Optiv Blog

It’s National Cybersecurity Awareness Month – #NCSAM. So what do dodgeball and #phishing have in common? Here are the five Ds of dodgeball and the....

The latest threat detection/response iteration – managed extended detection and response (MXDR) incorporates the strengths of previous offerings.

This post overviews the Varonis DatAlert Suite, its capabilities and how it stacks on top of the core Varonis Data Security Platform.

Tenable’s Derek Melber explains why security teams should secure existing hardware, operating systems, applications, software and Active Directory.

We leveraged Microsoft’s OAuth authorization flow for a phishing attack. Here’s step-by-step guidance on how to conduct it for security assessment.

Few organizations know how to secure cloud data. Visibility, discovery and classification drives costs down while improving the customer experience.

Optiv researcher Dan Kiraly examines automated endpoint evaluations in the first technical video of a series.

Multiple CVEs involving Active Directory Certificate Services and a new NTLM relay attack can be chained to compromise an Active Directory domain.

This post explains how identity is central to a secure cloud access governance program.

Zero Trust safeguards assets and data in the cloud, but organizations should also invest in building a Zero Trust culture.

The executive order on cybersecurity emphasizes coordinated, mandated levels of controls to respond to a growing threat to critical infrastructure.

Go365 performs user enumeration and password spraying attacks on organizations that use Office 365.