Optiv Blog

Multiple CVEs involving Active Directory Certificate Services and a new NTLM relay attack can be chained to compromise an Active Directory domain.

This post explains how identity is central to a secure cloud access governance program.

Zero Trust safeguards assets and data in the cloud, but organizations should also invest in building a Zero Trust culture.

The executive order on cybersecurity emphasizes coordinated, mandated levels of controls to respond to a growing threat to critical infrastructure.

Go365 performs user enumeration and password spraying attacks on organizations that use Office 365.

Recent high-profile cyber attacks, including the Colonial Pipeline ransomware and SolarWinds supply chain hacks, led to the White House executive....

Optiv highlights the attack strategy of using forged Kerberos tickets to compromise a domain, and provides ways to defend against it.

Optiv highlights the attack strategy of using forged Kerberos tickets to compromise a domain, and provides ways to defend against it.

The constant churn of audit and compliance testing drives the need for an automated risk management approach.

In this guest post, CyberGRX examines cyber attack vectors and offers advice on securing third-party relationships.

Sam Smith says he’s proud to be part of an industry that literally helps keep our society from crashing on a daily basis.

Optiv’s new remediation pipeline model tests automation before production deployment, thereby speeding up MTTR.