This blog discusses Darktrace’s detection of a large-scale SaaS compromise and the subsequent phishing attack propagating through a learning institution.

Not all ICES is created equal, as that category contains products with a variety of security and integration capabilities. Darktrace/Email uses Self-Learning AI for bespoke, precise protection that integrates across the digital estate.

In a crowded market for ICES vendors, those who can offer flexible deployment will remain ahead of the game. This blog explores how vendors can leverage APIs, journaling, cloud and on-premise deployment to provide bespoke in-depth defense for every organization.

While 94% of all cyber-attacks come through the inbox, their destination is almost never email. Attacks often traverse to other areas, like cloud apps and infrastructure, endpoints, or networks. As a result, although security teams must establish a strong cornerstone of email security, they should also consider how those solutions fit into the wider security posture.

As the practical users of email, employees should be considered when designing email security. This employee-conscious lens to security can strengthen defenses, improve productivity, and prevent data loss.

This blog outlines the challenges faced by security teams in protecting organizations from email-based attacks. It explores how a modern, AI-based security solution can tackle these pain points with targeted autonomous action, frictionless UIs, optimized workflows and full visibility of account users.

As attackers move from low sophistication, spray-and-pray campaigns to more targeted and sophisticated attacks, email security needs to understand the organization, not past attacks, to be able to keep up with attacker innovation and stop novel attacks on the first time of asking.

Financial institutions must follow specific IT security compliance standards, which regularly change. One credit union turned to Darktrace to align with its approach to compliance and risk, benefitting from email protection and proactive attack surface management. 

Darktrace has recently detected a trend of threat actors hiding malicious links within Google Translate domains to avoid detection. In one incident, these links were used to harvest the recipients’ credentials.

Whilst Quantum Ransomware has been characterized by speedy and efficient attacks, Darktrace recently detected a surprising incident where the group used a long dwell time to achieve their goals. This blog explores the effect of this group's change in strategy and DETECT/Network’s coverage over the event.

In this blog, a Darktace analyst explores common email impersonation techniques seen by the SOC team and explains how DETECT/Email is able to identify them.

The current threat landscape is rife with social engineering attempts across email, SMS and digital messaging. Discover why MFA and security awareness alone aren't enough to keep organizations safe from these tactics, and what Self-Learning AI can do to help.

Learn about the prevalence of HTML attachments in phishing emails, as observed by Darktrace’s 24/7 SOC Service.

The escalation of the conflict between Russia and Ukraine has led to fears of a full-scale cyberwar. In this discursive blog, analysts cover the most popular methods of attack in the conflict so far, some of the hacking groups involved, and the observations Darktrace has made in its own customer environments.

Deux leaders dans leur domaine discutent de l'importance de la cybersécurité. Découvrez les cyberrisques en Formule 1, et ce qui distingue McLaren du reste du peloton.

Découvrez pourquoi Lighthouse Global, un fournisseur de technologies pour les cabinets d'avocats et les grandes entreprises, fait confiance à Darktrace pour protéger son environnement de messagerie et cloud au fur et à mesure que l'organisation change et se développe.

Découvrez les vulnérabilités ouvertes par les actifs basés sur le web, et comment l'IA peut aider les équipes de sécurité à détecter les actifs malveillants et à rester en sécurité.

Dans la première prédiction de notre série sur l'avenir de la cybersécurité, Justin Fier explique pourquoi l'informatique et les communications sont désormais le secteur le plus ciblé et pourquoi il s'attend à ce que le nombre de cyberattaques sur la chaîne d'approvisionnement en logiciels ne fasse qu'augmenter en 2022.

Darktrace experts were on the front lines throughout 2021 – a historic year of cyber-attacks. In this blog, those experts look ahead, offering their predictions for cyber security in 2022.