Optiv Blog

Few organizations know how to secure cloud data. Visibility, discovery and classification drives costs down while improving the customer experience.

Optiv researcher Dan Kiraly examines automated endpoint evaluations in the first technical video of a series.

Multiple CVEs involving Active Directory Certificate Services and a new NTLM relay attack can be chained to compromise an Active Directory domain.

This post explains how identity is central to a secure cloud access governance program.

Zero Trust safeguards assets and data in the cloud, but organizations should also invest in building a Zero Trust culture.

The executive order on cybersecurity emphasizes coordinated, mandated levels of controls to respond to a growing threat to critical infrastructure.

Go365 performs user enumeration and password spraying attacks on organizations that use Office 365.

Recent high-profile cyber attacks, including the Colonial Pipeline ransomware and SolarWinds supply chain hacks, led to the White House executive....

Optiv highlights the attack strategy of using forged Kerberos tickets to compromise a domain, and provides ways to defend against it.

Optiv highlights the attack strategy of using forged Kerberos tickets to compromise a domain, and provides ways to defend against it.

The constant churn of audit and compliance testing drives the need for an automated risk management approach.

In this guest post, CyberGRX examines cyber attack vectors and offers advice on securing third-party relationships.