This discursive blog explores the use of remote access tools in exploitations across OT/ICS and corporate environments. Whether restricted or supported, remote access tools are shown to benefit from the Darktrace product suite, including our DETECT, RESPOND and PREVENT product families.

Der Hauptbenutzer von Darktrace in einem Fertigungsunternehmen erklärt, wie Autonomous Response die durch menschliches Versagen entstehenden Cyber-Risiken verringert und es dem Sicherheitsteam ermöglicht, einen proaktiven statt reaktiven Ansatz für die Sicherheit zu wählen.

Erfahren Sie, warum Lighthouse Global, ein Technologieanbieter für Anwaltskanzleien und große Unternehmen, sich auf Darktrace verlässt, um seine E-Mail- und Cloud-Umgebung zu schützen, während sich das Unternehmen stetig verändert und wächst.

In diesem Blog werden die Herausforderungen bei der Sicherung hochkarätiger Veranstaltungen aufgeschlüsselt - darunter das "Zugangsparadoxon", die zunehmende Konvergenz von IT und OT und die Bedeutung einer schnellen Reaktion - es wird erklärt, wie selbstlernende KI das Spiel verändert.

Discover why Sellen Construction rely on Darktrace and Microsoft to protect their dynamic cloud environment, how AI Analyst saves its security team time in threat investigation, and how Darktrace enables self-learning protection across the business.

Complicated by increasing SaaS usage and global supply systems, the supply chain is the most pressing concern facing cyber security. This blog examines how Darktrace detected a phishing email from a trusted third party, which led to a vicious cycle of compromise.

This blog analyzes a sophisticated SaaS-based attack which leveraged several Microsoft 365 accounts to launch the offensive and maintain persistence.

Darktrace AI scheint einen Hafnium-Angriff auf anfällige Exchange-Server im Dezember 2020 entdeckt zu haben, drei Monate bevor der Zero-Day identifiziert wurde. Dieser Blog enthält eine ausführliche Analyse des Angriffs, die darauf hindeutet, dass die Hafnium-Kampagne viel früher begann als bisher angenommen.

This blog explains how AWS’s extension of VPC Traffic Mirroring to non-Nitro instances supports Darktrace’s real-time visibility and adaptive, autonomous defense for AWS cloud environments.

As working patterns continue to evolve, Darktrace provides visibility over the remote business, detecting everything from account takeovers to advanced phishing attacks. This blog discusses how Cradlepoint utilizes Self-Learning AI to secure its SaaS environments.

What happens when your two-factor authentication (2FA) has been hacked? What happens when security layers have been compromised, and a cyber-criminal has bypassed your security stack? This blog investigates how Darktrace’s Microsoft 365 connector detected a full SaaS account takeover, and launched a detailed investigation into the attack.

Version 5 offers a series of innovations across the Darktrace Immune System platform, bringing critical value to security teams grappling with the new normal. This blog explores how AI augments security teams with extended coverage across cloud services and zero-trust environments and an open architecture that enables seamless integrations.

In the first installment of a two-part series, Darktrace’s Max Heinemeyer reviews the IoT, Cloud, and SaaS trends of last year and forecasts what he expects to see in 2019.