A8 Team

JavaScript: how NPM maintainer accounts amplify risk

20 compromised JavaScript package “maintainer” accounts — that’s all it takes to bring down the global digital supply chain through…

To Tor or not to Tor?

What’s the ROI of threat hunting?

How can IT security threat hunters measure success? That's one of the core questions raised in the SANS Threat Hunting Survey, co-sponsored…

Operation “Shields Up”: web isolation in the U.S. military

How can government organizations, private enterprises, and academic institutions minimize the cybersecurity and privacy risks associated…

Malvertising: What You Should Know

Large-scale malvertising campaigns have pushed more than a billion malicious ads through online ad networks onto "secure" web browsers. Ad-…

How to Secure Your Content Management System (CMS)

By Derek Handova Content management systems present attractive targets for cybercriminals and state-sponsored adversaries. E-commerce…

JavaScript: How Browsers Give Away the Store

Did you know? Attackers use  your locally installed browser base and JavaScript to draw up intricate exploit roadmaps for targeted…

The Gift of Access

I have spent the bulk of my Navy career working to inspire transformational change both at the unit and enterprise levels. Though my navy…

Showdown: VPN vs. Cloud Browser

In many companies, VPN has become a staple of the traditional IT security stack. Annually, mid-sized organizations (<5,000 employees)…