Optiv Blog

Optiv’s Micheal Steele shares insights gained from over 10 years of experience in cyber operations and privileged access management.

The REvil Ransomware group’s reemergence isn’t a surprise, given the context of the Ukraine invasion.

Our new vulnerability and asset scoring mechanism more accurately identifies business risk associated with vulnerabilities.

In this series, we explain the threats, issues and impacts associated with managing third-party organizations and discuss how best to minimize risk.

This post highlights different tools and approaches for testing thick client applications for vulnerabilities.

PCI DSS v4.0 permits the traditional method and a new customized approach. Organizations should consider which best suits their requirements.

The Cyber Incident Reporting for Critical Infrastructure Act requires organizations to report cybersecurity incidents within 72 hours.

The new Gramm-Leach-Bliley Act (GLBA) Safeguards Rule is much more prescriptive and has more “teeth.” The compliance deadline is December 9, 2022.

The new Payment Card Industry Data Security Standard – version 4.0 – has been released. This post explores the details of the new standard.

A new agreement will allow the transfer of Europeans’ personal data to the U.S. This post offers advice for affected organizations.

What You Need to Know about Privileged Access Management (PAM)

Some companies should update to PCI DSS v4.0 now, while others should wait. This post features helpful details and advice on how to begin preparing.