Cyber Security x Zero Trust

Choose the Best of the Best EDR Based on EDR Telemetry Scores In the ever-evolving cybersecurity landscape, Endpoint Detection and Response (EDR) solutions are crucial for detecting and responding to threats in real time. However, not all EDRs are created equal. The quality of telemetry—what data they collect, how deep the visibility goes, and how actionable the insights are—can significantly impact your security posture. To help you make a well-informed decision, we've referred to EDR Telemetry Scores , a third-party scoring system that compares the telemetry capabilities of leading EDR solutions using a consistent methodology. This independent benchmarking evaluates how different EDRs stack up based on their ability to provide: Deep process visibility File and network activity capture Contextual relationships And much more Explore the live scores below and compare EDR solutions based on the metrics that matter most to your organization: Understanding the...

Top Cybersecurity Tech Trends in 2025 Top Cybersecurity Tech Trends in 2025 By Admin | June 2025 As cyber threats become more sophisticated, staying ahead of the curve is essential for organizations, security teams, and individuals. Here are the top cybersecurity technology trends shaping 2025. 1. AI-Driven Threat Detection & Response Artificial Intelligence (AI) continues to dominate in cybersecurity. In 2025, we’re seeing broader adoption of AI for: Real-time anomaly detection using behavioral analytics Automated incident response with AI-driven playbooks Predictive threat modeling for future attack surfaces 2. Zero Trust Architecture (ZTA) Goes Mainstream Zero Trust is no longer just a buzzword. With increasing adoption across industries, organizations are implementing: Continuous user verification through IAM and MFA Microsegmentation of networks to isolate breaches Device trust scoring and adaptive a...

Bypass Microsoft Defender Cloud Apps Blocking with SSH & FoxyProxy Bypassing Microsoft Defender Cloud Apps Blocking with SSH Tunneling and FoxyProxy With Microsoft Defender for Endpoint (E5 license) and Microsoft Defender for Cloud Apps, organizations can block access to unsanctioned web apps using native integration ( see official documentation ). However, it is possible to bypass this control by tunneling web traffic through an SSH server and using a proxy add-on like FoxyProxy in the browser. Before Bypass – Blocked by Defender Cloud Apps The Bypass Technique: Step-by-Step Set up a VPS or VM you control (e.g., on DigitalOcean, AWS, etc.) with SSH access. Start an SSH SOCKS5 Tunnel on your machine with the following command: ssh -D 8123 -q -C -N username@your-vps-ip For Windows users, you can use PuTTY to set up a dynamic tunnel under SSH > Tunnels . Install FoxyProxy on your browser (Firefox/Chr...

The Seven Pillars of Zero Trust – NSA Focuses on Network Segmentation The Seven Pillars of Zero Trust: NSA Emphasizes Network Segmentation On March 5 , the National Security Agency (NSA) released its latest Cybersecurity Information Sheet (CIS) aimed at reinforcing the importance of Zero Trust security principles, with a particular focus on the Network and Environment pillar . Key takeaway: The NSA strongly recommends network segmentation to prevent unauthorized users from accessing sensitive data. Segmenting and isolating the network helps ensure that even if a system is compromised, the attacker’s movement is restricted, minimizing damage. What Is Zero Trust? Zero Trust is a cybersecurity strategy built on the idea that no one—whether inside or outside the network—should be trusted by default. Every access request must be verified, and users should only be granted the minimum level of access necessary. The Seven Pillars of Z...

Cybersecurity Domain Map v3.1 – Explained Cybersecurity Domain Map v3.1 – A Comprehensive Breakdown Cybersecurity is a vast field, and it's easy to get lost in its many facets. Fortunately, frameworks like Henry Jiang’s Cybersecurity Domain Map v3.1 offer a visual and conceptual guide to help practitioners, students, and decision-makers understand the key domains of cybersecurity. Understanding the Domains The map is divided into several major domains, each with its own objectives and tools. Here's a quick summary of some of the major areas: 1. Governance and Compliance Policies, standards, and procedures Compliance frameworks: GDPR, HIPAA, PCI-DSS, etc. Risk-informed decision making 2. Risk Management & Assessment Enterprise Risk Management (ERM) Risk treatment plans and acceptance Third-party and supply chain risk 3. Security Architecture & Engineering Data protect...

Understanding Detection & Response Types: EDR, MDR, NDR, XDR Understanding Detection & Response Types: EDR, MDR, NDR, XDR Cybersecurity threats are evolving, and organizations must understand different detection and response technologies. This post breaks down EDR, MDR, NDR, and XDR — their purpose, capabilities, and use cases. What Are These Detection and Response Types? EDR (Endpoint Detection & Response): Focuses on detecting and responding to threats on endpoint devices like laptops and desktops. MDR (Managed Detection & Response): Outsourced service providing EDR capabilities plus expert monitoring and incident handling. NDR (Network Detection & Response): Monitors internal network traffic for threats and anomalies. XDR (Extended Detection & Response): Combines multiple data sources (endpoint, network, cloud) to offer broader visibility and response capabilities. Comparison Table Fe...