Optiv Blog

In the scenario, we focus on session management. The most common session management mechanism is a session cookie. We commonly see session cookies....

There is a growing trend in the information security and risk management world of ignoring low severity findings from security testing. Perhaps it....

“Actionability” is something we are starting to hear more and more from industry sales and marketing, but often doesn’t translate into reality for....

Traditionally, wireless networks were considered a luxury, as well as highly unreliable and unsecure. Over the past 10 years, wireless networks have....

Security OF the cloud versus security IN the cloud. This by no means is intended to be a riddle. In fact, the irony is that cloud computing has solved....

A command kill chain consists of payload delivery, code execution on a target system, and establishing a command and control (C2) channel outside of a....

TTPs are the “patterns of activities or methods associated with a specific threat actor or group of threat actors.”

The adversaries trying to breach your cyber defenses have a plan, do you? A few weeks ago, the National Institute of Standards and Technology (NIST)....

Cyber threat intelligence should always enable decision making and action, but what good is a cyber threat intelligence program if you take no action....

Cyber threat intelligence is a process required to make action-oriented, judgement-based decisions that are not otherwise possible. Optiv recommends....

For all functional roles in the organization prioritizing those mission critical to the business and its security, identify the specific knowledge....

The sad truth about penetration tests is that they are almost always successful in demonstrating dramatic security events. Even junior assessors can....