Optiv Blog

Tenable’s Derek Melber explains why security teams should secure existing hardware, operating systems, applications, software and Active Directory.

We leveraged Microsoft’s OAuth authorization flow for a phishing attack. Here’s step-by-step guidance on how to conduct it for security assessment.

Few organizations know how to secure cloud data. Visibility, discovery and classification drives costs down while improving the customer experience.

Optiv researcher Dan Kiraly examines automated endpoint evaluations in the first technical video of a series.

Multiple CVEs involving Active Directory Certificate Services and a new NTLM relay attack can be chained to compromise an Active Directory domain.

This post explains how identity is central to a secure cloud access governance program.

Zero Trust safeguards assets and data in the cloud, but organizations should also invest in building a Zero Trust culture.

The executive order on cybersecurity emphasizes coordinated, mandated levels of controls to respond to a growing threat to critical infrastructure.

Go365 performs user enumeration and password spraying attacks on organizations that use Office 365.

Recent high-profile cyber attacks, including the Colonial Pipeline ransomware and SolarWinds supply chain hacks, led to the White House executive....

Optiv highlights the attack strategy of using forged Kerberos tickets to compromise a domain, and provides ways to defend against it.

Optiv highlights the attack strategy of using forged Kerberos tickets to compromise a domain, and provides ways to defend against it.