All Articles

In the ever-evolving landscape of cybersecurity, staying ahead of threats requires more than just reactive measures. Organizations are increasingly adopting proactive strategies, leveraging continuous defense mechanisms to safeguard their digital assets. This approach involves integrating the latest threat intelligence, zero-day vulnerabilities, and attack techniques into automated defense systems. By doing so, companies aim not only to protect their networks but also to demonstrate their commitment to security excellence.

Here is the verbatim discussion:

so it's not just a dumb attack right they're using the capability of chaining things together understanding and integrating the the newest um zero days that are being announced and newest vulnerabilities that are being announced to be able to integrate those in right and to do that in an automated way for the benefit of the organization and that's that is a that's a capability and unfortunately not everybody's doing it but the leading companies and organizations are which again differentiates them from everybody else it makes them less attractive it makes their defensive positions stronger and auditable right and they can show that due diligence if something bad does happen they can show the Auditors they can show the court if it gets dragged into court that yes we are above right even the median average we do more and bad things are going to happen there's no way around that eventually it will but being able to show that have that confidence to to show your stockholders to show the courts to show your customers and clients and your business partners that yes you are Head and Shoulders Above the Rest because you're doing this continuous type of attacks against your system and again auditable you can show the results and when you get results you it's actionable you can go in and close that that firewall hole you can go in and Harden that new server that someone brought up and didn't tell you about right or that new database that got formed and has all this sensitive data in it with that kind of continuous attacking it gives you the Practical intelligence from an operations perspective to go in and resolve those issues again managing your risk hopefully to that Target that you want that's what you kind of covered it so well that even though I'm from this field I have nothing to add let talk about a few things no you need to add how your company does it better so I can pick on you and challenge you I mean are you perfect you know in your organizations what are your strengths what are your customers coming to you and asking as a priority I mean that's something I want to know you know are they saying I really want that red team kind of report or I want to be defensible or I want it as part of my audit or is it the operations guy going I'm really worried about that shadow it I've got dozens of admins and Engineers spinning up servers all the time that I don't know about what are the two or three asks yeah so so you made a great asked a great question so one definitely is Shadow it getting a visibility of what all assets are going up that's one uh continuous testing for for organizations which are kind of moving up in the maturity they're looking for continuous testing it's not just continuous red teaming they're thinking about continuous testing in their uh devops and their building up the application so they're thinking of continuous so you're looking at products as well right so you're we don't do that no we don't we don't do for the internal applications I'm just talking about General Trends we we focus on one are Mak yeah so so that's another interesting thing we're seeing like the more um mature organizations are going Beyond not just like continuous red timming but also continuous um devop security continuous Cloud security Etc so that's a great mindset so I'm a big believer of continuous security whatever be that area so so that's and also purple teaming is another interesting thing which uh is very helpful because one is you kind of go and attack.