Enterprise security topics worth understanding and sharing.
Explore current security threats like ClickFix, identity compromise, and AI risks, and learn how to protect your organization from evolving attacks.
Andrew Cook
Insights into Iranian cyber tactics, targeting critical sectors, and defensive measures based on documented tradecraft from CISA, FBI, and NSA reports.
Luke Rusten
Is your team using unauthorized AI? Learn how to navigate the security risks of OpenClaw and Moltbook. Get expert AI governance advice and actionable security rules for IT managers to protect your organization's data.
Nicholas Lupien
Learn how to create effective Incident Response, Business Continuity, and Disaster Recovery plans to protect your organization from ransomware and other cyber incidents.
Macie Thompson
Is your vulnerability data just noise? Is traditional CVSS scoring failing to measure real-world risk? Discover a pragmatic approach for filtering, prioritizing, and gaining value.
Ben Webb
Recon InfoSec treats every pentest as a real attack, using them to enhance detection logic, refine procedures, and strengthen overall SOC operations.
Andrew Cook
Microsoft Teams is being abused in ransomware campaigns to gain VPN access. Learn the tactics and how to safeguard your organization.
Andrew Cook
Explore Recon InfoSec's proactive threat hunting methodology. Learn how our team uses threat intelligence, hypothesis-driven investigations, & tools to find and mitigate hidden threats before they cause damage.
Watson Brown
Phishing campaign exploits Zoom Events infrastructure to deliver credential phishing and malicious downloads, bypassing email security filters. Learn how to protect your organization.
Michael Robertson
Explore the predictable patterns of ransomware attacks and learn how to fortify your defenses with this insightful blog. Discover the common entry points, defense strategies, and recovery plans to keep your organization one step ahead of cybercriminals.
Andrew Cook
Increase your cybersecurity readiness with a solid plan for when breaches happen. Learn how to identify your response team, create a communication plan, document your strategy, and exercise it regularly.
Macie Thompson
In the pantheon of security systems few things are as under-rated as deception systems. Learn why they work and what more is needed.
Ben Webb
Lockbit may be gone, but the market for Ransomware as a Service (RaaS) is still here. Lasting change will require us to make these attacks less profitable.
Ben Webb
User training and guidance you can send right now to help prevent your organization from becoming a victim of wire transfer fraud.
Andrew Cook
In this blog post we cover a widespread phishing campaign Recon recently observed targeting multiple customers.
Luke Rusten
Recon's SOC recently responded to an attempted ransomware and extortion attack. It had all the markings of a nightmare scenario
Andrew Cook
The Recon incident response team recently responded to a case of business email compromise.
Andrew Cook
What is threat hunting? At Recon, we define it as “a concerted effort to identify attackers that bypassed our initial detection efforts.”
Andrew Cook
The Recon incident response team recently worked an intrusion case involving a ManageEngine Desktop Central server that was affected by CVE-2020-10189.
Luke Rusten