On Threat Intelligence

Red Canary

If my tour of the vendor floor at RSA was any indication, “threat intelligence” is rapidly becoming the new “APT,” which is to say that it means different things to different people and despite the best efforts of those who actually know what is going on, it may cease to have any meaning at all if those who value money … Read More

The Price of Caring About “Evidence”

Red Canary

In 2012 one of the offices in the government of the State of South Carolina suffered a digital breach. Reporting at the time estimated that the total cost of the breach was $14m, with incident response costs alone estimates at $500,000. The 2013 NetDiligence survey of data breach insurance payouts reports that of the 140 claims submitted to insurers, 88 … Read More

The Future of Threat Detection

Red Canary

Several years ago, when we were still very much a start-up, we sent three of our team (of five) to conduct an incident response for a much larger company. Two of the team members had done incident response before; the third was more the kind of guy who caused incidents rather than responded to them. Three weeks later, after delivering our … Read More