-05-11

  • RSAC insights: SolarWinds hack illustrates why software builds need scrutiny — at deployment (secblvd)
  • Retrieved 2021-05-05

  • NYDFS recommends critical new practices to reduce supply chain risk in wake of SolarWinds attack (Lexology)
  • Retrieved 2021-05-03

  • Stopping the Next SolarWinds Requires Doing ...
  • Retrieved 2021-04-28

  • CISA & NIST Publish Recommendations for IT Admins to Defend Against the Next ‘SolarWinds’ Event (HOTforSecurity)
  • NSA: OT Security Guidance in Wake of SolarWinds Attack
  • Tips on Enhancing Supply Chain Security (DataBreachToday)
  • Retrieved 2021-04-23

  • When a Ripple Becomes a Wave: Cyberattack Fallout (secblvd)
  • Retrieved 2021-04-22

  • U.S. takes steps to protect electric system from cyberattacks (Chattanooga Times Free Press)
  • USA: Would CMMC have prevented SolarWinds? | Insights (DataGuidance)
  • Retrieved 2021-04-21

  • New cyber (hardening mandates may be coming for defense firms)
  • SUNBURST: Reflections to Secure By (secblvd)
  • Retrieved 2021-04-16

  • NATO to improve cyber defense in bid to boost alliance resilience
  • H-ISAC Supply (Chain Insights Aim to Prevent Next SolarWinds Cyberattack)
  • Retrieved 2021-04-14

  • Misuse of X.509 Certificates & Keys Involved in SolarWinds Attack
  • Retrieved 2021-04-13

  • STRATEGIC THREAT INTELLIGENCE: PREPARING FOR THE NEXT “SOLARWINDS” EVENT
  • Retrieved 2021-04-09

  • The U.S. Government Needs to Overhaul Cybersecurity. Here’s How. (Lawfare)
  • What the Titans of Industry Reveal about SolarWinds Attack (secblvd)
  • Retrieved 2021-04-08

  • 4 things you can do to minimize cyberattacks on supply and value chains (Help Net Security)
  • Retrieved 2021-04-06

  • Viewpoint: Preventing the next SolarWinds breach calls for rapid training and education (Baltimore Business Journal)
  • Retrieved 2021-04-01

  • Analysts expect the worst if Biden doesn't turn his focus toward protecting the grid (WCTI)
  • Biden's cyber executive order to include new rules for federal agencies, contractors
  • Homeland Security Orders Cyber ‘Sprints’ as Part of U.S. Plan Against Hacks
  • The Cybersecurity 202: DHS head seeks to quickly solve some major cybersecurity problems (wapo)
  • US looks to keep critical sectors safe from cyberattacks | Election Hq (fox5vegas.com)
  • Retrieved 2021-03-31

  • Revelations About Securing Hybrid Cloud Environments Post-SolarWinds (secblvd)
  • U.S. Launches Cyber ‘Sprints’ in the Wake of Nation-State Hacks (Bloomberg)
  • Mayorkas pledges to modernize US cyber-defenses after their failure to detect alleged Russian spies (CyberScoop)
  • Retrieved 2021-03-29

  • DHS Secretary Outlines 60 (Day Cybersecurity Recovery Plan)
  • Retrieved 2021-03-27

  • Opinion (The United States has a major hole in its cyberdefense. Here’s how to fix it. - The Washington Post)
  • Retrieved 2021-03-26

  • SolarWinds CEO: Here’s What We’re Doing to Prevent Another Attack (SDxCentral)
  • Retrieved 2021-03-25

  • What Lessons Should We Learn From The Suspected Russian Hack Of SolarWinds And Other U.S. Agencies And Companies?
  • Retrieved 2021-03-23

  • US Response to SolarWinds Cyber Penetrations: A Good Defense Is the Best Offense (Russia Matters)
  • Retrieved 2021-03-17

  • Feds aren't well prepared to spot SolarWinds-style hacks at agencies, CISA official says (CyberScoop)
  • Why the SolarWinds Attack Easily Slipped by All EDR/EPP Solutions (secblvd)
  • Retrieved 2021-03-16

  • For US cyber defense, helpful hackers are only half the battle (hill)
  • Retrieved 2021-03-15

  • The US must adopt Software Bill of Materials to thwart cyberattacks (hill)
  • Retrieved 2021-03-10

  • NCP (National Checklist Program Repository)
  • White House Cyber Group Discusses How to Stop Another SolarWinds
  • Retrieved 2021-03-03

  • SolarWinds Senate Hearing: Moving Forward It’s All About Zero Trust (secblvd)
  • Retrieved 2021-03-02

  • How to prevent data leaks
  • Retrieved 2021-03-01

  • Cloud (based dev teams must shift security left to avoid fate of SolarWinds)
  • Retrieved 2021-02-26

  • Microsoft could've prevented some SolarWinds damage (IT Security Guru)
  • Retrieved 2021-02-25

  • How to Avoid Falling Victim to a SolarWinds (Style ...)
  • Assessing Fallout from the SolarWinds Breach (eWEEK)
  • Retrieved 2021-02-24

  • Guest post: Kurt Sanger on “The ‘SolarWinds’ Hack and the Need to Reframe U.S. Cybersecurity Information Sharing” (Lawfire)
  • Retrieved 2021-02-23

  • Network security relies on careful scrutiny
  • Paramount Defenses Opens Online Store to Empower Organizations Worldwide
  • Palo Alto Networks Posts First $1 Billion Sales Quarter (DCN)
  • Retrieved 2021-02-18

  • What financial services should learn from the SolarWinds cyber attack
  • Apiiro Releases Industry’s First Solution That Detects and Prevents the Attack Used Against Solarwinds
  • Retrieved 2021-02-08

  • A Key Step in Preventing a Future SolarWinds (Just Security)
  • Retrieved 2021-02-02

  • The U.S. Spent $2.2 Million on a Cybersecurity System That Wasn’t Implemented — and Might Have Stopped a Major Hack — ProPublica
  • Retrieved 2021-01-27

  • Tips to harden Active Directory against SolarWinds-type attacks (CSO Online)
  • Retrieved 2021-01-19

  • Remediation and Hardening Strategies for Microsoft 365 to Defend Against UNC2452 (fireeye)
  • Remediation and Hardening Strategies for Microsoft 365 to Defend Against UNC2452
  • Retrieved 2021-01-06

  • How to prepare for and respond to a SolarWinds-type attack (CSO Online)
  • Retrieved 2021-01-01

  • Gossamer: Supply Chain Security for Open (Source Software)
  • Retrieved 2020-12-28

  • Using Microsoft 365 Defender to protect against Solorigate (MS Security)
  • Retrieved 2020-12-23

  • SolarWinds roundup: Fixes, new bad actors, and what the company knew (Network World)
  • Retrieved 2020-12-22

  • How SolarWinds could’ve been prevented (FRN)
  • Retrieved 2020-12-21

  • The SolarWinds Sunburst Attack: How to Protect Yourself from 5th Generation Cyberattacks (Secure Ops)
  • Retrieved 2020-12-18

  • Analyzing Solorigate, the compromised DLL file that started a sophisticated cyberattack, and how Microsoft Defender helps protect customers (MS Security)
  • Retrieved 2020-12-16

  • FireEye, Microsoft create kill switch for SolarWinds backdoor
  • Retrieved 2020-12-15

  • New, free tool adds layer of security for the software supply chain
  • Retrieved 2020-12-14

  • Catching Bloodhound Before it Bites (CrowdStrike)
  • Quick Thoughts on the Russia Hack (Lawfare)
  • Retrieved 2020-12-13

  • SolarWinds CyberAttack and FireEye Red Team Tools Coverage
  • Retrieved 2020-12-08

  • Unauthorized Access of FireEye Red Team Tools (Mandiant)
  • Retrieved 2020-09-25

  • Commit Virtual 2020: How to Build a Compromise Resilient CI/CD (YouTube)
  • Retrieved 2020-06-03

  • Secure Publication of Datadog Agent Integrations With TUF and In-Toto (Datadog)
  • Retrieved 2020-01-09

  • Why Solarwinds Hack didn't succeed for Comodo Customers? Post
  • Retrieved 2019-08-19

  • in-toto: Providing farm-to (table guarantees for bits and bytes)
  • Retrieved 2019-05-07

  • U.S. Cyber Command Bolsters Allied Defenses to Impose Cost on Moscow (nyt)