Categoria: Incident Response

Microsoft Puts ChatGPT to Work on Automating Cybersecurity

Microsoft has rolled out a preview version of Security Copilot, a ChatGPT-powered tool to help organizations automate cybersecurity tasks.

The post Microsoft Puts ChatGPT to Work on Automating Cybersecurity appeared first on SecurityWeek.

SecurityScorecard Guarantees Accuracy of Its Security Ratings

SecurityScorecard is offering free digital forensics and incident response (DFIR) services to customers that have scored an ‘A’ rating if they have been breached.

The post SecurityScorecard Guarantees Accuracy of Its Security Ratings appeared first on SecurityWeek.

Meta Develops New Kill Chain Thesis

Meta has developed a ten-phase cyber kill chain model that it believes will be more inclusive and more effective than the existing range of models.

The post Meta Develops New Kill Chain Thesis appeared first on SecurityWeek.

ChatGPT and the Growing Threat of Bring Your Own AI to the SOC

Two new surveys stress the need for automation and AI – but one survey raises the additional specter of the growing use of bring your own AI (BYO-AI).

The post ChatGPT and the Growing Threat of Bring Your Own AI to the SOC appeared first on SecurityWeek.

Revelstoke Security Raises $20 Million for SOAR Platform

Revelstoke Security has raised $20 million in a Series B funding round co-led by ClearSky Security and SYN Ventures.

The post Revelstoke Security Raises $20 Million for SOAR Platform appeared first on SecurityWeek.

Mistakes by Threat Actors Lead to Disruption, Not Just Better Blocking

Threat actors really only stop when their infrastructure is disrupted and their flow of funds disappears.

The post Mistakes by Threat Actors Lead to Disruption, Not Just Better Blocking appeared first on SecurityWeek.

New CISA Tool ‘Decider’ Maps Attacker Behavior to ATT&CK Framework

CISA has released a free and open source tool that makes it easier to map an attacker’s TTPs to the Mitre ATT&CK framework.

The post New CISA Tool ‘Decider’ Maps Attacker Behavior to ATT&CK Framework appeared first on SecurityWeek.

LastPass Says DevOps Engineer Home Computer Hacked

LastPass DevOp engineer’s home computer hacked and implanted with keylogging malware as part of a sustained cyberattack that exfiltrated corporate data from the cloud storage resources.

The post LastPass Says DevOps Engineer Home Computer Hacked appeared first on SecurityWeek.

Cygnvs Emerges From Stealth Mode With Incident Response Platform

Cygnvs, a California-based startup offering a secure communication and collaboration platform for cyber incident response, has emerged from stealth mode.

Founded in 2020, Cygnvs launched in stealth mode in May 2022 after raising $55 million in a Series A funding round led by Andreessen Horowitz, with additional investment from EOS Venture Partners and Stone Point Ventures.

The company says its platform was purpose-built as a guided cyber crisis solution that not only keeps key team members connected when responding to a cyber incident, but also ensures that they have the necessary visibility into response plan execution and that all steps of the operation are documented.

Cygnvs aims to fill a gap in communication and collaboration created by the need to work with members of different teams and with multiple third-parties when responding to a cyber incident, by providing each individual with the required level of visibility and management privileges.

“Each client has a whole bunch of 3rd parties that they need to work with in this space – outside counsel, forensics, consultants, insurance providers, etc. And the next client will have a different outside counsel, different forensics, different consultant, different insurance provider etc. What is required is a completely new way of managing tenancy,” Cygnvs founder and CEO Arvind Parthasarathi explains.

With cyber crises bound to happen – it is always a matter of when, not if – Cygnvs aims to help organizations be prepared to take the right steps toward resolving incidents and ensure that those steps are managed, secure, and auditable.

Cygnvs’ platform provides each participant to the cyber crisis response, regardless of whether they are connected to the internal network, at home, or mobile, with a secure environment with interactive and actionable processes and checklists. Everyone can be assigned a role and responsibilities, while tasks and workstreams can be easily updated as the situation evolves.

The solution is now available for purchase directly from Cygnvs, for those organizations that can afford their own experts, response processes, and playbooks, and through cyberinsurance providers, as a no cost benefit of insurance policies, for those organizations that lack the resources and expertise to implement their own cyber incident response teams.

“A benefit of working with the insurance industry is that insurance organizations have accumulated best practices due to the volume of their experience. Organizations [that] get Cygnvs through their insurance provider use the panel of experts the insurance provider has assembled and use the prebuilt playbooks and processes that the insurance provider has best practices on etc,” Parthasarathi says.

Cygnvs is now generally available in the US, Canada, EU, and the UK, in English, French, Spanish, German, and Japanese. The company says it already has 1,000 clients across the education, finance, healthcare, manufacturing, media, retail, technology, and utilities sectors.

The company says that the $55 million raised in Series A funding helps it improve its platform and expand sales operations.

The post Cygnvs Emerges From Stealth Mode With Incident Response Platform appeared first on SecurityWeek.

Thoma Bravo to Buy Magnet Forensics in $1.3B Transaction

Thoma Bravo’s shopping spree in the cybersecurity lane is showing no signs of slowing down.

The private equity giant has announced plans to spend $1.3 billion to acquire Canadian software firm Magnet Forensics, a deal that expands Thoma Bravo’s push into the lucrative cybersecurity category.

Magnet Forensics, based in Waterloo, markets a suite of tools in the digital forensics and incident response space to help businesses hunt for early signs of data breaches.

Thoma Bravo said its newly created Morpheus unit will acquire Magnet Forensics for approximately $1.3 billion and take the company private.

Once the deal closes, Thoma Bravo said the plan is to combine Magnet Forensics with Grayshift, a third company that also sells digital forensics software and tools. Thoma Bravo has majority control of Grayshift after a strategic investment last July.

With the two combined entities, Thoma Bravo’s ambition is to create “a powerful end-to-end digital investigations platform” for public safety agencies to work on cybercrime cases.

Grayshift markets mobile device digital forensics tools to help with lawful access and extraction.

The transaction is expected to close by the second quarter this year.

Over recent years, Thoma Bravo has bought into the cybersecurity business in a big way, shelling out billions to acquire Ping Identity ($2.8 billion deal), SailPoint ($6.9 billion all-cash) and Sophos ($3.9 billion).

The private equity firm’s portfolio also includes Imperva, LogRhythm, AppOmni, Proofpoint and Venafi.

The post Thoma Bravo to Buy Magnet Forensics in $1.3B Transaction appeared first on SecurityWeek.